Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
File: JwBs1Oq8VbNskwifFND6bg-gzG0.mft (raw, json)
Hash identifier: kvyUpR5i8nHaL4U2lRT5rE3WXNvG5/5c0URW2XbbYo8=
Subject key identifier: D1:BB:0C:F8:7A:93:CD:3E:ED:9E:13:93:FF:EF:0E:5E:64:30:AF:11
Authority key identifier: 27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
Certificate issuer: /CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Certificate serial: 019690030D53D2C297A73283876D001B95F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
Manifest number: 101D
Signing time: Fri 02 May 2025 08:00:41 +0000
Manifest this update: Fri 02 May 2025 08:00:41 +0000
Manifest next update: Sat 03 May 2025 08:00:41 +0000
Files and hashes: 1: JwBs1Oq8VbNskwifFND6bg-gzG0.crl (hash: MWKr3Tk0fjyylR1oxNd8wl5s/H6oJK+6uOJ9DG74k+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:03:0d:53:d2:c2:97:a7:32:83:87:6d:00:1b:95:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Validity
Not Before: May 2 08:00:41 2025 GMT
Not After : May 3 08:00:41 2025 GMT
Subject: CN=d1bb0cf87a93cd3eed9e1393ffef0e5e6430af11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:de:ab:2a:36:b3:c7:3c:f9:dc:8d:4e:d0:bf:
e8:56:cd:96:ac:a8:e7:ce:d6:61:aa:53:ad:40:75:
92:77:c2:37:6b:30:e2:40:d9:c8:f6:05:72:32:06:
91:4f:fb:b4:29:1b:66:1a:0b:47:91:41:97:40:5f:
b0:29:99:ea:2d:32:92:df:bd:45:b2:0f:0c:03:b9:
57:43:03:83:60:6e:6a:4b:f1:db:aa:88:ff:7d:47:
0e:e2:10:4e:42:b3:d6:12:61:ab:af:78:40:34:67:
3d:51:b7:14:e7:f9:cc:43:e0:5d:48:78:0f:bd:12:
dc:7c:02:1f:da:f1:f0:f7:bf:65:c0:28:3b:dd:29:
e8:f2:a7:05:eb:f8:93:c8:39:fe:81:af:a6:1c:06:
04:2a:b3:fc:fb:8a:7d:5b:80:d6:0c:bc:6a:4c:0a:
6b:c5:a5:9d:e6:84:0a:f3:28:83:d8:b2:8d:d9:f5:
eb:c7:c5:f7:a9:ad:21:4f:75:70:7f:dc:e4:a4:69:
95:32:b3:09:35:a9:80:39:4f:52:60:5a:b8:00:bb:
38:89:7d:4d:d3:c2:d4:21:28:18:51:e0:7d:20:98:
36:9c:17:bd:57:29:42:5c:e6:06:68:50:9a:c5:3f:
ef:3f:55:84:f8:87:8a:ab:85:6c:30:57:3e:11:65:
b6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BB:0C:F8:7A:93:CD:3E:ED:9E:13:93:FF:EF:0E:5E:64:30:AF:11
X509v3 Authority Key Identifier:
keyid:27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:18:9a:22:51:77:2c:91:7f:ed:c4:1d:39:e6:a9:c7:89:a9:
c5:92:6b:e8:a6:e7:81:12:9c:84:74:fc:4d:c4:68:1e:06:3e:
81:2f:d5:c3:ae:9f:20:59:09:36:1e:1a:f2:4d:da:4d:77:fb:
95:ec:43:8e:8b:3d:93:2c:44:d5:4e:1c:c3:9f:52:2d:f5:1e:
2d:d8:52:78:5f:9e:ef:e3:ba:de:89:10:e3:2b:5b:ba:b2:ab:
37:f1:9d:e0:39:ab:1d:96:46:33:5e:8c:cf:46:7c:df:91:1c:
77:20:bb:70:23:da:89:06:bc:a1:c0:1e:12:fc:36:f5:04:70:
ac:65:92:6c:56:14:97:fd:d0:69:78:86:d1:cc:49:f1:0a:dd:
28:64:e0:de:6f:25:aa:ac:96:af:60:95:ae:0a:c0:2e:ba:56:
cc:76:b4:9a:d6:fa:25:1a:dc:d8:ce:ae:6e:3e:7e:24:5c:cc:
07:89:e4:e8:51:be:7d:99:0a:da:f2:05:70:6b:57:8e:c6:23:
db:6c:83:1e:a3:f6:07:a0:4e:89:ac:45:bf:e6:b9:2d:41:5f:
2e:ae:28:59:18:6a:03:ad:cd:ba:51:3e:d4:fb:dd:7f:58:23:
c3:fd:2c:86:fa:bb:6d:3f:f6:5f:ed:4a:e7:df:74:9a:28:c3:
9c:72:d8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:21:04 2025 by rpki-client