Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier: 9B4WMBOzfYBdTi61EP3smmzFIEf1G/AWz5gMga3ua8Q=
Subject key identifier: 30:C3:72:56:24:71:C5:F8:C0:81:01:5B:4D:5D:02:50:80:CF:EA:F0
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial: 0196579404DA59640B045D9245130EDFD838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number: 1451
Signing time: Mon 21 Apr 2025 09:00:40 +0000
Manifest this update: Mon 21 Apr 2025 09:00:40 +0000
Manifest next update: Tue 22 Apr 2025 09:00:40 +0000
Files and hashes: 1: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: 6aefRJ6YOmjEiO3aUbj7fnyCPCMX2Q2rIlpN0OSu2as=)
2: ifTKeL7Q3yOfbgGQD-O0V2FKxJg.roa (hash: JhNUlPYthTeXHHV7LF1Jgo8sCxuBA07GISDC2g5jYXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:04:da:59:64:0b:04:5d:92:45:13:0e:df:d8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Validity
Not Before: Apr 21 09:00:40 2025 GMT
Not After : Apr 22 09:00:40 2025 GMT
Subject: CN=30c372562471c5f8c081015b4d5d025080cfeaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:64:c8:3a:15:e3:cd:fb:94:89:3b:54:c9:d5:
b0:16:aa:ea:c8:d5:81:89:e9:9e:0e:a3:49:60:a5:
05:3b:fd:95:c3:34:d2:5c:49:74:91:ca:c4:ee:a2:
95:71:70:f4:57:5a:85:7e:34:53:e5:e8:06:45:63:
13:9b:6c:53:db:9f:15:95:70:8c:b4:f1:44:74:d7:
94:0c:5c:be:7d:58:da:44:10:54:3b:7e:cb:6f:36:
fb:99:c6:3b:0b:e9:b1:a6:ef:81:0a:65:26:e2:d4:
13:b6:e0:dd:08:01:ba:7a:fd:fa:fa:2e:e2:87:f3:
f3:60:13:7f:11:ad:8f:1a:b5:b1:38:e8:bd:ef:8d:
ef:b1:ea:cb:29:62:00:30:51:f1:be:c5:f4:2d:7d:
70:19:32:88:39:55:9f:70:50:fa:31:54:f5:27:e9:
c2:4d:ea:ed:99:ad:5c:d7:88:01:f4:ab:9a:03:9c:
9e:be:d1:71:5e:75:8d:14:96:46:71:d8:cf:83:ba:
8b:df:2f:59:51:d5:cb:42:c0:b1:59:e3:67:b3:97:
e1:21:c1:0f:c2:3a:c0:96:10:1d:db:b2:c5:02:87:
a7:c7:70:eb:9d:5e:ef:fa:26:ef:24:bf:86:cd:e1:
92:55:04:0d:d8:b1:e8:e0:13:b9:9d:c4:0e:ed:f2:
d9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C3:72:56:24:71:C5:F8:C0:81:01:5B:4D:5D:02:50:80:CF:EA:F0
X509v3 Authority Key Identifier:
keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:85:42:5e:f7:8f:5a:ba:ff:cc:29:74:bb:71:3d:dc:ae:9e:
55:b5:aa:73:00:21:0f:2b:84:2b:80:f2:73:26:15:e0:91:ea:
ce:56:f4:c7:b9:a6:8e:0e:34:5a:16:ce:fd:d1:6c:8e:62:57:
b6:83:34:93:1f:c9:b6:1d:70:63:0b:3d:97:48:b5:1b:b3:a7:
1f:4c:32:ef:87:59:c5:7e:76:f1:75:a7:a2:f9:e3:9f:a8:07:
c1:26:e7:52:d3:b6:3d:8f:39:71:1f:95:9a:da:bb:14:6d:c1:
f3:2f:a2:6f:49:cd:55:5a:d5:05:51:99:58:d4:71:f9:a0:4a:
dc:35:15:fb:4b:0a:fe:2c:fc:55:e1:ee:07:da:74:90:6b:21:
c9:9f:6c:3c:92:0f:1d:bd:eb:66:b2:b0:f3:03:f4:c1:af:8c:
42:b5:94:e8:2f:a2:1b:74:e3:c9:e8:4e:c8:61:5a:d3:51:0c:
d5:a1:72:cd:35:fe:81:32:99:1e:9f:69:1d:f8:6f:0a:35:d6:
9b:7d:fe:07:04:e1:61:ef:b9:0c:d0:16:af:bd:f4:cd:b4:9d:
7e:af:64:0d:5e:6c:d0:2f:19:14:93:2c:dc:ee:7c:ac:3c:1e:
14:70:d1:3a:d4:96:7b:cd:75:f2:b8:31:eb:8f:39:71:99:63:
93:72:db:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:47:19 2025 by rpki-client