Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
File: Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft (raw, json)
Hash identifier: hCmqcL6batdWHNVyFd9WsRZCPzzkYx2M+2aCyZZ+TCY=
Subject key identifier: 49:F9:16:F7:98:6D:82:1B:CF:0E:32:08:17:85:4D:94:9A:39:4C:3F
Authority key identifier: 26:F9:77:77:9E:90:83:66:DD:24:60:E3:A6:F7:8E:A0:00:22:D8:45
Certificate issuer: /CN=26f977779e908366dd2460e3a6f78ea00022d845
Certificate serial: 01964DB50EC42BA94341ED143ED9A9D9F298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
Manifest number: 01A9
Signing time: Sat 19 Apr 2025 11:00:33 +0000
Manifest this update: Sat 19 Apr 2025 11:00:33 +0000
Manifest next update: Sun 20 Apr 2025 11:00:33 +0000
Files and hashes: 1: Jvl3d56Qg2bdJGDjpveOoAAi2EU.crl (hash: Q3jLdESPcXN3nltb5xGaz8RVUEj4xu0WBZ8B206MUQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:0e:c4:2b:a9:43:41:ed:14:3e:d9:a9:d9:f2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f977779e908366dd2460e3a6f78ea00022d845
Validity
Not Before: Apr 19 11:00:33 2025 GMT
Not After : Apr 20 11:00:33 2025 GMT
Subject: CN=49f916f7986d821bcf0e320817854d949a394c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ac:33:f8:38:fb:1f:c5:d9:78:db:ed:82:0d:
e6:50:2c:c1:9f:f1:31:b1:d4:c4:6a:21:5f:62:c4:
5d:57:38:72:9b:72:ab:67:ff:df:09:5c:33:f8:27:
54:f0:4f:d2:aa:ee:18:ad:c3:a0:d5:69:df:ce:4d:
0c:00:eb:d6:51:27:0c:15:24:6d:3b:90:90:3c:bc:
8c:2c:75:96:08:7a:3f:a6:2f:85:f4:15:fd:9e:e3:
28:94:45:ad:69:a9:07:49:86:e3:af:16:d1:78:57:
d9:f0:d6:db:9f:96:0f:06:9b:dd:a7:5a:fa:4c:99:
09:b4:7e:52:03:01:21:58:69:bb:37:92:c7:f1:35:
9f:be:52:83:93:09:31:87:16:af:5f:41:56:38:86:
53:6c:c6:dc:a7:41:e5:d9:d5:1f:aa:fd:ad:70:5d:
0c:42:d4:3a:30:09:cc:33:f8:67:9d:92:23:10:89:
75:9d:c4:f3:30:6c:ea:58:7e:b1:60:cd:fb:4c:16:
8f:97:a9:3d:30:16:00:74:11:44:d8:82:17:91:c9:
65:b6:d9:14:b3:75:62:7a:71:15:a6:af:2e:62:59:
9f:2e:df:2b:9a:8a:3c:3a:56:ec:7e:7c:97:e7:5b:
d5:21:0d:bf:c1:b9:38:22:39:8e:57:28:95:7f:6a:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F9:16:F7:98:6D:82:1B:CF:0E:32:08:17:85:4D:94:9A:39:4C:3F
X509v3 Authority Key Identifier:
keyid:26:F9:77:77:9E:90:83:66:DD:24:60:E3:A6:F7:8E:A0:00:22:D8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:74:d8:6d:34:d2:5d:ee:83:27:a9:26:33:79:60:2a:b5:55:
32:7a:81:c2:a3:05:26:46:93:61:de:2b:d1:87:64:9e:b6:8a:
ae:e3:8b:18:79:fe:0c:71:06:41:21:6e:84:a7:02:01:ac:88:
0e:a3:4f:ff:dd:4a:c6:09:c3:f3:10:99:c2:73:24:c5:1d:a1:
c1:af:d8:44:ce:f7:6c:39:f5:27:6b:0a:31:62:64:c1:75:7d:
5a:81:4e:ab:4e:fa:e2:93:c7:dd:61:1e:34:61:f0:73:58:48:
40:ce:1e:52:da:77:33:af:cf:5e:40:47:58:79:9c:53:36:b1:
ab:1c:c6:1a:63:3f:10:08:01:37:d3:7c:b1:66:90:61:bc:21:
4c:ec:21:62:0e:4d:6b:d5:68:7c:88:44:ae:b6:ac:ca:94:a6:
34:33:b7:e0:a9:c4:ef:1f:06:15:ff:48:37:2f:ee:41:52:7d:
02:66:71:ca:2f:29:20:f1:6e:0c:6d:93:95:89:5a:fd:d5:f6:
c9:25:88:09:85:d7:fb:68:17:c1:0e:4d:5d:bb:5a:b0:e3:84:
0a:99:bb:6e:9d:43:d2:d4:7e:69:7f:90:3f:e0:f9:36:26:f8:
25:a6:60:4d:23:32:50:16:1f:d5:83:5c:f7:57:bc:28:78:f3:
e6:ab:6c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:10:34 2025 by rpki-client