Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
File: jvk0jidxFMzrutie_olfUKEqgYc.mft (raw, json)
Hash identifier: Q0/6mXDf+WP1q9UyYhpTt25vf3FHEMKGTz63L+TuGfQ=
Subject key identifier: 5A:F5:B6:D1:96:E0:D6:24:54:D1:A4:A6:2E:DE:0A:FB:C8:5B:76:25
Authority key identifier: 8E:F9:34:8E:27:71:14:CC:EB:BA:D8:9E:FE:89:5F:50:A1:2A:81:87
Certificate issuer: /CN=8ef9348e277114ccebbad89efe895f50a12a8187
Certificate serial: 01965613BD733AA74A021199D8A82FCA4389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
Manifest number: 0C5A
Signing time: Mon 21 Apr 2025 02:00:56 +0000
Manifest this update: Mon 21 Apr 2025 02:00:56 +0000
Manifest next update: Tue 22 Apr 2025 02:00:56 +0000
Files and hashes: 1: jvk0jidxFMzrutie_olfUKEqgYc.crl (hash: wpD0Cwq1NOi+nimxt8d40Ry2FuDJWSvt6NsqQB9QnjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:bd:73:3a:a7:4a:02:11:99:d8:a8:2f:ca:43:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef9348e277114ccebbad89efe895f50a12a8187
Validity
Not Before: Apr 21 02:00:56 2025 GMT
Not After : Apr 22 02:00:56 2025 GMT
Subject: CN=5af5b6d196e0d62454d1a4a62ede0afbc85b7625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:70:31:4b:37:76:fb:3d:30:98:79:b6:3a:
ad:3a:06:94:11:38:41:27:02:ca:4f:49:12:f6:30:
de:44:d1:5a:47:12:9e:c1:52:92:50:ce:8c:1c:d0:
c6:bd:68:8e:e6:93:f2:b2:41:77:4d:f0:d0:12:5e:
22:58:18:09:98:4f:67:ae:ca:ab:0f:02:93:a9:c6:
e1:e2:d0:1c:ea:e0:25:d2:f0:48:40:75:4e:98:e0:
d7:12:f8:ef:f4:17:0b:b5:54:73:a0:6d:08:1a:3b:
f0:89:b7:c8:39:35:5f:97:8e:62:68:4b:a0:a0:fe:
29:1d:36:d6:6f:a4:b7:38:7d:28:84:54:fa:19:f5:
0e:c9:7d:49:97:7e:c1:4e:bc:0e:e4:35:5a:13:a4:
3f:42:5c:79:f9:fc:c5:48:3d:41:09:0f:dd:17:71:
d7:94:c5:06:a1:1c:07:b3:d0:42:cd:25:17:a3:17:
e4:ba:15:96:6a:93:b3:2d:3c:0c:4f:3a:24:ee:68:
80:4d:19:b6:31:c7:8c:5d:6d:e3:75:5e:a0:7c:92:
3b:8f:b7:6d:14:2f:08:49:7b:1e:1a:00:47:fa:e1:
44:ee:dd:a8:d0:c4:3d:4f:6b:94:8d:a5:90:45:59:
af:45:90:88:3e:2b:b4:6c:80:29:39:52:54:12:53:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F5:B6:D1:96:E0:D6:24:54:D1:A4:A6:2E:DE:0A:FB:C8:5B:76:25
X509v3 Authority Key Identifier:
keyid:8E:F9:34:8E:27:71:14:CC:EB:BA:D8:9E:FE:89:5F:50:A1:2A:81:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:16:98:aa:20:db:3f:6b:47:40:28:f9:fb:f9:c2:57:fa:af:
0b:56:a0:9d:8a:86:f7:44:4f:68:86:ca:7a:5d:2a:9b:a6:74:
a6:0f:04:7f:00:8e:d6:4e:1c:a0:04:53:04:08:d8:e0:ad:bf:
86:6f:7a:a4:96:01:eb:28:eb:e0:6c:ed:29:8e:96:2c:32:e4:
67:56:21:ea:db:22:1e:b5:f9:ef:89:5e:7c:db:67:05:2a:75:
ea:65:fd:ef:7d:48:93:31:b4:55:90:d3:f8:3e:0a:60:6d:23:
ef:db:fd:f5:17:b5:2f:55:c0:f1:2b:25:b9:01:5c:51:37:f3:
cb:65:c5:e8:64:b0:71:4d:c3:6d:08:71:80:a9:ef:23:6c:7f:
46:83:b1:78:39:34:0f:36:fd:79:a3:01:c0:fa:ed:fd:c6:cc:
e6:f4:38:52:9f:85:c7:6f:b8:21:b2:19:ce:55:d3:26:82:b7:
20:c9:3e:06:cc:c4:6f:a6:c2:de:af:b9:12:18:0f:19:74:24:
1e:c1:ef:85:08:ae:ec:45:e1:25:7c:10:9b:a7:2b:93:57:13:
e9:f6:76:86:8b:46:c7:59:4a:64:3b:2c:2c:45:9b:fb:0f:65:
fe:69:f5:45:e4:c5:21:66:f5:8c:78:9c:fb:87:df:45:12:b6:
4f:55:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:01:57 2025 by rpki-client