Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
File: jWvXmZuRV6pP3EcXQUWA1PziQDk.mft (raw, json)
Hash identifier: 6ycrAL4fHJhw/cYmXD1CdBWbcCLgcQ6gjDrC3nurY3U=
Subject key identifier: 31:4F:F1:7C:AB:2C:0D:4F:CC:CA:5D:BF:0E:E3:FA:1D:AB:DA:52:19
Authority key identifier: 8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
Certificate issuer: /CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Certificate serial: 01965B03067971D0E9ED7E2F6AA245F0000D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
Manifest number: 0CD5
Signing time: Tue 22 Apr 2025 01:00:47 +0000
Manifest this update: Tue 22 Apr 2025 01:00:47 +0000
Manifest next update: Wed 23 Apr 2025 01:00:47 +0000
Files and hashes: 1: jWvXmZuRV6pP3EcXQUWA1PziQDk.crl (hash: jBiEd/+mNejLByeBKS4SgJipZj0D4CMlVegdhHfLrkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:06:79:71:d0:e9:ed:7e:2f:6a:a2:45:f0:00:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Validity
Not Before: Apr 22 01:00:47 2025 GMT
Not After : Apr 23 01:00:47 2025 GMT
Subject: CN=314ff17cab2c0d4fccca5dbf0ee3fa1dabda5219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:04:20:cd:eb:d8:24:47:ad:d7:4b:43:56:
99:ab:ec:fb:fa:d9:78:ca:9a:93:40:c9:a3:09:9d:
f4:a9:59:38:e7:23:f8:99:0b:72:15:73:9d:52:d3:
7a:60:30:86:3e:c1:a2:1a:34:bb:1d:3b:50:31:cb:
c0:cd:b5:14:e6:6b:41:39:a9:5f:25:c4:25:5f:3a:
22:44:14:a7:5e:f6:82:4b:21:8f:18:d4:79:f4:ef:
99:73:eb:32:c7:56:93:d1:17:b9:75:e9:4d:8e:18:
58:09:ac:ae:2b:4b:83:81:b9:17:90:6c:7a:3b:63:
70:b7:9c:8d:0f:93:93:4c:a2:33:07:14:99:8a:58:
75:a8:bc:82:14:da:23:af:89:d6:1a:b8:d3:c7:c2:
ac:ff:50:20:bc:45:62:b2:45:0a:c7:50:37:47:82:
a0:52:c2:72:5d:3b:88:e5:fc:6e:ec:ed:b8:4b:61:
ae:c3:68:5d:33:8b:6e:83:ba:88:fa:06:fd:23:2a:
8a:5a:38:da:7d:e3:f8:bc:b0:5e:c3:c0:4e:70:0b:
62:a4:94:f3:53:2e:4d:b9:29:1e:5f:a8:d3:15:4a:
b5:bc:17:ef:9c:8f:68:2d:3a:c0:cd:eb:c8:11:95:
ba:8d:c9:18:05:2d:7f:a8:4d:df:5c:ac:37:9b:37:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4F:F1:7C:AB:2C:0D:4F:CC:CA:5D:BF:0E:E3:FA:1D:AB:DA:52:19
X509v3 Authority Key Identifier:
keyid:8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:46:93:a4:8f:e3:46:f2:aa:44:dc:08:48:2d:0d:a2:2f:d0:
18:3a:0c:0c:55:5e:52:39:8f:9e:38:f7:4d:21:fa:eb:a8:5a:
18:c1:4a:01:fb:74:c4:56:bb:14:44:30:1a:4b:11:50:0c:59:
05:94:e8:2e:23:d6:35:ec:b9:b2:4e:9b:b4:d1:ca:3b:77:1c:
40:d8:b4:d3:a2:05:23:66:23:20:24:45:33:67:24:a1:7e:c2:
1c:ea:9b:10:e3:ac:9b:78:68:b0:f5:08:43:0f:03:8f:e7:10:
a6:03:ad:3a:68:02:c5:75:c0:4c:ca:2a:e6:03:ea:e4:57:0e:
21:bc:2e:c8:62:8d:f9:c0:db:a2:c4:b6:a8:7e:e6:89:70:c6:
bb:ef:7d:6d:6c:79:19:01:da:8c:57:17:36:5d:8c:58:40:ac:
d3:4c:cb:69:b4:cb:46:52:8c:5c:30:71:90:bd:c1:8a:6c:9d:
c4:5b:a4:e9:31:5e:0c:cf:14:a9:fe:96:af:2f:74:f0:2a:5a:
97:56:08:a6:56:c8:31:70:33:08:c6:61:cf:79:28:29:22:67:
d2:a3:bc:b1:12:50:aa:0f:81:3d:51:ed:89:ce:e6:36:5a:64:
25:30:cb:43:eb:f1:1e:af:11:a1:74:2b:b3:81:05:04:6e:7c:
80:9c:cf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:31:37 2025 by rpki-client