Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
File: jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft (raw, json)
Hash identifier: gabmPScD3O7c626j6xDWSGMRDg8gy4/GQDdZww/OalA=
Subject key identifier: 02:E6:CE:18:61:32:BB:F8:81:D1:82:4D:70:CD:12:87:02:D8:CD:9D
Authority key identifier: 8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
Certificate issuer: /CN=8c4378b571682d34773b463752701c9405fbed78
Certificate serial: 019679B1F129DEF0EEBB367B0B4347EACBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
Manifest number: 0407
Signing time: Mon 28 Apr 2025 00:00:26 +0000
Manifest this update: Mon 28 Apr 2025 00:00:26 +0000
Manifest next update: Tue 29 Apr 2025 00:00:26 +0000
Files and hashes: 1: jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl (hash: 23ONSM/1gLmcLr8lp/LR0yY+Q5KTDNw2PuN25Aqb1a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:f1:29:de:f0:ee:bb:36:7b:0b:43:47:ea:cb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c4378b571682d34773b463752701c9405fbed78
Validity
Not Before: Apr 28 00:00:26 2025 GMT
Not After : Apr 29 00:00:26 2025 GMT
Subject: CN=02e6ce186132bbf881d1824d70cd128702d8cd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f3:8d:26:1f:20:02:6f:e1:70:7f:54:46:98:
43:26:1d:05:25:e5:33:cf:ec:ea:5f:61:4a:79:08:
4b:b3:26:25:39:5f:79:af:71:05:15:7b:25:33:d0:
38:fe:fb:88:5d:e4:64:3a:dd:27:85:aa:0e:74:aa:
24:37:2f:7f:b7:ca:a3:8a:d1:7f:92:fa:b9:11:fd:
14:20:a7:83:22:ad:14:eb:fd:5e:73:d7:a1:4e:30:
94:dd:46:9b:96:a3:50:85:87:1b:0a:40:fc:39:3d:
45:ae:9f:59:c6:c2:1e:80:56:bf:a4:23:5c:8a:ad:
70:ea:a4:92:88:42:1e:7d:05:68:6c:dd:e5:b8:c1:
c3:55:c4:ab:0e:35:15:ec:2a:b3:39:e6:aa:e3:5e:
c6:d2:aa:ec:6d:b9:b9:7d:90:30:02:39:9b:4e:1f:
1b:3e:b9:26:ef:dd:a1:6e:d0:da:bb:c7:f3:b3:77:
0b:fd:ab:0f:44:a1:a4:e4:49:9d:12:a7:29:a8:9f:
8d:7f:69:2c:08:e8:99:06:29:46:2b:cc:d5:a2:81:
fc:49:6f:af:c1:5f:12:7d:99:f5:81:e4:aa:65:c3:
5c:25:8a:29:a6:d8:27:d7:df:6d:7a:57:e1:62:08:
6f:cb:db:58:f1:ef:bc:ea:35:0a:1d:97:ec:0b:48:
d1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E6:CE:18:61:32:BB:F8:81:D1:82:4D:70:CD:12:87:02:D8:CD:9D
X509v3 Authority Key Identifier:
keyid:8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c0:81:57:bc:88:82:ff:aa:5e:21:e4:4d:20:c8:81:c7:2d:
17:79:f3:2a:3d:e1:d7:67:3b:ea:2f:e4:b9:a4:fd:a4:2c:f3:
72:fe:23:a9:56:88:6d:a4:e5:4b:6e:46:1b:d2:c6:fa:71:29:
00:73:01:ac:36:6e:aa:90:ef:be:b0:00:54:b0:00:5a:c8:05:
2b:ed:71:16:97:61:d3:f1:f4:59:1c:30:b1:b1:64:99:ff:e0:
2b:11:de:f6:6a:1c:0c:23:be:cb:78:b7:16:ef:95:41:81:0c:
7c:82:8c:08:08:d7:94:aa:9e:eb:fa:5f:2f:59:bb:59:5d:be:
92:13:7d:e7:81:21:63:80:ed:b8:ff:e1:64:71:2a:50:8a:94:
2e:6a:a7:f6:65:b6:f6:a5:f5:3b:59:58:29:f0:a3:fb:58:6a:
39:b1:2c:63:83:53:cc:2b:15:ed:d9:10:ae:fc:cc:c4:52:86:
34:92:d3:ba:b4:1b:82:ee:12:43:1a:a2:f6:d9:3b:c1:a9:a8:
e9:b3:ae:9e:40:7c:37:f4:0d:b3:b1:3e:61:9b:95:32:81:19:
83:e8:10:6b:e5:27:45:3d:80:42:70:6a:81:b0:0c:3a:3c:eb:
6e:72:7f:36:2e:0e:2f:ce:f7:7d:ed:18:a2:14:d5:9b:6a:fa:
83:12:68:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:39 2025 by rpki-client