Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
File: jPJ69YYwRc-otYseJ3aSueHTje0.mft (raw, json)
Hash identifier: RVRYTa8rZ3gvDFGrh5DpvDMva1qpsBxrXEvUycamVg4=
Subject key identifier: EF:9A:B0:30:7B:B1:3F:4E:43:1F:58:87:24:7F:A2:F6:5B:21:1A:94
Authority key identifier: 8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED
Certificate issuer: /CN=8cf27af5863045cfa8b58b1e277692b9e1d38ded
Certificate serial: 01968391B68B5D3C5874041A3DC76DF7EB7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 22:01:26 +0000
Manifest this update: Tue 29 Apr 2025 22:01:26 +0000
Manifest next update: Wed 30 Apr 2025 22:01:26 +0000
Files and hashes: 1: jPJ69YYwRc-otYseJ3aSueHTje0.crl (hash: ifTZyBIQe/BTjeNUIoxf+2wMgHS4gNGE+h3/9uGDyVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:b6:8b:5d:3c:58:74:04:1a:3d:c7:6d:f7:eb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf27af5863045cfa8b58b1e277692b9e1d38ded
Validity
Not Before: Apr 29 22:01:26 2025 GMT
Not After : Apr 30 22:01:26 2025 GMT
Subject: CN=ef9ab0307bb13f4e431f5887247fa2f65b211a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:d5:2e:c7:25:98:5e:8a:01:30:4c:68:de:
3e:22:0c:69:14:99:2e:90:5e:a2:f7:db:7a:1b:61:
36:a2:a4:0f:ee:30:2b:e2:ca:0b:8b:aa:d7:2c:07:
5a:b7:f9:17:8f:83:67:1d:5b:d9:51:91:56:d8:6a:
1c:88:2e:52:95:77:ae:34:54:9c:40:5e:44:b0:6b:
74:d2:0a:ec:b5:9b:37:8f:21:60:2e:66:be:9a:7f:
7a:ef:87:2b:90:cf:ea:45:df:f3:e0:77:45:cd:38:
fb:7f:04:70:43:14:bf:91:25:17:d6:c3:da:f2:0a:
d5:ca:96:f0:7e:68:91:79:df:85:0a:26:98:3f:eb:
c6:a9:4c:1d:81:7b:f3:6b:55:48:1f:e0:89:eb:6a:
01:c0:8e:a4:7b:29:c4:ec:9c:d9:f5:30:d3:e2:32:
03:9b:92:27:e2:16:61:ed:39:2c:8b:94:47:b1:86:
3f:33:33:de:41:84:06:bb:c7:4c:e2:8a:3e:d6:4b:
42:3c:84:62:0e:83:67:dd:3a:77:db:10:5b:7e:98:
c7:60:32:58:32:44:76:50:bf:b7:81:0c:df:ab:43:
84:2d:59:91:a5:e3:eb:70:8b:a3:6a:3c:8a:66:2e:
65:1a:b3:c1:d0:38:76:c7:ae:1f:b7:55:e1:79:10:
8e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9A:B0:30:7B:B1:3F:4E:43:1F:58:87:24:7F:A2:F6:5B:21:1A:94
X509v3 Authority Key Identifier:
keyid:8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:bc:5e:0f:17:67:69:e1:13:c5:32:70:f3:f4:a4:5d:6c:99:
e4:f4:09:08:5f:9d:04:98:55:05:a2:e7:65:e2:59:82:fb:aa:
7e:d1:14:04:f1:97:74:68:12:7c:60:9b:0b:5e:46:a6:b5:41:
e9:f4:d4:84:cc:07:14:2c:d3:1c:91:a1:31:93:07:21:6c:b8:
e8:25:5d:22:fa:e3:78:f7:d1:e7:ab:94:15:f6:aa:eb:b5:95:
2b:50:05:19:96:19:be:38:c0:6c:98:e8:99:50:42:44:b7:35:
6a:54:d0:e3:b3:81:5a:f5:bf:9a:ca:59:70:1a:7d:ff:88:1b:
bb:54:d9:38:13:a0:a4:31:de:1d:5e:c8:46:4b:8b:23:18:f7:
22:04:fc:65:fe:b2:1d:a6:cf:ce:63:e3:06:08:5a:11:ab:02:
c2:05:5c:b9:bc:c6:a2:a5:25:65:ba:7c:ac:ad:13:31:ce:6a:
f0:6e:55:f1:7b:a5:ac:ef:48:22:9e:9d:2a:29:c9:8e:1c:9d:
80:a1:97:76:5b:ef:c6:e2:ac:f5:ea:5a:b8:e6:9a:f4:81:80:
f7:59:b7:af:5b:42:3f:96:0c:93:b2:62:49:fb:8c:5d:69:55:
3b:e1:fd:3d:ec:ff:d2:be:36:63:8e:8f:ef:51:7f:1f:2e:1c:
46:6f:d3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:14:08 2025 by rpki-client