Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File: jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier: 3Y+GkLiolz9ju7ipcP+dxce9DULbf9EzB+c1M9uyR4g=
Subject key identifier: A8:73:E1:6E:22:A0:3B:30:06:31:28:AC:89:49:9F:42:8C:42:C1:B9
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer: /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial: 01967BD781D1BB4641E9737780C75B6829F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number: 062B
Signing time: Mon 28 Apr 2025 10:00:42 +0000
Manifest this update: Mon 28 Apr 2025 10:00:42 +0000
Manifest next update: Tue 29 Apr 2025 10:00:42 +0000
Files and hashes: 1: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: +Ua30tQ/DC4qygdSnEwwheHx53AxN19aIAUEFxEYs5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:81:d1:bb:46:41:e9:73:77:80:c7:5b:68:29:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Validity
Not Before: Apr 28 10:00:42 2025 GMT
Not After : Apr 29 10:00:42 2025 GMT
Subject: CN=a873e16e22a03b30063128ac89499f428c42c1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:4e:83:d3:61:c9:43:f7:ae:f9:06:13:e4:
5e:7e:b4:54:4f:88:65:af:e2:49:81:89:48:57:b7:
a5:d8:f6:9f:77:21:63:2f:c2:59:63:6a:f1:0c:29:
08:c1:8f:ed:b0:a6:18:fb:66:18:10:ab:46:af:3b:
0a:39:52:f0:62:65:77:dd:a0:f0:ab:33:df:9d:e7:
86:f6:94:eb:d3:69:8e:9f:b1:5e:1a:9e:fe:45:94:
f4:48:6c:dc:f4:30:be:2e:be:1c:21:0e:f5:83:b6:
da:2d:38:fb:d4:e2:ad:46:92:86:67:8c:8f:2e:3e:
47:e4:40:ba:e1:36:52:63:06:9a:ed:c5:76:fb:c0:
ad:f9:e5:fe:bf:c4:53:20:ac:f8:d1:e4:c5:2d:7d:
cb:95:01:93:c9:72:fd:4a:91:a4:cc:c0:a0:dd:cf:
9b:57:3c:58:2d:5d:23:79:f7:8c:d8:a4:e0:26:5b:
d0:10:56:f5:e0:a2:35:d0:4a:86:bf:74:02:38:f5:
16:5a:0d:28:5b:1b:24:0e:06:88:30:e6:32:69:45:
93:f0:64:26:a7:0b:9f:dc:ef:2c:c8:79:d9:4e:79:
75:2b:df:76:7b:81:3c:d6:60:f9:d1:cf:b2:11:65:
dc:19:a2:7e:53:ce:6b:c5:13:b2:ab:df:27:d3:7b:
57:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:73:E1:6E:22:A0:3B:30:06:31:28:AC:89:49:9F:42:8C:42:C1:B9
X509v3 Authority Key Identifier:
keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:aa:8a:c8:1f:30:1a:67:20:3a:e5:b5:a6:c2:13:2d:bd:6f:
6d:c2:e2:4b:7d:09:a3:3a:16:aa:62:97:e7:fb:e8:06:f6:91:
ac:af:9f:d3:10:d7:0e:4b:15:a4:e9:34:bd:ae:44:98:d5:7c:
4c:aa:5e:40:a7:80:d9:af:1e:f4:9c:80:0b:ad:cf:6d:7f:90:
97:5e:25:cb:6f:5e:a1:2f:8d:4d:fe:fd:56:e1:78:35:6c:74:
11:c7:17:ce:7e:4b:d2:f1:9c:81:b0:fc:19:ea:24:bf:65:ce:
29:94:0d:6e:d1:6f:3e:fc:14:ec:fc:56:5f:67:04:62:61:72:
a4:a0:87:c2:4d:a6:89:68:28:2d:c4:36:37:18:a9:6f:c2:63:
06:75:3a:02:f1:f3:ec:fc:1e:4d:84:4d:f0:86:8c:48:1c:76:
95:db:16:f1:dd:08:8c:e7:20:14:9e:d6:08:0d:2c:23:33:42:
9e:6b:0f:e3:6f:2c:20:f1:b8:ef:22:3c:3c:b8:56:b6:98:da:
32:f6:11:91:90:79:5c:7f:dd:27:0f:5d:88:9c:dc:72:70:a9:
36:ad:97:40:a1:54:db:be:7a:13:ed:be:41:98:d5:c3:82:65:
23:8d:cf:75:ad:3b:95:c7:51:16:9c:e0:b8:fa:7a:42:87:08:
ae:e2:ee:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:20:58 2025 by rpki-client