Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
File: jR3ulkqib4m9ECJ21GVjP7guqig.mft (raw, json)
Hash identifier: QC13hEC8k3UDAerHtGZJa1bolN4SUasJviZZdez/+sA=
Subject key identifier: 8D:29:58:E8:51:01:36:A9:F6:35:3A:9A:7C:25:83:00:C4:EB:80:65
Authority key identifier: 8D:1D:EE:96:4A:A2:6F:89:BD:10:22:76:D4:65:63:3F:B8:2E:AA:28
Certificate issuer: /CN=8d1dee964aa26f89bd102276d465633fb82eaa28
Certificate serial: 01968435DA07AD9AA67CB46C5446BC92DFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
Manifest number: 0976
Signing time: Wed 30 Apr 2025 01:00:43 +0000
Manifest this update: Wed 30 Apr 2025 01:00:43 +0000
Manifest next update: Thu 01 May 2025 01:00:43 +0000
Files and hashes: 1: jR3ulkqib4m9ECJ21GVjP7guqig.crl (hash: +ObkcR9DOALdFwj6cSDd2le60t3QqhZlFNeGeM3z89I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:35:da:07:ad:9a:a6:7c:b4:6c:54:46:bc:92:df:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1dee964aa26f89bd102276d465633fb82eaa28
Validity
Not Before: Apr 30 01:00:43 2025 GMT
Not After : May 1 01:00:43 2025 GMT
Subject: CN=8d2958e8510136a9f6353a9a7c258300c4eb8065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d1:97:c7:ed:a2:53:31:91:d4:f0:5d:99:89:
db:ca:17:bd:ba:d8:0f:4f:c7:b8:5c:74:c1:70:bd:
b8:df:a2:46:2f:0b:ef:45:1a:62:e5:ae:25:39:f5:
42:34:32:bf:e6:6e:96:52:8f:64:99:76:27:4f:e3:
1e:f2:67:ec:59:b6:79:03:ff:4e:ef:42:2f:e0:c0:
e9:01:2c:80:f8:eb:57:e0:21:0b:1c:8a:6b:71:4b:
03:a0:5c:33:ed:3f:12:5f:ad:fb:1d:24:61:6a:59:
5c:95:c0:21:48:c4:a0:4e:da:48:df:29:02:b3:c6:
35:f2:5b:e1:00:a6:54:35:4a:7a:75:a9:d8:18:06:
87:f4:fa:6c:93:a5:0e:52:aa:ed:ce:e0:17:ac:db:
4e:21:6f:07:3b:5a:3b:7a:ed:fd:6a:21:a9:43:de:
cd:ca:ef:1a:f8:b3:0f:e0:1e:46:08:23:65:61:70:
44:66:20:ed:7e:a2:7f:65:c4:a8:a2:b9:67:67:98:
ad:82:f0:31:0e:87:c8:e9:38:04:88:74:93:88:e3:
db:d5:26:9b:ab:38:89:ac:c8:ab:c0:d1:b0:e1:22:
a6:a6:7d:e2:fe:75:69:93:a6:e3:b8:e3:20:bc:78:
bf:18:e7:48:00:8d:09:4e:b5:c0:9f:59:e9:b0:d0:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:29:58:E8:51:01:36:A9:F6:35:3A:9A:7C:25:83:00:C4:EB:80:65
X509v3 Authority Key Identifier:
keyid:8D:1D:EE:96:4A:A2:6F:89:BD:10:22:76:D4:65:63:3F:B8:2E:AA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d6:f2:7e:51:42:c8:e8:72:d0:32:84:f3:cb:21:70:e9:bb:
43:fc:84:c7:cd:0e:d3:b7:53:29:13:79:fc:dc:58:25:ff:dc:
0a:11:66:15:a6:d7:5a:cd:49:8d:d9:af:a6:67:0a:67:41:ca:
2a:64:d0:18:e6:14:23:48:2a:5a:49:4c:ae:67:b5:c7:cf:20:
32:99:83:94:ac:20:5b:14:e9:53:8d:13:13:21:25:21:04:b0:
f9:32:21:48:14:76:36:3c:3b:45:a4:f6:00:54:83:81:64:91:
91:b7:be:4f:c6:ed:59:21:08:f7:c3:67:6f:03:7a:21:1a:bc:
8a:21:47:5b:c8:ab:27:73:f6:ec:a3:28:d5:5c:ea:ff:36:23:
e6:3a:9f:92:91:33:49:91:12:55:a3:79:49:28:32:ca:2a:0c:
fc:71:05:b6:2b:04:48:96:0c:21:4e:af:19:da:4f:17:47:1d:
17:9e:14:f5:7c:94:81:62:31:93:10:cf:98:c5:18:9f:02:9a:
16:ef:f3:c7:d5:19:34:6d:95:f4:24:23:78:f7:d3:d2:61:08:
51:db:73:48:ee:b9:74:39:59:4d:e7:ac:5a:2f:a1:3b:73:c6:
52:b6:ec:e6:8a:ed:f0:4a:c9:6e:41:e8:ea:a2:31:76:7f:c0:
63:6a:df:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:03:09 2025 by rpki-client