Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.mft
File: jmcNnjgoGVjuocw46s67vcM4HTY.mft (raw, json)
Hash identifier: wj+1xRk84EBtB05Rza2FXmFoq6kncgBlYSGUIUKKLQk=
Subject key identifier: B5:90:11:8A:E3:CD:DB:52:5C:55:42:E9:69:60:69:20:6A:C2:E7:72
Authority key identifier: 8E:67:0D:9E:38:28:19:58:EE:A1:CC:38:EA:CE:BB:BD:C3:38:1D:36
Certificate issuer: /CN=8e670d9e38281958eea1cc38eacebbbdc3381d36
Certificate serial: 01968390B65161CC4D2CC25D5695D8C5C7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmcNnjgoGVjuocw46s67vcM4HTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.mft
Manifest number: 09F0
Signing time: Tue 29 Apr 2025 22:00:21 +0000
Manifest this update: Tue 29 Apr 2025 22:00:21 +0000
Manifest next update: Wed 30 Apr 2025 22:00:21 +0000
Files and hashes: 1: jmcNnjgoGVjuocw46s67vcM4HTY.crl (hash: 4RuWJQht1Z79OELHNBiTLlyj6IW4YYWYPUIeknxQtbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmcNnjgoGVjuocw46s67vcM4HTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:b6:51:61:cc:4d:2c:c2:5d:56:95:d8:c5:c7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e670d9e38281958eea1cc38eacebbbdc3381d36
Validity
Not Before: Apr 29 22:00:21 2025 GMT
Not After : Apr 30 22:00:21 2025 GMT
Subject: CN=b590118ae3cddb525c5542e9696069206ac2e772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:03:ec:9b:7b:99:33:d5:8c:b1:82:51:9c:
3c:4f:76:a3:1a:f8:e6:e8:9d:72:bf:d2:c3:a3:a8:
7f:b0:b3:a0:24:80:25:01:da:2b:32:c9:af:eb:07:
54:5f:f6:13:77:c1:42:ee:45:47:c5:9a:9b:de:73:
20:92:f0:c8:07:5f:e2:a4:7f:6d:d5:b4:ef:41:c3:
58:34:13:63:d6:d2:7a:92:34:3e:e4:12:2b:50:2c:
bb:88:3b:e6:82:e3:38:56:fa:a5:e3:d5:0b:c8:b5:
d6:af:d0:60:f1:39:0d:60:d5:ea:43:94:91:6b:ba:
e8:b1:2d:62:6b:38:fe:3e:72:ed:19:b7:ef:1b:1f:
43:25:a3:50:fb:a7:c9:7b:42:60:01:89:ee:fc:47:
c5:b8:68:d1:c6:71:3b:28:a8:e5:ca:6c:2e:d8:43:
f7:cb:64:92:d2:1d:44:cd:68:a7:c6:d3:48:91:be:
23:e0:6b:ef:e9:3a:33:97:8e:99:8c:e6:65:51:e9:
79:f5:10:cb:7e:be:71:b5:50:c1:ac:9f:28:6d:54:
ed:14:e5:8c:72:25:c0:ae:e1:7e:f7:d6:22:d3:9c:
58:f3:85:43:00:b6:24:0c:7f:27:7c:8c:c1:29:48:
30:6d:88:0c:24:a8:cf:b6:06:89:f4:6d:87:36:af:
98:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:90:11:8A:E3:CD:DB:52:5C:55:42:E9:69:60:69:20:6A:C2:E7:72
X509v3 Authority Key Identifier:
keyid:8E:67:0D:9E:38:28:19:58:EE:A1:CC:38:EA:CE:BB:BD:C3:38:1D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmcNnjgoGVjuocw46s67vcM4HTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e0:7e:a9:2b:f4:10:d1:ed:8c:5e:fe:95:91:e7:b2:c9:99:
47:82:51:1d:e0:bd:ee:db:91:63:fc:5b:bc:28:fc:37:22:28:
62:5c:7e:0e:77:ec:05:d2:a1:1a:6f:0b:5a:dc:4e:70:04:47:
7f:ef:8d:35:06:e9:98:33:80:87:07:41:91:3b:7e:04:56:fe:
3b:e4:7f:04:9d:d7:51:0c:81:1b:26:42:8c:3f:4b:21:ae:f4:
6a:54:b3:9e:66:df:13:b4:ea:2d:ef:c2:16:9c:8d:14:54:87:
a5:5d:80:ea:ed:ae:de:f9:ca:95:47:0b:fc:8e:a9:cb:3f:a7:
9c:5e:6c:0b:ba:d6:41:e5:d8:79:80:ea:f4:61:e3:44:2c:04:
86:39:1d:9a:9c:02:da:1b:67:ca:24:0c:30:c2:fa:fa:dc:bd:
7d:c1:df:ab:62:a2:99:e7:08:40:e9:cb:ef:d4:87:d4:4c:50:
7b:a4:0b:3c:f8:8c:91:c0:f1:02:2c:4c:97:f7:42:73:b1:00:
4d:c0:5a:25:a2:14:03:fd:d6:e4:d3:7d:92:c5:09:09:29:ac:
29:05:bf:58:19:0f:24:83:1e:7d:ca:3f:88:36:b5:7e:64:89:
31:14:56:da:ab:c8:09:db:37:a9:4c:e7:4f:48:56:55:b0:d6:
31:21:aa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:48:59 2025 by rpki-client