Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
File: jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft (raw, json)
Hash identifier: iWlQdy+4Ix6rmm/EsFnT9NYCwn3wRkkySs+wRDpA7iE=
Subject key identifier: 40:49:46:9E:C8:F8:81:F8:C4:B7:ED:FB:62:5A:D2:1B:13:81:26:82
Authority key identifier: 8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
Certificate issuer: /CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Certificate serial: 01958C602EDF60321DE8A6AAC5A4261F50B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
Manifest number: 0440
Signing time: Wed 12 Mar 2025 22:01:08 +0000
Manifest this update: Wed 12 Mar 2025 22:01:08 +0000
Manifest next update: Thu 13 Mar 2025 22:01:08 +0000
Files and hashes: 1: jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl (hash: diOdkBt9iiGc2il6GluuwdVfXHs3cyhPLuBYoTt0A0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:2e:df:60:32:1d:e8:a6:aa:c5:a4:26:1f:50:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Validity
Not Before: Mar 12 22:01:08 2025 GMT
Not After : Mar 13 22:01:08 2025 GMT
Subject: CN=4049469ec8f881f8c4b7edfb625ad21b13812682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:4f:8c:9a:e6:af:d0:5c:fc:23:30:0d:d4:
c9:99:13:2a:37:49:0e:75:6d:e3:ab:d0:0b:cf:da:
3e:44:95:53:93:a2:db:89:4b:e7:74:78:65:c6:6c:
4d:5e:36:10:99:fa:fc:9d:91:e1:f5:6e:b7:12:93:
7a:d4:9e:de:fc:26:25:71:be:32:cd:30:f0:bb:0b:
9b:da:9a:50:2a:57:4d:e7:10:a6:b2:cb:63:9e:59:
35:5b:0a:7b:24:23:a3:b3:04:e4:82:e1:28:c5:6e:
c3:c6:ea:38:6a:1c:e0:bd:14:e7:a1:cf:2d:3e:52:
c0:8c:19:7f:66:aa:c5:42:e4:38:a4:1e:3b:03:39:
62:c9:75:94:85:fc:b7:78:0f:ab:99:69:83:55:9d:
bc:cb:ef:7e:93:86:57:b7:60:e7:6c:de:e4:1d:b4:
99:be:91:b1:5b:cc:65:95:01:92:34:c6:a7:3e:6c:
47:16:25:ed:d3:f1:8e:2b:d9:71:54:58:ca:ff:8d:
73:0b:56:06:90:c2:96:71:b4:b8:6c:88:6d:2b:2e:
9e:e3:3b:ab:7c:90:f5:f3:88:f9:db:d7:fc:63:e9:
59:de:ef:8e:bb:62:67:44:f3:e3:b6:43:f3:6c:51:
ef:54:dd:5e:08:a1:b4:aa:2c:ff:36:d7:8a:a1:1f:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:49:46:9E:C8:F8:81:F8:C4:B7:ED:FB:62:5A:D2:1B:13:81:26:82
X509v3 Authority Key Identifier:
keyid:8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ed:df:4d:55:9e:4b:b7:81:3d:a6:3b:ba:c6:3a:02:b2:56:
f0:10:e1:8e:d4:3c:d6:59:3e:fa:5a:6d:d0:7d:25:53:18:e0:
4e:f1:f6:38:90:bc:68:45:9f:5c:82:f5:84:f1:fe:38:00:a8:
e5:c5:62:3c:fc:b8:f7:f4:5c:63:2f:11:72:e2:4b:54:31:3d:
70:7b:14:75:79:93:8f:7f:bc:36:07:f8:15:a2:83:b4:f1:30:
5e:f7:84:2d:21:d2:1d:ed:05:6a:a7:18:bd:0f:35:33:df:6d:
7f:86:1b:39:3b:d3:5e:11:13:0e:6e:80:93:b8:6c:14:df:d6:
af:11:5a:78:63:05:c9:6a:84:e4:4c:78:46:ca:4f:ff:6f:8d:
60:8f:e6:06:78:38:34:c0:63:ba:ab:6e:e4:a9:40:dc:77:6b:
9b:49:68:8c:b0:55:46:88:2b:b3:a8:83:18:0c:bc:71:3d:ec:
de:16:52:1e:5a:5e:a7:1a:2a:bb:72:b2:7b:13:2f:61:fa:bc:
a5:4d:42:00:9b:2f:61:00:c8:e0:23:50:8d:91:ff:80:53:80:
46:31:ee:0e:03:25:4d:a6:3f:1e:c5:ed:51:d6:6b:92:68:9b:
ab:8e:4c:0d:ee:68:36:a5:8a:e3:90:aa:b2:2d:b9:bd:73:aa:
5d:51:bc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:15 2025 by rpki-client