Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
File: JCsEwxmbHrlpPUMg9702HtYXBTA.mft (raw, json)
Hash identifier: EOeS8WyjxvpGsDVdzN5ZLCO0gJxQxys8OO301++fSO0=
Subject key identifier: FB:0C:03:83:EE:D6:1F:60:97:B7:3C:6C:58:5A:15:38:99:1D:C9:56
Authority key identifier: 24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
Certificate issuer: /CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Certificate serial: 0196760CC3A9EB2797C96DA471D4E83E3D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 07:01:10 +0000
Manifest this update: Sun 27 Apr 2025 07:01:10 +0000
Manifest next update: Mon 28 Apr 2025 07:01:10 +0000
Files and hashes: 1: JCsEwxmbHrlpPUMg9702HtYXBTA.crl (hash: 824yvnkcVpfKoS+pShUVYi5Sl1NNHfgUpENp26WptgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:c3:a9:eb:27:97:c9:6d:a4:71:d4:e8:3e:3d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Validity
Not Before: Apr 27 07:01:10 2025 GMT
Not After : Apr 28 07:01:10 2025 GMT
Subject: CN=fb0c0383eed61f6097b73c6c585a1538991dc956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:09:52:b2:03:05:1a:80:c5:fd:9a:89:ee:
d7:0e:18:59:af:fc:96:c6:80:65:43:d2:40:84:f0:
83:4a:27:16:eb:81:f7:d7:c1:26:f7:e0:eb:94:b2:
f5:fe:64:37:68:66:a7:91:48:c8:67:17:c0:95:25:
37:95:52:36:7d:b2:ec:e5:8c:56:32:25:39:7e:aa:
0a:63:40:c3:de:80:c9:96:de:36:a8:8b:da:be:13:
9c:f5:0e:78:32:0b:51:8c:9f:5c:f8:13:93:95:21:
3e:47:91:8a:36:e6:fa:9c:ba:d5:18:32:72:fa:30:
a8:f0:f1:fd:fd:33:cc:83:06:7c:aa:91:c1:b9:dc:
8f:62:1b:16:72:b8:c2:ed:ea:99:50:7d:68:26:75:
7b:5b:ca:48:eb:d4:5d:5c:1a:e6:87:2a:e7:1d:9f:
53:25:d9:b7:eb:fc:9c:0b:e2:5c:2a:cf:a3:bd:c6:
77:a6:86:a1:9b:4d:7e:74:a5:97:38:f3:e1:4d:f1:
ea:66:ea:8c:03:f9:ff:eb:8a:34:03:e8:d9:c4:3d:
cb:a9:db:8f:e8:23:13:71:b5:ed:0c:43:20:70:83:
1a:d9:2c:fd:91:4e:94:3c:0d:66:0b:1e:3a:cf:09:
76:0a:20:1a:d8:ff:14:b3:ae:51:26:1a:91:06:db:
47:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0C:03:83:EE:D6:1F:60:97:B7:3C:6C:58:5A:15:38:99:1D:C9:56
X509v3 Authority Key Identifier:
keyid:24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4c:21:66:ea:10:31:ba:e5:63:f3:14:5d:97:de:72:18:b0:
56:62:c0:fc:ce:05:16:d1:c6:48:2c:3b:00:0e:42:a3:fa:d0:
5f:b4:f9:49:84:28:70:f2:2c:34:eb:05:68:5e:1c:16:7a:97:
60:85:c4:21:8a:cd:62:66:fc:7f:51:46:21:c0:50:68:eb:38:
88:cf:0c:60:84:97:90:73:46:f7:6b:a7:2f:70:4e:bc:d9:bf:
25:7c:81:35:10:5b:ec:91:92:5d:39:eb:f1:9a:3a:19:3d:51:
5b:d4:fd:e9:c9:87:4e:5a:3a:44:67:fb:f1:61:ac:11:a1:14:
42:08:45:26:c4:62:c5:cc:af:6b:6b:ad:a9:19:31:2d:9a:a4:
51:26:71:83:b1:9d:e8:1f:90:47:73:24:f6:1b:12:16:9e:8a:
43:4c:59:3e:77:18:f2:98:7b:5c:bc:a0:c6:ab:a0:b5:69:60:
3e:2e:ce:a2:a3:a1:78:1b:56:da:07:25:1f:87:3a:52:ce:70:
79:19:e1:b9:78:e4:33:d8:7c:f5:4b:5f:90:8e:d3:45:4e:ae:
39:0a:12:e1:fb:fe:9a:e2:c5:e0:3e:2b:ce:71:63:38:ae:5b:
2a:62:41:b2:97:3e:f0:ff:ac:8f:3f:6c:57:45:f0:b9:52:99:
6a:09:59:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:06:48 2025 by rpki-client