Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
File: JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft (raw, json)
Hash identifier: J0y6gjAGI1SJT+MC0Cc1vSOMWTD3NgUAeSXlJQXdsAE=
Subject key identifier: D1:2B:3D:F6:06:41:81:5F:9A:C9:2F:90:09:66:0A:40:AC:9F:7F:21
Authority key identifier: 25:BA:87:95:F3:E7:E2:D2:C7:C9:0F:1C:36:66:CF:7F:92:83:DA:9E
Certificate issuer: /CN=25ba8795f3e7e2d2c7c90f1c3666cf7f9283da9e
Certificate serial: 0196741E94BD853D689AAFA40769D1F7D2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
Manifest number: 1508
Signing time: Sat 26 Apr 2025 22:01:23 +0000
Manifest this update: Sat 26 Apr 2025 22:01:23 +0000
Manifest next update: Sun 27 Apr 2025 22:01:23 +0000
Files and hashes: 1: JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl (hash: KwLut6qrQN04ygUjoTiatj3ylTnhYg78uBeo+sK6+mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:94:bd:85:3d:68:9a:af:a4:07:69:d1:f7:d2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ba8795f3e7e2d2c7c90f1c3666cf7f9283da9e
Validity
Not Before: Apr 26 22:01:23 2025 GMT
Not After : Apr 27 22:01:23 2025 GMT
Subject: CN=d12b3df60641815f9ac92f9009660a40ac9f7f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:58:a5:fc:72:2d:59:70:4d:14:75:47:0c:
b2:36:63:23:89:7e:e4:56:06:a6:bf:08:e6:f8:ec:
04:46:e4:a6:4e:f5:39:e6:81:45:6f:95:30:69:eb:
36:77:3e:d9:4c:87:26:75:0a:fd:12:94:86:c2:94:
a4:4d:b5:df:a2:fe:d4:f2:11:fb:38:88:26:a9:9f:
14:45:28:f2:1b:84:d2:57:82:5c:04:ea:92:df:6b:
57:74:44:f0:fe:58:45:98:c3:92:f8:1f:e8:bd:b4:
e9:23:00:89:00:51:c7:66:5c:c2:b3:26:5e:aa:16:
be:ed:37:00:6b:b3:a3:f0:94:55:39:cb:45:5b:7a:
36:f0:83:78:de:52:59:5f:06:c9:46:2f:2a:17:c8:
af:b7:41:6d:9e:16:23:8b:e5:47:ee:56:82:94:ca:
c4:0f:bc:42:5a:4f:47:11:79:e4:70:fa:09:51:e6:
1e:01:e2:7b:74:b9:07:27:12:1b:78:e8:13:12:91:
e1:ff:38:e9:3b:9d:04:5c:a0:56:c0:f6:19:be:a6:
c3:33:53:48:ac:31:b4:fa:a9:e3:7c:b9:20:aa:bc:
31:8f:69:3d:23:91:ba:b7:62:8b:80:84:46:cf:99:
8f:a1:bb:05:f3:58:5a:4c:32:15:7c:90:8f:af:3e:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2B:3D:F6:06:41:81:5F:9A:C9:2F:90:09:66:0A:40:AC:9F:7F:21
X509v3 Authority Key Identifier:
keyid:25:BA:87:95:F3:E7:E2:D2:C7:C9:0F:1C:36:66:CF:7F:92:83:DA:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:90:20:62:8f:e5:6b:29:45:77:30:cf:7a:b5:39:0f:de:a7:
28:0b:61:24:7c:a4:80:b2:3f:45:7b:2c:fc:43:9a:80:65:f4:
25:71:08:4b:b6:a3:c0:e0:c8:e1:68:41:97:8c:84:50:1d:2a:
15:23:5b:2b:b8:7d:1b:e5:14:a3:f2:40:4d:6d:c4:c3:59:e7:
b5:7c:dd:03:8e:9c:4e:6d:14:f1:7d:3d:58:20:2a:af:9e:24:
4a:c5:6e:08:be:88:f1:c4:c3:94:06:c5:c4:44:e9:3a:61:bd:
89:91:86:0a:79:5b:49:d4:d0:0f:24:25:ef:98:07:d4:34:bd:
18:17:b1:20:0b:a2:cc:bf:73:ec:24:49:0e:d8:21:45:c3:76:
75:cb:b1:1f:8d:62:ab:57:d6:2c:ae:cc:40:78:05:df:b5:38:
66:11:ee:3d:19:14:8a:87:21:3a:68:6d:37:5a:5d:bd:b1:df:
00:32:60:95:3b:7f:6c:7a:a7:0c:fe:8c:4f:42:8c:8e:4d:51:
9e:0b:40:d5:bf:08:c7:77:c6:71:ac:d8:10:53:14:ee:b5:67:
85:94:b1:ee:4a:ab:f1:0e:8f:27:d0:0e:1d:e4:47:75:95:d6:
27:d2:f5:87:d5:fd:53:24:b3:64:25:18:45:80:f2:b7:76:8d:
1a:84:ff:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:35 2025 by rpki-client