Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
File: 0jbg4txaKEOOMOv9HWpqlNs9HEA.mft (raw, json)
Hash identifier: ZwAMERH6tel0fExficud5CltZs6dlEbGc2OVMPxxHH0=
Subject key identifier: 1D:02:F6:36:82:04:DE:5E:B9:5A:41:E3:90:0A:C5:BC:8C:40:24:61
Authority key identifier: D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
Certificate issuer: /CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Certificate serial: 01965B02DF161EC9CD68D2FB4C7F8EA0E4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
Manifest number: 0F7B
Signing time: Tue 22 Apr 2025 01:00:36 +0000
Manifest this update: Tue 22 Apr 2025 01:00:36 +0000
Manifest next update: Wed 23 Apr 2025 01:00:36 +0000
Files and hashes: 1: 0jbg4txaKEOOMOv9HWpqlNs9HEA.crl (hash: KZW4mQCIgZTuVVcAy7WJRTaTY9EJfaqLtc6cWp91B1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:df:16:1e:c9:cd:68:d2:fb:4c:7f:8e:a0:e4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Validity
Not Before: Apr 22 01:00:36 2025 GMT
Not After : Apr 23 01:00:36 2025 GMT
Subject: CN=1d02f6368204de5eb95a41e3900ac5bc8c402461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:97:28:87:72:66:e7:28:34:37:00:0e:57:
93:e4:48:68:c3:4a:fd:45:1b:3c:e6:f8:09:4b:f6:
ab:cc:d5:78:ff:cb:5b:e6:d3:59:b2:6e:80:01:33:
78:d4:7c:84:a8:c2:1f:a0:0a:98:48:41:d1:04:e4:
4a:48:b1:29:ab:06:62:24:3b:8f:26:f3:ef:46:ce:
a9:23:b9:d7:1a:d0:64:57:36:d1:fb:f4:06:28:9b:
f9:99:f7:26:63:5e:7f:6f:53:6d:2f:c3:ef:77:9f:
5e:1a:f4:70:05:cd:25:3c:b1:a3:b4:31:ce:59:ad:
ec:d3:f8:de:63:83:fb:2e:6f:93:26:54:72:f4:97:
5a:c3:f3:9d:36:32:8d:a2:f6:e1:6d:9f:35:6e:7f:
6a:69:00:93:d5:6e:4f:b9:8e:d4:5b:f6:51:e8:cd:
d0:bf:1f:62:8e:ab:b3:d9:4e:62:31:07:83:a7:39:
fe:9e:29:fb:e4:91:d4:e9:2c:a9:3b:1d:3f:2e:81:
1f:19:d9:e4:e2:e8:f1:f1:81:9c:fd:b0:69:e8:78:
4d:42:78:7c:07:c3:83:d1:f7:4b:68:7c:c3:8a:a4:
e9:b1:16:2a:97:52:48:09:a7:c8:65:58:bf:cd:3f:
e8:f3:13:05:4c:ac:02:1f:41:e2:81:19:be:d8:eb:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:02:F6:36:82:04:DE:5E:B9:5A:41:E3:90:0A:C5:BC:8C:40:24:61
X509v3 Authority Key Identifier:
keyid:D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d5:a9:c4:65:c4:83:df:6e:b6:a8:ea:24:06:20:ec:e8:a3:
1f:b7:5a:55:78:25:e5:fe:87:8f:d0:40:41:a3:0d:82:0e:4c:
4d:76:a0:5d:8d:5b:29:fe:ec:3d:ab:d2:9b:75:60:d1:0b:46:
28:c8:e3:ba:3e:98:66:de:40:9c:55:f6:af:ea:b4:a4:92:01:
bc:df:99:06:e0:e6:31:94:93:06:04:9c:9b:e5:09:df:0f:a0:
79:aa:c9:61:ef:7e:57:52:b8:cc:9f:8a:50:ae:c5:6e:ea:c4:
31:e8:af:57:d6:2c:8f:fc:9b:e7:b4:bd:6f:fb:bb:95:82:b2:
b6:a5:24:f7:87:d1:a1:32:e7:e1:57:45:18:60:55:33:5b:c4:
2f:f0:43:3e:be:42:bf:05:26:59:3d:1b:fb:8a:12:a7:01:f0:
fc:3a:89:0f:9c:25:e4:74:7b:b3:23:6a:a8:4d:29:f3:9c:cc:
eb:3e:1a:ab:a9:61:47:d1:23:9b:ee:88:d4:ab:02:1b:46:20:
28:8e:c3:46:7c:11:7a:f2:05:02:0e:6e:52:7e:05:a9:2d:c3:
b6:76:93:37:bc:39:7a:8f:93:c6:78:59:02:68:65:66:8e:4d:
d5:42:d6:ff:3b:97:9c:87:c4:1d:f7:cd:54:ab:60:15:ad:ff:
02:da:f1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:40:12 2025 by rpki-client