Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
File: JUIq59QSPce_KI8TeeQ39uHLKpo.mft (raw, json)
Hash identifier: wmHPJB2knsguh0ntbSJlq8lJT21aVbnoBpElQFjiOHQ=
Subject key identifier: 8A:30:69:57:C7:57:1B:07:EA:4B:E4:C2:B9:3A:DD:53:1C:15:AE:33
Authority key identifier: 25:42:2A:E7:D4:12:3D:C7:BF:28:8F:13:79:E4:37:F6:E1:CB:2A:9A
Certificate issuer: /CN=25422ae7d4123dc7bf288f1379e437f6e1cb2a9a
Certificate serial: 019646696ED4C59AC3544D0E39271BA18562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
Manifest number: 0E72
Signing time: Fri 18 Apr 2025 01:00:36 +0000
Manifest this update: Fri 18 Apr 2025 01:00:36 +0000
Manifest next update: Sat 19 Apr 2025 01:00:36 +0000
Files and hashes: 1: JUIq59QSPce_KI8TeeQ39uHLKpo.crl (hash: l8RAwxlH9Nh71RRzAGiyzGwJ4JDm/ZmTJH80vXkjrcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:69:6e:d4:c5:9a:c3:54:4d:0e:39:27:1b:a1:85:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25422ae7d4123dc7bf288f1379e437f6e1cb2a9a
Validity
Not Before: Apr 18 01:00:36 2025 GMT
Not After : Apr 19 01:00:36 2025 GMT
Subject: CN=8a306957c7571b07ea4be4c2b93add531c15ae33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:59:b8:fa:dd:10:92:17:d5:d4:c9:d5:52:ef:
55:29:96:57:f8:f6:1a:4b:0e:b9:f9:96:cb:77:b9:
05:d6:df:0f:de:9b:be:25:68:92:56:82:f5:2e:e9:
67:65:ac:8b:a3:e9:50:6b:ca:43:db:10:21:de:40:
04:55:34:9a:78:6d:84:67:66:ee:bc:2f:da:1c:cf:
d5:4a:b2:04:25:bd:90:46:86:f7:7d:d3:2e:18:d5:
8a:7e:9d:d9:da:a7:28:44:e4:77:d7:2d:ea:e8:ed:
39:4e:6d:50:bc:4e:ec:f9:ec:0b:61:f8:c8:ee:7d:
52:28:cf:c5:6b:4d:8d:31:3c:89:f9:0a:3e:e7:df:
71:4d:b1:f5:0e:92:ff:e5:0f:6c:8d:e9:8a:df:87:
62:5d:47:c3:99:6b:32:8c:02:7e:16:97:9c:f4:e4:
37:2e:7b:00:bc:9c:ab:18:1f:40:cd:1c:44:25:5e:
7c:7a:65:18:34:79:b0:6e:69:3a:cb:5c:81:90:46:
ba:48:09:fe:2c:6e:67:23:c0:5e:0c:86:4c:9e:19:
29:e8:d4:5a:79:c9:8c:53:c6:cd:dd:c3:cc:df:68:
06:b3:1a:93:6e:21:9a:3e:f7:8d:33:2b:95:bb:1b:
aa:e2:da:d9:93:8f:06:6d:b7:a7:f7:c5:42:fc:c6:
70:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:30:69:57:C7:57:1B:07:EA:4B:E4:C2:B9:3A:DD:53:1C:15:AE:33
X509v3 Authority Key Identifier:
keyid:25:42:2A:E7:D4:12:3D:C7:BF:28:8F:13:79:E4:37:F6:E1:CB:2A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:69:5b:61:92:55:5e:33:e3:06:d2:db:fa:94:f4:18:20:c4:
28:a3:1a:70:80:b8:44:9d:f6:3b:a9:02:7b:e4:da:e0:d1:32:
ad:cb:67:1a:91:7c:01:f9:52:1a:2c:98:d8:17:4f:51:47:82:
86:f7:07:ae:a7:da:8f:f5:41:9c:d2:91:8f:80:e2:e5:ac:95:
56:ed:c9:46:7d:c4:e1:4c:e0:e0:72:21:19:a3:81:43:c2:2d:
d3:c5:9a:1b:91:2d:64:4f:39:b0:4e:db:41:f0:5d:4a:c8:c0:
5e:bd:d5:d6:9f:ca:89:37:cb:56:c4:04:64:b6:a2:45:8d:1a:
c4:c9:4f:c3:d0:06:b5:c7:92:18:da:80:ab:05:23:e0:58:8e:
08:dc:4a:cc:4e:05:12:60:02:3c:eb:3d:55:62:82:23:3c:66:
67:8f:36:4f:57:5e:af:1d:1c:0e:6d:09:e0:ab:06:80:44:54:
ed:d7:4c:d6:6e:b4:bf:d2:4b:ed:7e:30:c8:3d:6a:28:71:7f:
1d:bd:00:ff:f9:6f:5c:6a:ea:c3:3d:bf:97:09:6b:1e:d5:54:
df:c1:3d:b7:c9:31:0c:e7:af:50:e3:f8:8f:48:24:f4:80:c8:
19:f2:77:ba:94:20:82:9e:78:d5:bd:08:70:95:00:0e:ed:7b:
0c:25:16:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:19:28 2025 by rpki-client