Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft
File: jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft (raw, json)
Hash identifier: Vlacey6mnZnVjeXDaDMamuYdgsMnby6+NkPlyyp5s5M=
Subject key identifier: EB:0B:E2:C1:F7:C4:D9:50:4F:2F:97:EE:75:4B:51:17:BE:12:FB:5B
Authority key identifier: 8D:CF:82:69:02:62:F0:62:2E:EB:FA:AD:14:33:D5:8F:B9:CA:9E:1F
Certificate issuer: /CN=8dcf82690262f0622eebfaad1433d58fb9ca9e1f
Certificate serial: 01968623BA474E5ED9DAD837AAFB0C488898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc-CaQJi8GIu6_qtFDPVj7nKnh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft
Manifest number: 151C
Signing time: Wed 30 Apr 2025 10:00:10 +0000
Manifest this update: Wed 30 Apr 2025 10:00:10 +0000
Manifest next update: Thu 01 May 2025 10:00:10 +0000
Files and hashes: 1: jc-CaQJi8GIu6_qtFDPVj7nKnh8.crl (hash: nDkwSY+J1mq6tmVSGEBlWiwbRD7uc6eTQtOYrsIMQZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc-CaQJi8GIu6_qtFDPVj7nKnh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:23:ba:47:4e:5e:d9:da:d8:37:aa:fb:0c:48:88:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dcf82690262f0622eebfaad1433d58fb9ca9e1f
Validity
Not Before: Apr 30 10:00:10 2025 GMT
Not After : May 1 10:00:10 2025 GMT
Subject: CN=eb0be2c1f7c4d9504f2f97ee754b5117be12fb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:7a:27:1d:09:09:bd:33:af:f9:f8:df:7b:
b8:dc:47:a0:23:51:72:63:a2:71:3a:85:1f:2f:8b:
73:52:93:9a:13:84:20:99:e4:fc:29:b8:ba:13:e0:
b5:81:4a:d8:07:f7:9b:bd:d9:24:56:b9:65:20:13:
18:68:14:6f:e6:a2:7c:9a:7b:48:bc:28:a3:fd:6c:
24:53:62:a0:88:25:51:f9:b2:c8:19:42:95:0e:8e:
c4:81:eb:1f:20:97:cb:aa:cc:2a:c7:4f:d0:84:c4:
6f:a1:2f:54:d0:6d:26:10:e9:68:85:d8:72:a2:d4:
2a:14:32:fb:28:d1:01:c7:b9:17:77:a7:05:c0:5e:
19:2a:e1:4a:e2:b7:ac:c8:4d:c2:43:ad:17:fa:ce:
a3:24:4a:fe:c7:a0:9f:37:15:cb:26:c4:f1:66:1d:
ea:a3:93:89:03:be:9b:f1:f7:23:d3:70:fa:8f:37:
e5:10:3f:88:8a:72:e0:76:68:11:cc:a0:19:62:b5:
ab:95:15:e5:23:b2:35:40:ca:39:42:57:fb:32:74:
0c:9e:60:36:1a:b5:a1:6c:f7:9c:59:0c:ce:91:76:
fc:5d:9d:61:46:a1:9a:61:4e:04:a6:ee:5e:6e:b8:
2e:4b:b9:61:fe:15:09:aa:61:38:83:d9:b7:ac:ba:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0B:E2:C1:F7:C4:D9:50:4F:2F:97:EE:75:4B:51:17:BE:12:FB:5B
X509v3 Authority Key Identifier:
keyid:8D:CF:82:69:02:62:F0:62:2E:EB:FA:AD:14:33:D5:8F:B9:CA:9E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc-CaQJi8GIu6_qtFDPVj7nKnh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:13:5d:6b:dc:26:08:c0:71:53:02:54:c5:d5:6e:30:a7:66:
92:23:d1:4b:ba:dc:e5:56:65:a2:f9:bf:1f:db:ab:1e:aa:7c:
48:17:e4:88:ec:b6:4a:d9:bb:dd:43:11:15:4d:7a:62:6e:e7:
ea:b7:2d:c4:61:15:ca:f1:00:4d:e1:bc:ac:b5:e1:7b:d9:e4:
42:cd:90:82:cd:86:b2:48:67:9d:45:ff:3c:dc:98:44:cd:41:
18:13:46:e5:8f:0e:e7:ca:e7:09:98:09:bb:10:01:95:b8:cd:
20:ec:1c:c4:b0:c1:1a:b2:b1:ab:27:99:74:7c:51:36:f3:b1:
1f:c0:27:01:be:f3:d9:42:8e:e7:d2:e4:c8:0a:33:38:f8:ad:
1d:56:67:99:47:8c:c7:e4:a3:c4:e9:f6:f4:d7:2c:a2:b8:21:
09:d7:a0:56:71:b0:32:46:fe:33:f5:ed:ac:dc:28:e0:ea:4e:
5a:dc:96:0b:c8:94:cf:f4:4a:d8:22:08:cf:f2:1d:32:93:2c:
da:80:97:3f:cd:4c:3c:de:19:09:cd:54:ce:db:8c:0a:9e:7b:
87:84:3b:e3:fd:5d:68:a8:31:6d:69:ef:a5:d4:94:f1:4e:95:
52:32:8d:bc:e9:8c:c9:3f:22:b1:d7:92:26:3f:1e:ed:1b:4f:
06:c4:7e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:58:05 2025 by rpki-client