Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
File: jsIqh2Rb03Xm2yqguBbooGEOelY.mft (raw, json)
Hash identifier: Cxmi41QXMUR9XSdqFSfYfvkBBETGXwTmiYi5qithwkY=
Subject key identifier: D5:5C:9B:C1:23:43:3F:DE:CF:6C:EA:84:D2:E0:2F:13:62:7C:DD:8D
Authority key identifier: 8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
Certificate issuer: /CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Certificate serial: 01965A5E344B081A7392CB6FA129B0F8631E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
Manifest number: 0599
Signing time: Mon 21 Apr 2025 22:00:45 +0000
Manifest this update: Mon 21 Apr 2025 22:00:45 +0000
Manifest next update: Tue 22 Apr 2025 22:00:45 +0000
Files and hashes: 1: jsIqh2Rb03Xm2yqguBbooGEOelY.crl (hash: AjhtQ/hXm34tiOZWj552luFPEvm1Igw8c6JYC6H3V3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:34:4b:08:1a:73:92:cb:6f:a1:29:b0:f8:63:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Validity
Not Before: Apr 21 22:00:45 2025 GMT
Not After : Apr 22 22:00:45 2025 GMT
Subject: CN=d55c9bc123433fdecf6cea84d2e02f13627cdd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:44:85:ec:75:31:47:f8:e8:71:02:b9:d0:
d0:b6:aa:70:b7:8e:4b:df:3a:e6:08:f3:0d:1f:e4:
ea:e5:fc:38:7b:3d:86:81:5d:fb:c3:90:62:3e:31:
0e:87:6d:ec:bb:fc:25:67:6c:3f:e4:30:33:0e:01:
9c:9d:cb:34:a9:92:16:37:ce:83:e5:ba:47:fd:6f:
45:de:23:66:d0:28:1b:71:71:47:9d:38:e5:2e:03:
99:cd:36:5d:15:fa:9f:4e:6b:03:21:e6:93:f7:fa:
6f:4b:80:ab:33:06:f4:ff:07:25:de:cd:34:a2:02:
2c:7b:29:7c:c2:ff:a0:19:ea:dc:cf:01:97:0d:0f:
34:5c:43:24:07:24:4b:e0:95:85:0f:06:0d:74:32:
dc:90:b5:95:52:33:f6:a3:6b:f6:5b:d4:d2:fb:41:
36:59:b5:59:15:32:3f:5e:4d:ad:f6:50:7c:f9:dd:
50:d0:1b:62:d0:68:10:e7:d7:81:12:06:b2:b8:28:
8c:36:83:48:14:2f:4c:79:c5:55:c4:b0:84:65:f3:
15:da:b8:72:b5:a3:30:a6:eb:bc:f9:a1:e3:f9:39:
03:81:89:f9:2e:bb:21:33:7f:0e:2b:80:7f:f7:c3:
96:4c:ef:2e:a5:d4:ff:88:49:7a:28:25:6e:8a:40:
cf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5C:9B:C1:23:43:3F:DE:CF:6C:EA:84:D2:E0:2F:13:62:7C:DD:8D
X509v3 Authority Key Identifier:
keyid:8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dd:8d:f3:2d:c0:a0:30:55:85:12:d0:4e:89:dc:19:81:cc:
43:21:01:b7:8f:db:fd:6f:14:ce:39:3f:4c:a3:e4:6f:e6:35:
44:8a:5c:e0:90:b4:db:74:8c:11:de:b3:0b:fb:5e:9e:eb:84:
2f:d5:5c:e8:a7:67:f5:ef:31:a6:12:52:21:cf:df:e3:7a:0b:
1d:e9:f7:5d:dc:65:61:42:fe:e5:74:c5:f9:58:7f:d6:6d:0f:
48:82:0c:b8:0c:16:8a:ca:fa:7b:45:d0:63:d1:65:0d:d4:d2:
ae:d8:e5:fb:0a:1a:f2:39:88:8b:a6:e0:e2:bc:92:a6:ec:ca:
ce:ce:aa:5b:19:1e:5f:65:89:2c:d4:cc:4d:35:62:94:2d:57:
bf:ca:e2:d3:4c:44:bb:3d:a4:30:15:70:69:93:2d:23:1b:2f:
99:ae:83:06:b1:47:d4:cf:70:98:a3:f0:0b:59:1a:d0:67:94:
83:d2:69:12:97:2c:c3:42:ac:44:15:7d:d5:f6:bf:da:9a:6c:
34:45:04:9c:83:7a:95:63:79:27:13:ed:93:ab:50:b4:48:59:
7a:09:23:fa:13:a9:46:0e:50:6d:24:76:24:d3:84:0e:a9:a7:
88:9b:6f:6e:85:b5:c4:d6:de:40:09:39:6b:d1:5b:c6:e2:3a:
53:44:fd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:04:01 2025 by rpki-client