Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
File: jw6u_3Y07o3-gFSthfihXoR1kRQ.mft (raw, json)
Hash identifier: WP8civFNMFobcpJBNVbo99GaT8ELzBZaunDNXUZrZ0g=
Subject key identifier: B5:E8:53:90:3E:1A:B6:6B:42:6D:A4:53:BF:3B:91:77:4E:8F:11:EF
Authority key identifier: 8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14
Certificate issuer: /CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
Certificate serial: 019676432D8D874454F70AB824808787B849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
Manifest number: 0447
Signing time: Sun 27 Apr 2025 08:00:36 +0000
Manifest this update: Sun 27 Apr 2025 08:00:36 +0000
Manifest next update: Mon 28 Apr 2025 08:00:36 +0000
Files and hashes: 1: jw6u_3Y07o3-gFSthfihXoR1kRQ.crl (hash: zZNV3R1Evh5QG0mnq7QuQjzmrEziPcwJsOZHOXzl26E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:2d:8d:87:44:54:f7:0a:b8:24:80:87:87:b8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
Validity
Not Before: Apr 27 08:00:36 2025 GMT
Not After : Apr 28 08:00:36 2025 GMT
Subject: CN=b5e853903e1ab66b426da453bf3b91774e8f11ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7e:c6:87:59:76:3f:8a:1f:14:28:dc:ce:a9:
17:3d:16:8d:d2:12:94:d3:1b:c0:f2:82:24:46:92:
24:5d:55:d7:da:2e:1e:8d:73:9a:66:ab:ee:c5:34:
67:26:bc:05:d2:2a:8c:47:6f:b2:4f:2f:34:82:92:
a3:5a:ce:df:94:a9:3b:09:e2:bb:1b:12:9c:50:56:
00:c1:a6:ae:6f:b2:17:32:af:76:98:23:e8:f2:cf:
9d:9f:98:04:29:20:65:b0:a3:e9:f3:51:4e:94:be:
86:fb:27:d2:63:06:f3:6f:70:2f:ea:37:7c:aa:0a:
12:58:8a:73:ca:49:f9:a0:a2:2e:18:b5:52:e6:ba:
9f:fc:31:13:ee:0d:97:15:c5:92:fd:27:03:5a:ce:
17:3a:8d:57:bb:d1:1f:b8:81:3a:47:e2:58:6b:4a:
5a:15:6f:e0:d8:33:b2:86:19:53:ba:d0:29:54:e0:
da:40:f9:ad:6a:6d:cd:2e:d4:ba:e8:9c:83:8e:e3:
07:40:c2:8f:97:d4:d4:a4:8f:6e:07:f8:7b:bb:0b:
b8:08:07:15:c2:f8:84:b8:7b:48:73:a2:a8:7e:4f:
47:f3:fc:07:44:9b:7b:3b:bf:5a:a6:1b:90:f9:3c:
de:a3:50:c7:be:61:53:be:fc:d1:b6:79:87:86:56:
57:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E8:53:90:3E:1A:B6:6B:42:6D:A4:53:BF:3B:91:77:4E:8F:11:EF
X509v3 Authority Key Identifier:
keyid:8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ec:4e:95:77:9c:ce:f2:40:f6:a9:e5:50:30:2f:46:47:f0:
ec:aa:f9:c7:b4:3c:ed:bc:02:9b:71:99:1d:be:7a:29:07:82:
8e:6d:43:1a:62:4a:94:79:e8:92:58:1f:d1:2c:be:be:03:c9:
e1:58:e4:00:d6:6e:68:39:d5:4b:f2:74:e9:33:22:8d:b7:95:
48:63:d0:22:7b:6c:f4:64:95:54:94:09:ba:c2:30:ff:bd:5e:
c4:64:67:04:f4:12:a0:dd:7a:f7:30:7e:fd:a9:b5:00:de:59:
e2:6b:b9:8a:b2:4b:4c:ff:d7:31:dc:a5:9f:15:fb:ba:0c:99:
27:11:72:0e:e8:78:8d:a3:d5:78:f4:a5:25:b9:27:8b:45:58:
e8:ae:a9:a6:0c:29:90:9e:01:a5:86:1f:96:55:48:55:5f:98:
5f:56:af:08:e1:75:24:5e:c7:85:ee:de:a8:6f:ea:b8:0e:4b:
85:c5:40:e0:b2:a7:65:f2:ac:f4:b1:d3:b6:68:06:94:7c:c4:
50:db:8f:ef:95:c8:e5:5e:b4:df:eb:26:99:89:ae:5f:2f:27:
a8:50:c1:33:b0:5e:69:56:f1:65:85:bc:14:52:48:d6:92:85:
1c:db:5c:b7:4b:f8:25:2f:54:ea:3f:58:60:55:54:fb:58:6d:
18:a7:87:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:09:02 2025 by rpki-client