Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: MWYzpRMM+swnVL0OajgOGT8lG3+tos+XqNrSkV2GFkY=
Subject key identifier: 87:DA:BD:DE:BF:A1:8D:B5:87:D8:3F:3D:47:18:FE:F0:22:FF:15:5C
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 01964C6BC1217336C83C9FB4ECFED903942C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 070C
Signing time: Sat 19 Apr 2025 05:00:52 +0000
Manifest this update: Sat 19 Apr 2025 05:00:52 +0000
Manifest next update: Sun 20 Apr 2025 05:00:52 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: xsFu2EhsdHOVotnp7s7J9+a+shD8aijT7SioxYyFVJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:c1:21:73:36:c8:3c:9f:b4:ec:fe:d9:03:94:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Apr 19 05:00:52 2025 GMT
Not After : Apr 20 05:00:52 2025 GMT
Subject: CN=87dabddebfa18db587d83f3d4718fef022ff155c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:b7:6e:b4:4b:81:cc:de:a7:f3:2f:2c:2e:
a4:f9:fc:dd:18:e5:14:c2:0f:7f:ef:2e:52:62:f2:
55:2d:e3:e0:d4:72:05:19:78:19:ee:ff:26:1b:8f:
d2:19:d2:02:9c:ac:39:a6:18:e7:22:66:3c:a0:3c:
95:47:3a:24:21:5d:8e:18:eb:58:6f:3c:8b:07:78:
00:18:a4:47:51:ea:10:1d:b4:96:34:e2:19:ac:55:
8f:74:be:bb:9d:49:a0:0a:76:e6:2f:de:38:27:a2:
85:09:72:e6:0e:a8:57:e2:c3:0e:a7:44:b8:77:82:
ec:27:2c:7b:1f:a0:aa:1a:1f:2c:3f:63:40:20:f6:
c3:e8:2f:08:85:37:53:4e:7c:92:09:6f:70:29:1b:
ca:9f:34:d5:5c:80:7a:06:91:7a:51:84:84:81:5a:
af:66:86:a3:08:53:d2:1a:7c:09:bf:19:2b:3e:99:
2d:d3:eb:c1:dc:64:62:35:70:97:21:78:41:83:3f:
95:b6:7f:93:b0:1f:fe:bb:c5:48:3b:2f:d7:38:49:
f2:c3:ed:49:7f:d9:22:63:3e:40:98:33:45:c3:ad:
fb:f5:aa:bd:62:68:d8:6f:1d:ca:4a:bf:71:d5:77:
87:83:4d:fa:9a:07:34:e9:94:9d:a1:0b:77:0b:1f:
72:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DA:BD:DE:BF:A1:8D:B5:87:D8:3F:3D:47:18:FE:F0:22:FF:15:5C
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ed:55:b0:ed:a8:bd:b4:5b:00:3b:d9:75:dd:82:0a:0d:36:
b9:4b:de:0e:35:d3:9f:0f:24:40:c1:d3:3a:52:03:25:52:9e:
e7:6b:1f:e9:b7:6a:a6:c7:a2:85:03:08:24:0b:82:20:b0:15:
99:45:41:f3:8a:f1:dd:80:a5:a3:8d:cd:09:98:5e:fc:91:d8:
f0:58:b1:e3:d1:6a:6c:88:ac:45:47:de:14:74:08:8a:f7:03:
7b:34:e0:85:cb:ca:42:22:ac:c6:88:89:93:63:67:cd:e4:65:
75:22:c4:58:45:00:f5:cb:9f:8e:ae:5c:6a:81:f2:0e:89:05:
20:a4:ec:13:99:36:1f:54:71:0c:44:20:1b:5c:51:41:75:da:
a7:69:da:40:ed:c3:63:38:d4:37:50:7e:8f:22:59:fd:ed:70:
4d:a4:47:b4:45:7f:24:f8:20:b7:3d:77:4d:01:b9:d5:ef:a0:
b4:8d:10:b5:30:f8:ef:49:ae:5a:f0:3f:c5:cf:04:30:ff:1f:
e2:7d:9d:85:2e:20:3f:b5:14:55:8b:94:a4:18:29:f4:dc:de:
df:cb:12:de:e7:4c:f5:bf:ff:0d:ad:bb:60:e8:2b:7a:f2:58:
a9:c1:91:f7:15:a1:c9:c7:ef:14:28:55:36:7b:e1:41:28:51:
83:bf:72:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:49:14 2025 by rpki-client