Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
File: Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft (raw, json)
Hash identifier: h4lpVRYWppvR5+7BwaD5u7QiZ4RmcWtDCJiAPYla+s8=
Subject key identifier: 58:81:BB:73:46:C0:8D:0F:F4:0B:53:53:FD:79:07:79:C7:B7:87:B4
Authority key identifier: 26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
Certificate issuer: /CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Certificate serial: 01965CF107E1C436B6FB9060DADD72A1702D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
Manifest number: 14FD
Signing time: Tue 22 Apr 2025 10:00:21 +0000
Manifest this update: Tue 22 Apr 2025 10:00:21 +0000
Manifest next update: Wed 23 Apr 2025 10:00:21 +0000
Files and hashes: 1: Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl (hash: 7mBRm5pOKcn59jwDbhfYCJ5zoNBRMFOwrM8QuUR9PJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:07:e1:c4:36:b6:fb:90:60:da:dd:72:a1:70:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Validity
Not Before: Apr 22 10:00:21 2025 GMT
Not After : Apr 23 10:00:21 2025 GMT
Subject: CN=5881bb7346c08d0ff40b5353fd790779c7b787b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:f2:42:8c:4d:a7:f1:bf:01:7e:1f:ed:58:
70:89:45:61:5d:0c:c5:5b:a1:0c:68:86:18:87:fa:
30:52:d2:13:87:08:fd:e4:ba:7f:a8:d0:46:93:12:
61:fe:29:f3:87:a8:b5:d7:18:64:ec:46:a0:d7:ee:
32:87:4b:b4:82:a0:fa:a8:0a:e6:32:e6:be:65:24:
ed:10:f2:8b:b3:56:44:ee:22:8a:01:37:46:3b:9d:
5b:7b:5a:9b:98:80:3a:64:74:c9:a1:e5:59:83:53:
c8:11:a3:94:01:c8:93:3f:42:6c:00:63:b6:a4:b7:
89:46:71:c1:92:05:a0:7b:2b:7c:0b:2e:1a:56:e3:
b2:93:b9:63:07:82:fc:2f:04:5d:20:96:90:af:d5:
a6:72:e6:39:43:5a:ad:80:4b:16:61:da:79:73:52:
0d:85:50:76:fd:75:6f:fd:78:85:f5:d9:a0:52:b6:
bf:31:c7:a3:b6:74:f5:1b:82:81:a2:97:16:d5:c4:
c7:79:f0:70:b4:fe:3c:f9:e1:07:a8:71:d7:ed:53:
5d:c4:99:54:20:ad:dd:30:e9:d3:e7:c1:e7:54:73:
bf:37:ae:36:55:b8:b7:15:27:2e:f4:7f:e2:2d:42:
a1:87:d9:ea:8d:db:a4:b8:72:da:24:03:fc:b0:c0:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:81:BB:73:46:C0:8D:0F:F4:0B:53:53:FD:79:07:79:C7:B7:87:B4
X509v3 Authority Key Identifier:
keyid:26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:5a:c5:02:0d:ec:92:de:98:3f:30:7f:50:95:14:2e:f5:05:
10:74:07:eb:59:d6:ce:28:e7:f3:c7:36:e0:54:3d:43:13:24:
19:53:11:23:0e:7d:6e:26:93:48:44:f7:a0:bc:25:db:1b:fd:
ae:65:b6:73:88:7f:7f:7f:d4:aa:a6:cf:6d:b6:8f:23:6f:4b:
d6:a4:fa:9b:3e:da:c3:d8:4b:14:fc:6c:c5:c4:60:70:c7:94:
47:2a:20:70:a1:22:91:8a:e7:39:1e:af:4c:06:ea:ea:c5:76:
5d:66:af:a9:92:73:ec:5d:1a:c0:35:b5:18:b8:bb:06:34:a9:
eb:fe:59:b1:b4:9a:fd:4e:5b:5f:4c:a8:d0:bc:c9:1c:4d:23:
a5:46:e4:99:7b:ea:25:b1:03:a2:dd:26:6d:6e:ba:35:12:7b:
50:fb:e5:3a:ca:7d:1b:d6:2c:04:49:60:9c:94:1b:46:28:45:
ed:fe:83:8a:e1:00:0e:48:ed:d0:1f:33:46:9a:2f:1a:1c:91:
63:18:4c:a1:fc:9a:68:e3:7a:02:fb:f6:eb:dd:ec:6b:7a:be:
b6:39:a1:64:6c:f0:d0:17:a6:5e:57:ca:05:40:27:8b:c5:89:
8d:fe:8c:ee:6f:25:02:b7:23:0b:14:bc:cd:81:fb:97:ef:99:
18:dc:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:12:20 2025 by rpki-client