Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
File: sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft (raw, json)
Hash identifier: jVc7cR/g77N92MaAiTq7/gD/6JkJpY3NLkiqY5VC1KI=
Subject key identifier: D6:E9:25:E7:87:25:65:5E:28:44:E9:EF:7B:09:63:D1:8B:C8:B8:A8
Authority key identifier: B0:52:4F:65:5B:A3:C9:CA:5D:98:B0:57:C2:4C:0F:08:B7:19:D4:A7
Certificate issuer: /CN=b0524f655ba3c9ca5d98b057c24c0f08b719d4a7
Certificate serial: 019675304840224DC2289AEB34DC41AD9E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
Manifest number: 0250
Signing time: Sun 27 Apr 2025 03:00:20 +0000
Manifest this update: Sun 27 Apr 2025 03:00:20 +0000
Manifest next update: Mon 28 Apr 2025 03:00:20 +0000
Files and hashes: 1: sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl (hash: JbMik33I31/wHd//gPmeXXMWGKqlvP3alfv/P9WyaWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:48:40:22:4d:c2:28:9a:eb:34:dc:41:ad:9e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0524f655ba3c9ca5d98b057c24c0f08b719d4a7
Validity
Not Before: Apr 27 03:00:20 2025 GMT
Not After : Apr 28 03:00:20 2025 GMT
Subject: CN=d6e925e78725655e2844e9ef7b0963d18bc8b8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:06:ed:4c:22:12:02:71:ba:8d:c7:de:86:
6f:7d:ff:ad:39:c1:ad:08:b1:28:70:6f:f2:b0:35:
b4:23:57:e0:f5:21:06:ae:3e:2f:ba:61:0e:56:60:
10:6d:33:b0:da:de:94:b7:45:28:68:6a:3a:0e:2b:
9e:df:84:2e:65:35:2d:f8:70:3d:b1:dd:d3:3b:81:
fd:ef:4c:58:00:47:a3:08:de:4e:68:02:58:7c:f3:
4a:f7:1c:56:2b:96:89:4f:1e:85:78:3d:0d:d2:94:
56:e4:fa:e7:2f:9f:0e:ee:2e:9a:65:f2:1b:d2:8c:
6d:58:26:67:65:eb:46:4d:23:41:69:73:13:85:07:
d4:b5:af:d5:2d:98:61:6c:53:4c:89:fd:9c:2d:b2:
96:04:75:89:10:f7:d1:5b:91:aa:65:6e:31:ee:e9:
d6:73:9c:2a:2c:bf:61:32:19:58:78:7e:95:12:3d:
c3:a8:cc:12:d1:a1:c6:1d:ac:51:fc:15:25:07:cc:
9d:3b:a7:85:6a:9b:3b:39:a7:ee:90:9d:36:69:20:
77:e7:28:96:4f:8d:df:c3:dc:71:b7:be:d9:5a:79:
73:c4:b0:46:11:06:bc:1d:32:1b:db:23:1a:0c:64:
7f:79:ba:de:7f:5c:c6:48:19:05:81:08:ab:93:36:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E9:25:E7:87:25:65:5E:28:44:E9:EF:7B:09:63:D1:8B:C8:B8:A8
X509v3 Authority Key Identifier:
keyid:B0:52:4F:65:5B:A3:C9:CA:5D:98:B0:57:C2:4C:0F:08:B7:19:D4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:3b:56:b6:1c:d1:ef:a9:80:c4:d6:c1:16:5a:92:f8:c1:e2:
61:e0:9f:1d:44:70:44:a4:8c:10:9d:dd:c8:f1:95:67:e0:34:
8b:92:e1:d4:fe:9a:0c:23:90:5d:d2:4e:c0:a6:f4:67:a9:2a:
ea:07:13:b5:fd:fd:ef:e3:d8:64:ec:29:32:1d:95:58:97:4f:
3d:42:9d:19:4b:20:69:3c:0d:50:3b:b8:78:aa:c6:33:d1:35:
ec:12:48:90:6e:c3:98:2c:6f:56:c1:67:5b:28:52:d1:4e:5b:
4f:4c:f1:a4:73:03:27:a5:b9:d1:68:4b:e7:b9:de:f3:8b:69:
ba:6a:f0:22:79:92:15:e3:78:e5:ec:74:95:53:5f:21:b0:f7:
8b:30:09:b1:8c:3c:b7:54:d7:2d:9c:a4:75:0d:3c:1b:da:e3:
cf:72:c9:6e:2c:e8:06:16:4b:4b:5e:2d:51:06:78:bd:3c:c1:
ae:02:43:52:8e:05:9b:4b:b8:2d:9c:f7:0a:a7:00:65:1f:21:
f5:f3:de:38:e3:8c:ff:70:c1:bc:6a:be:41:38:cd:b9:3d:9a:
13:0c:34:0b:b3:8c:da:50:da:69:84:ec:71:8b:38:02:ce:8a:
d8:e3:3c:47:35:8a:f5:e1:df:66:83:c5:2b:ad:19:76:80:d9:
55:6c:85:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:18 2025 by rpki-client