Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
File: miIdT5cAcYIi7es06TinZjQ_JOE.mft (raw, json)
Hash identifier: VUKzxFL1oHQIyQBxAwBYmqdpgPgQKzr4vxn22anFPUw=
Subject key identifier: C3:5D:36:DE:12:FD:00:A2:1F:34:77:26:6D:87:E4:2A:9A:6B:8D:5B
Authority key identifier: 9A:22:1D:4F:97:00:71:82:22:ED:EB:34:E9:38:A7:66:34:3F:24:E1
Certificate issuer: /CN=9a221d4f9700718222edeb34e938a766343f24e1
Certificate serial: 01965CF12BB0929919FA2467E8C4200B4BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
Manifest number: 13AC
Signing time: Tue 22 Apr 2025 10:00:31 +0000
Manifest this update: Tue 22 Apr 2025 10:00:31 +0000
Manifest next update: Wed 23 Apr 2025 10:00:31 +0000
Files and hashes: 1: miIdT5cAcYIi7es06TinZjQ_JOE.crl (hash: vRMxFIXd/yjB1atuaFKXQQWNQKQfWd6EnYSHvNaQ9oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:2b:b0:92:99:19:fa:24:67:e8:c4:20:0b:4b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a221d4f9700718222edeb34e938a766343f24e1
Validity
Not Before: Apr 22 10:00:31 2025 GMT
Not After : Apr 23 10:00:31 2025 GMT
Subject: CN=c35d36de12fd00a21f3477266d87e42a9a6b8d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:9f:54:17:1d:3d:5a:49:b3:d6:36:59:c7:
20:e3:6b:ba:9f:66:5c:5b:43:76:f1:70:ea:46:59:
ed:3c:2c:32:f4:31:7c:e4:93:bf:02:72:e4:04:47:
03:75:74:9d:fd:1e:d8:dd:39:09:fa:97:28:24:f7:
27:02:5b:10:98:de:cc:cd:e4:e9:9f:62:a4:25:59:
b9:b8:f1:1c:49:53:bd:9f:4a:56:7d:f4:e4:71:36:
07:fa:56:c1:39:d3:e9:87:1d:70:4a:ec:6e:fc:56:
c9:61:e6:97:2d:e3:c4:0d:6f:b0:71:10:7e:08:2f:
cb:85:44:6d:ff:cf:b2:ab:d5:6b:c8:05:8c:ef:19:
a4:2f:4d:b6:ae:3d:32:5e:55:39:38:74:cc:68:93:
c7:97:8c:4f:da:24:63:ea:68:7d:65:1e:43:c4:43:
0c:ec:5b:85:e2:16:77:58:9b:a4:24:e3:7d:9a:14:
c5:78:bd:6a:e4:f0:65:65:7e:e0:1c:5c:3f:a1:0b:
a2:2a:6e:57:24:34:df:08:16:2d:7a:e0:0e:60:16:
59:4a:a2:e3:3a:cd:55:40:7d:29:5e:c9:63:e2:47:
0a:26:87:b4:d0:ea:ea:34:87:8f:8e:78:37:4c:af:
67:d1:59:d7:88:90:97:7e:3a:5d:45:7e:79:c2:df:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5D:36:DE:12:FD:00:A2:1F:34:77:26:6D:87:E4:2A:9A:6B:8D:5B
X509v3 Authority Key Identifier:
keyid:9A:22:1D:4F:97:00:71:82:22:ED:EB:34:E9:38:A7:66:34:3F:24:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:73:e1:1d:c4:ae:57:9b:58:ad:3f:35:0d:b2:45:82:fd:88:
c6:e9:07:95:10:b8:a3:e4:b8:0b:ec:a2:28:88:2d:dd:ea:46:
b1:0e:72:dd:44:ef:a4:7c:32:31:66:9b:29:b2:30:4a:af:a7:
9d:e6:2b:d8:be:ed:3c:b8:05:dd:1e:81:89:1f:a0:3f:1d:7c:
dc:5c:cd:95:bf:e8:02:3f:d8:d7:ff:56:71:21:04:6f:34:e9:
1d:23:11:5e:05:82:a2:78:33:0c:5f:55:03:26:3c:aa:59:b4:
d0:e4:91:64:be:25:f3:81:c2:34:44:a7:dd:95:ab:05:a5:f4:
5c:2f:76:9c:2d:e7:1d:9f:80:5e:23:51:df:a2:bc:a4:6f:49:
74:17:89:ae:95:74:33:e2:16:85:c7:85:f9:71:97:62:22:26:
e2:87:20:d3:12:ba:23:f2:51:0d:d1:8a:51:aa:94:92:bb:01:
97:11:74:a7:28:7b:b0:3f:e7:31:ff:1d:23:f2:a9:96:1e:84:
0f:b3:95:8a:f1:c7:ae:63:5b:c6:d0:20:df:e5:b8:8a:3b:93:
73:84:f4:60:b8:4a:42:fb:7e:3b:7c:e7:f3:2c:df:de:03:db:
9a:4f:c9:23:79:79:78:e9:ca:60:22:43:02:e2:fc:61:12:a0:
2f:62:24:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:52:22 2025 by rpki-client