Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
File: JxvhwGrxHz7sHcsZa8qN578I-5g.mft (raw, json)
Hash identifier: 1H32chwNdD7CDGiDw5mEEh27L/lH30fsyEsS7jFLDAk=
Subject key identifier: 59:91:60:1F:BA:63:D8:5A:BE:46:B0:1D:94:2F:0F:03:FC:0A:28:18
Authority key identifier: 27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
Certificate issuer: /CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Certificate serial: 0196534A3A73C9A27DDEDC402225554581FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 13:01:35 +0000
Manifest this update: Sun 20 Apr 2025 13:01:35 +0000
Manifest next update: Mon 21 Apr 2025 13:01:35 +0000
Files and hashes: 1: JxvhwGrxHz7sHcsZa8qN578I-5g.crl (hash: UWyKh8L1tnag3m2dD6ek+TnLmDISljmmR8L6wQaFZ5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:3a:73:c9:a2:7d:de:dc:40:22:25:55:45:81:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Validity
Not Before: Apr 20 13:01:35 2025 GMT
Not After : Apr 21 13:01:35 2025 GMT
Subject: CN=5991601fba63d85abe46b01d942f0f03fc0a2818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:2e:63:12:cb:b5:e3:3f:5f:e0:07:2c:74:
86:55:df:21:17:a6:29:4a:a3:a0:ed:99:0f:ac:b0:
cf:a5:a5:ac:72:51:24:57:a5:4d:52:37:3b:25:f4:
10:f1:8f:21:c2:69:ec:d7:a1:7e:40:96:b8:77:67:
88:2f:92:95:fd:be:ae:73:aa:8e:81:b0:92:42:95:
b5:99:bd:53:29:28:7c:d1:0a:83:09:bf:7c:5b:ad:
bb:b8:29:39:9f:93:57:1e:ad:5f:2e:b6:09:6c:6a:
74:78:49:2d:b9:4b:f8:fa:26:2f:3d:91:62:14:55:
22:a6:d2:d4:2d:04:80:11:92:da:39:8c:90:9d:38:
53:93:24:2a:b8:fd:4a:2b:f2:79:45:75:61:93:9f:
3f:91:0c:6e:f8:d2:da:8f:d6:71:59:5f:8d:5f:e2:
4b:a0:6e:75:80:24:ae:ce:b3:cb:60:18:b3:51:17:
42:15:5a:06:50:a8:da:51:76:93:23:b3:94:79:8c:
f4:f9:c2:f5:9e:a9:aa:5a:b5:c8:61:c7:9b:06:9c:
dc:ee:0f:48:18:42:f0:11:7b:8d:a7:30:05:75:b7:
6b:fe:bf:eb:e9:da:15:60:ae:c2:a1:73:7a:17:e8:
2d:84:48:a6:e8:12:9b:f4:57:0b:ea:16:30:cd:33:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:91:60:1F:BA:63:D8:5A:BE:46:B0:1D:94:2F:0F:03:FC:0A:28:18
X509v3 Authority Key Identifier:
keyid:27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2c:b7:bf:34:57:37:02:b6:30:25:04:43:e8:39:5f:b3:df:
c7:2e:e7:77:78:58:ff:76:7b:42:73:1f:f0:c3:11:8b:32:9e:
9d:1b:b2:32:3b:b9:35:e4:3a:3d:1f:d9:e3:1e:dd:f7:85:54:
e4:54:72:e0:15:15:cc:38:18:a1:d1:ac:64:1c:69:b8:41:c0:
c2:0c:8b:49:09:2d:da:2a:e5:ac:0f:fd:f9:cd:35:70:7d:d7:
9c:8c:c6:23:b6:2e:c9:d7:bf:18:13:23:ef:79:d7:71:83:32:
5d:00:d2:81:02:81:d2:df:09:7f:b5:3c:22:a9:c2:b4:9a:80:
92:8a:14:06:58:03:82:27:72:74:7a:ff:48:1c:93:3b:ec:d4:
95:b6:16:62:6e:7f:fe:aa:f3:63:86:0d:e5:4d:56:71:94:35:
1c:db:06:50:d4:e7:99:09:15:5b:ca:0b:93:80:eb:06:ad:2c:
84:ab:d6:ac:01:e9:e5:38:7b:1f:9d:42:f2:ce:5a:fb:c9:d9:
8e:ab:2f:e4:86:13:d5:5d:78:79:c2:fa:8d:31:57:f0:0c:7c:
26:63:32:ab:f8:05:eb:e9:64:79:1c:5c:45:ed:54:75:e0:cb:
b0:50:79:9d:f3:71:6e:01:2a:75:a3:9e:1c:c7:73:0f:e2:23:
f3:ff:34:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:23 2025 by rpki-client