
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
File: jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft (raw, json)
Hash identifier: E4L/CdTJ+W1AdZmS2tFDh6YK6/Rc85Nz8pla+k3fF4c=
Subject key identifier: 98:54:D9:79:07:67:57:9C:04:42:40:6E:DB:DF:91:5B:5C:CB:C8:23
Authority key identifier: 8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
Certificate issuer: /CN=8e5661697da90b5800bc42adf9b45953219755d0
Certificate serial: 019696E0F8D0DFF807D6FE62A16F2A0549D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
Manifest number: 0E19
Signing time: Sat 03 May 2025 16:00:48 +0000
Manifest this update: Sat 03 May 2025 16:00:48 +0000
Manifest next update: Sun 04 May 2025 16:00:48 +0000
Files and hashes: 1: jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl (hash: xTxN1jQdFJO7AOGQZrbtuDlyNgNwfUcqmtE2Vc1o/9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:96:e0:f8:d0:df:f8:07:d6:fe:62:a1:6f:2a:05:49:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5661697da90b5800bc42adf9b45953219755d0
Validity
Not Before: May 3 16:00:48 2025 GMT
Not After : May 4 16:00:48 2025 GMT
Subject: CN=9854d9790767579c0442406edbdf915b5ccbc823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:d8:1d:50:7a:3a:a6:ce:89:43:c2:c4:a2:
01:55:d9:74:cd:16:35:62:16:cd:61:c2:c1:b5:67:
6d:f3:59:8f:f3:9d:c1:2b:e0:5e:3a:19:c7:25:dc:
fb:63:b7:a6:02:83:92:8e:87:33:84:f2:e4:4c:31:
92:b0:fe:c7:15:be:40:46:d8:0a:ee:ac:c2:a5:40:
c5:09:01:6c:48:7a:e4:5a:2e:02:b9:2b:f6:57:6d:
b8:f3:c9:56:d7:a1:3f:07:42:8b:bf:2d:19:e1:af:
b5:96:ad:8d:48:b5:40:5d:e0:c6:fa:8e:e4:0f:e1:
6f:17:73:04:a0:9a:8e:03:6a:22:24:88:33:0a:ae:
c0:6e:a5:20:32:dd:d2:16:e7:4d:fb:4c:73:da:35:
08:8d:bb:cb:8b:da:c6:cd:83:d5:f0:24:7e:59:33:
a3:2c:a8:3f:5f:99:23:f6:ae:ae:da:a6:6a:72:55:
20:dc:29:e3:5d:46:7a:a7:73:0b:b8:7d:40:85:7c:
73:e0:dc:ab:20:ce:50:1d:ec:5c:f7:82:f7:9e:22:
25:8c:1b:d3:f2:24:7a:92:ac:90:3a:4f:43:f6:0f:
d6:9e:b6:10:6e:5c:25:41:1e:18:0e:2a:58:da:76:
3f:79:09:fb:d3:ad:05:02:16:dd:b2:07:19:ce:d7:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:54:D9:79:07:67:57:9C:04:42:40:6E:DB:DF:91:5B:5C:CB:C8:23
X509v3 Authority Key Identifier:
keyid:8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:27:7a:c3:51:57:50:01:b9:15:2b:42:94:e6:6c:93:0f:f0:
43:4f:82:63:63:ea:80:ab:9a:35:82:e7:b1:31:5f:c0:1d:dc:
2b:07:33:6c:e3:4c:a5:9e:1a:53:e3:86:fc:27:ff:a9:63:20:
45:a6:71:8c:24:2b:34:b7:dc:d3:b5:2f:e9:8c:fd:dd:2a:db:
e3:19:33:aa:77:ed:a2:16:37:b1:a6:91:94:84:1d:7f:72:03:
2e:81:ed:c9:ca:8c:43:41:3a:ae:38:2c:b1:2b:2c:e7:7f:ad:
bf:89:38:f3:17:56:bf:f0:cf:db:d3:0c:80:be:da:82:8f:85:
e0:d1:0e:95:f3:54:f2:aa:f3:a8:f7:ef:d9:fd:34:f9:6e:3f:
ad:02:f6:b5:6f:f6:f1:c4:08:c3:ab:ec:70:5b:89:98:81:0b:
13:33:60:fa:78:a2:8d:a3:d1:e1:b5:1a:18:db:36:98:cd:d1:
a5:c0:4f:e2:fc:4a:09:60:94:a9:7c:7d:8b:d8:e8:b8:6b:b3:
9c:f2:1c:46:09:b6:4b:46:f7:12:2f:06:d0:dc:63:28:c3:0d:
33:fb:0a:9d:07:ad:de:f6:95:99:1f:e9:13:8f:c8:8e:ba:e0:
10:6d:f4:ac:a6:02:17:b9:e1:b1:33:c6:e5:f4:5e:f5:3d:8f:
cf:dd:07:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 23:31:30 2025 by rpki-client