Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: cfuXBpuHMd8cC4CcHoUW7WcpdZ1CR9VhCvFt55NrtXE=
Subject key identifier: 2E:59:DC:E1:74:86:C9:90:56:7A:A3:7E:D3:9E:B8:A8:35:33:71:08
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 019657263CFEE6563BD8813E768B9185F25A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 0618
Signing time: Mon 21 Apr 2025 07:00:45 +0000
Manifest this update: Mon 21 Apr 2025 07:00:45 +0000
Manifest next update: Tue 22 Apr 2025 07:00:45 +0000
Files and hashes: 1: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: BwpZcEaApnek3iOh8NcbUpqN8pWW8CHV7SfJyHPGqhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:3c:fe:e6:56:3b:d8:81:3e:76:8b:91:85:f2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Apr 21 07:00:45 2025 GMT
Not After : Apr 22 07:00:45 2025 GMT
Subject: CN=2e59dce17486c990567aa37ed39eb8a835337108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:88:20:29:e2:80:9a:20:dd:72:d6:cc:cf:
09:4d:68:d2:e2:21:db:77:3e:fd:14:a0:5f:92:88:
ac:44:a5:d7:12:ca:69:f3:76:77:2b:32:30:8a:22:
76:c9:cd:bf:20:91:04:70:41:bd:48:9f:23:4b:39:
5a:8b:02:4a:2d:e3:14:66:51:8c:44:9d:f8:f2:36:
41:0a:18:48:b8:f5:8c:f0:1f:5d:6a:01:32:79:78:
ee:44:e4:18:f1:fe:99:56:71:36:45:ac:16:cf:f7:
40:5e:9d:06:83:fd:91:82:8b:c7:cb:03:3e:d3:1f:
2c:bf:42:01:95:1d:f8:62:5b:e4:c6:84:51:70:8f:
be:94:db:19:d8:4e:01:c0:bb:fd:2d:7f:b0:c5:32:
2a:0e:6f:ff:06:ae:66:c0:25:2c:16:23:c2:9e:1d:
78:bf:da:68:63:e3:8b:a6:89:ac:82:60:ea:62:6f:
18:6d:53:87:3d:70:93:4d:45:10:0b:95:10:cc:df:
14:14:b2:1d:6d:df:cf:eb:f6:51:d3:45:91:8a:4e:
17:87:72:fa:b8:a7:ca:2c:3f:c2:91:4c:d3:0f:84:
b4:e3:63:2d:44:40:b6:5f:09:e6:1b:5b:a2:96:34:
e5:8d:8f:47:eb:28:d4:00:16:e4:83:49:05:d3:9c:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:59:DC:E1:74:86:C9:90:56:7A:A3:7E:D3:9E:B8:A8:35:33:71:08
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b3:6c:d5:3d:c5:70:35:9e:9b:17:f3:37:e2:f2:7e:70:60:
25:6d:e0:51:36:ef:bc:8e:eb:dc:fe:16:fb:4a:f1:35:59:91:
26:cb:1a:ac:23:7a:0c:c1:34:a5:ce:11:03:07:73:32:84:6c:
66:6c:34:33:e6:c1:d7:95:07:b0:b9:31:d2:b0:81:d6:7c:96:
94:84:aa:bd:cb:11:76:44:cd:01:e4:81:a3:e5:67:8b:3e:83:
64:20:63:47:c8:36:e2:76:6a:fe:52:aa:4a:15:76:8a:f9:eb:
43:fb:f2:ec:6c:36:f5:7b:3a:17:63:f2:d1:c5:ed:d4:90:e1:
42:5c:db:02:d8:86:8c:25:cd:55:2f:22:f3:b2:f9:f1:eb:4c:
86:79:04:4b:06:8f:5d:f4:fb:87:48:f7:b5:9f:63:5e:7a:9d:
e7:f6:93:3b:7e:ff:83:d5:e4:96:5b:38:96:36:df:3e:39:e4:
62:5e:95:80:48:c1:4a:cb:13:09:ec:26:01:df:85:6c:9e:6d:
94:f1:f5:52:6b:55:ac:35:da:69:2f:89:33:b5:b7:d1:33:65:
68:0a:fa:2d:e1:c8:35:b7:d3:e5:21:04:4d:0d:c7:1b:08:a8:
ef:06:b7:5f:98:e6:5e:89:3b:6c:20:3e:91:8e:eb:ee:64:be:
18:29:68:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:58 2025 by rpki-client