Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json)
Hash identifier: 93FC7NX8V3vgroZs/QhZGDu4/wSbFtmEDM1DQ9IE3VM=
Subject key identifier: 73:8B:28:A7:1B:99:9C:DE:CC:83:C8:40:79:5C:5A:E8:57:68:3B:C8
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial: 0196760BEFABB14D2C5C24118DEF1BAC9DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 07:00:15 +0000
Manifest this update: Sun 27 Apr 2025 07:00:15 +0000
Manifest next update: Mon 28 Apr 2025 07:00:15 +0000
Files and hashes: 1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: FlU52Mkl/CN2p7dGggzFSposuzGgjGTpghgvCtHKldg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:ef:ab:b1:4d:2c:5c:24:11:8d:ef:1b:ac:9d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Validity
Not Before: Apr 27 07:00:15 2025 GMT
Not After : Apr 28 07:00:15 2025 GMT
Subject: CN=738b28a71b999cdecc83c840795c5ae857683bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:2e:aa:1c:68:cc:75:78:17:6f:33:9b:1c:
3d:e7:b1:83:c4:2a:77:f9:45:ee:8d:72:18:d6:09:
f5:01:50:04:ed:04:cd:29:d5:7d:59:07:1a:43:ab:
3d:42:2e:dd:cf:ec:e1:ac:fa:8e:d3:13:d5:9b:23:
50:6e:2b:70:00:03:1c:d7:71:cf:2d:11:3d:d2:57:
b9:36:f0:7f:ef:b2:4b:36:41:43:db:33:f2:ef:81:
5e:bf:ca:0b:c3:7b:b1:3d:ea:b7:b2:92:64:f4:4a:
0b:88:80:e7:b8:1d:43:7c:1f:9d:05:e5:41:31:9f:
4f:db:21:aa:af:47:af:19:d8:c0:7e:e4:05:c0:c4:
b8:5a:c4:c5:ec:28:87:3c:17:92:c7:dc:fc:39:3e:
e7:9f:37:ea:25:ae:84:f6:cb:5b:76:4b:24:9a:03:
56:4d:a4:68:bc:e9:43:de:00:c4:75:c9:70:3d:00:
0d:bd:db:0f:34:e5:ff:20:03:dd:e0:45:7c:de:a4:
07:f6:31:14:e8:08:ff:97:64:ab:85:b7:57:b8:16:
1e:7c:a5:f0:cb:ee:04:08:73:29:12:81:2e:c8:a5:
fe:2a:b5:06:b9:74:1e:9e:11:37:ce:16:b0:26:6a:
2c:e6:11:bc:4c:77:da:fc:8a:e9:13:fc:52:9e:6f:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8B:28:A7:1B:99:9C:DE:CC:83:C8:40:79:5C:5A:E8:57:68:3B:C8
X509v3 Authority Key Identifier:
keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5d:08:44:90:d7:62:7e:c4:ef:71:92:a1:ca:b0:c5:1f:85:
0b:c7:72:19:8b:5a:5f:82:02:a4:0b:bc:aa:c0:d2:48:17:78:
91:f8:db:0b:46:24:9e:d4:28:92:db:e6:11:28:dd:29:0c:4d:
70:37:19:5d:14:56:01:20:8d:a7:de:3e:e9:d2:9a:39:4d:77:
0a:87:7b:0a:8e:cb:05:71:fc:84:79:8e:b6:89:b6:35:34:54:
a7:c7:50:c3:bf:17:10:dc:82:fc:7e:ef:cd:f4:23:2e:1b:97:
65:a6:aa:24:9b:0b:d6:3c:cd:60:c5:1a:c1:75:85:cb:58:0e:
5c:23:c3:f3:86:72:62:0d:4b:84:9d:1b:2f:f2:6a:35:f0:02:
bf:a1:ed:63:ea:0f:57:4f:a6:0e:a1:f2:e0:ad:95:de:7e:54:
1d:c0:70:ee:d2:c3:e2:57:9e:b4:78:d6:9c:bc:99:bf:c4:9f:
46:40:4a:05:5f:21:d4:b3:aa:27:45:59:06:ea:77:30:db:ec:
10:f6:0c:c8:71:6f:d9:c0:f4:4d:79:4a:81:50:fb:db:75:4f:
e9:b3:2b:b8:60:8f:15:57:f3:d6:e5:c5:79:32:85:81:8d:b7:
7b:3e:94:8a:5a:76:41:90:5d:76:c5:49:25:da:1e:3e:6e:6b:
7f:ea:df:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:42:53 2025 by rpki-client