Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
File: JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft (raw, json)
Hash identifier: uGUFIAWK+qtjtyX3HDcV0SlVHSywX99eKA942NkTQjQ=
Subject key identifier: B5:73:0D:C8:54:88:30:87:D4:77:A3:65:DE:91:60:BD:D2:89:9C:3A
Authority key identifier: 24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
Certificate issuer: /CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Certificate serial: 019752341079F3D4C69780336547EEEF272B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
Manifest number: 0AD7
Signing time: Mon 09 Jun 2025 01:00:33 +0000
Manifest this update: Mon 09 Jun 2025 01:00:33 +0000
Manifest next update: Tue 10 Jun 2025 01:00:33 +0000
Files and hashes: 1: JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl (hash: SnZRbpFtdrOgE4PgHRAqeTXsLy4rIrmusV+PAwAFFTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:10:79:f3:d4:c6:97:80:33:65:47:ee:ef:27:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Validity
Not Before: Jun 9 01:00:33 2025 GMT
Not After : Jun 10 01:00:33 2025 GMT
Subject: CN=b5730dc854883087d477a365de9160bdd2899c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:b0:d9:9a:53:05:24:c0:18:63:88:bd:07:
26:28:49:1a:51:37:0d:0f:06:71:3f:c7:4c:3c:f9:
74:1d:84:6d:0b:70:cf:fd:10:04:4c:f9:af:7e:f7:
45:af:53:0b:8d:72:0c:0f:4b:d4:75:1a:84:00:fc:
8b:24:ed:af:87:85:3e:55:2f:b2:9d:bb:c4:91:70:
0c:69:54:f5:21:b8:a2:64:3f:d3:fb:fa:0e:82:d8:
d9:57:11:eb:33:f6:5a:3d:06:55:2c:8a:87:b6:53:
6d:e9:ea:24:5f:c0:ac:c8:f4:b4:8f:c8:e3:68:89:
ef:b6:10:54:3b:7a:c4:35:6b:fa:b3:8e:e9:79:10:
3c:28:ec:12:4d:4d:5a:0e:0c:8c:57:83:b4:bd:44:
1e:5c:78:ae:a3:13:74:81:29:93:30:85:49:a7:86:
1d:94:e1:2a:e0:87:8c:be:09:10:ff:58:80:5c:ac:
4c:fa:1c:b2:29:8d:77:b3:32:f5:e4:cc:91:3f:e6:
7a:12:fb:0d:e4:ee:ae:26:92:ce:08:a3:a5:53:50:
1e:7b:d0:28:38:97:40:27:aa:0e:f7:24:22:1a:43:
ca:eb:ee:ae:e0:73:7d:50:b5:9f:bd:8a:bf:08:ea:
74:63:29:4d:93:ff:67:b2:78:c5:94:c0:7b:10:0b:
a8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:73:0D:C8:54:88:30:87:D4:77:A3:65:DE:91:60:BD:D2:89:9C:3A
X509v3 Authority Key Identifier:
keyid:24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:53:84:ca:5c:26:3d:11:c9:97:27:5f:ef:ab:26:90:e2:e5:
98:86:28:f5:04:70:64:d8:fe:fc:5f:4c:cc:8b:d2:9a:a2:a8:
bd:44:7a:07:2a:ee:84:f3:31:1f:28:ca:1e:9e:b5:0e:bd:65:
95:a9:84:4e:e0:b0:a6:4b:6c:e0:fa:28:90:2f:fb:f0:e1:3b:
2d:d0:6e:d1:a6:8b:1b:ea:c5:87:66:0c:5d:8b:36:9a:c3:45:
87:07:49:91:0a:35:75:be:eb:af:cb:db:ee:3b:38:b3:0a:98:
b1:71:4c:7e:7a:6d:a8:90:0b:6c:d6:00:f3:0e:dc:a3:6e:96:
45:e9:13:43:24:66:b2:4f:b2:94:0e:27:aa:23:b3:bb:fd:4f:
99:7a:95:17:0b:85:b3:38:b3:ae:b9:61:8b:87:0d:34:15:e9:
86:4c:69:f3:48:51:95:9f:c6:7b:5c:55:54:43:9a:a1:9d:bf:
2c:44:26:0c:66:96:6f:72:fd:37:82:34:7b:d3:b9:e2:a0:d4:
fd:01:82:d7:27:dd:1a:71:dc:51:f8:39:ac:49:de:1a:66:0b:
e4:16:a7:11:b9:15:7a:36:7a:88:45:3a:ca:07:c8:38:88:27:
3e:a8:e9:97:f8:cb:77:8c:25:b1:4e:dc:3b:b2:66:98:77:99:
34:2f:b7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:04:27 2025 by rpki-client