Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier: AEyIXmDnJpa86Evex8YrLAsvcJN1RAgQJJHi18Wu9EU=
Subject key identifier: D5:32:AB:2F:B4:0C:59:17:01:87:27:93:23:5F:01:27:79:21:10:14
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial: 01967679F0E6562568CE936C720F53EE3510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 09:00:25 +0000
Manifest this update: Sun 27 Apr 2025 09:00:25 +0000
Manifest next update: Mon 28 Apr 2025 09:00:25 +0000
Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: zJHhaszhbwGzcYFa+x3+gwIPiBaH44H+V+EZ5EqFiSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:f0:e6:56:25:68:ce:93:6c:72:0f:53:ee:35:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
Validity
Not Before: Apr 27 09:00:25 2025 GMT
Not After : Apr 28 09:00:25 2025 GMT
Subject: CN=d532ab2fb40c591701872793235f012779211014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:4b:64:c3:60:a0:00:4f:fa:9f:04:f8:9f:
ae:4d:3b:01:96:69:c4:c8:8e:ff:bf:46:42:21:4a:
4d:0d:89:2a:f2:d5:eb:11:fe:50:37:02:f8:89:51:
a7:fe:28:b1:bf:f4:e0:7b:a7:0c:3b:76:13:b7:57:
77:10:c3:95:01:74:a2:bc:d5:83:c0:3b:33:d6:e1:
93:26:ad:73:71:0c:97:4e:7c:4d:bd:e6:f8:58:50:
ff:88:f9:ce:8b:b8:9c:c6:0e:99:eb:4b:ae:9c:22:
26:23:c8:af:56:52:94:09:51:ad:91:4b:7a:70:03:
23:b9:89:67:b1:e3:80:a1:49:4d:b0:e7:80:de:7d:
ce:d5:82:91:af:0c:b1:1e:e6:45:b1:bc:7f:d7:50:
4d:28:82:26:ad:f8:30:bc:45:40:00:76:e0:9c:b6:
02:d2:09:c1:bc:46:51:8b:a0:66:b8:7c:bd:c6:a7:
2b:7b:62:e8:e1:9a:68:85:91:f1:f7:df:b4:ed:9e:
73:00:ac:ba:52:42:73:b5:37:c0:63:0d:be:d6:60:
39:4c:57:ca:43:3d:07:c2:32:cc:27:9a:47:e7:bc:
bc:82:da:4b:b1:2f:81:e1:26:8b:a2:ab:d2:4e:6d:
eb:28:ed:b4:be:0f:ce:5a:7f:0e:d9:0b:13:fa:1d:
97:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:32:AB:2F:B4:0C:59:17:01:87:27:93:23:5F:01:27:79:21:10:14
X509v3 Authority Key Identifier:
keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:38:2a:e1:9b:bb:45:00:f1:e5:c3:9e:24:23:9d:b8:59:39:
63:db:b4:39:f7:3c:77:56:70:5a:5c:a2:ab:33:25:b6:ef:d2:
ba:37:06:30:19:ca:70:7d:8a:b9:3c:82:e2:60:76:ee:f8:e6:
49:6a:65:1e:4d:78:bc:df:78:82:fb:57:f3:a1:e2:c2:37:88:
5c:b6:31:dc:52:3d:20:fd:f7:f5:17:a5:2e:f1:37:3e:75:a2:
bd:df:f4:d2:fe:09:be:90:09:aa:38:a6:b2:55:fb:cd:76:80:
85:da:88:b9:ac:24:21:cb:d1:07:d4:3d:6e:06:bb:61:49:74:
7d:58:82:bd:38:9f:bc:b9:68:c5:7c:99:df:b4:b6:9a:19:4a:
57:4a:1e:85:80:75:d5:3a:6d:23:19:d3:5c:56:41:47:64:6c:
d2:a1:73:0f:6c:1b:00:1d:6e:91:81:23:c2:06:54:e5:64:70:
d2:a2:c4:2c:0f:3c:33:9e:0d:6e:4c:df:d2:4a:cf:0e:e7:8d:
7d:36:5e:ae:54:be:cc:f5:4e:df:fa:ad:20:e0:14:7f:2f:09:
6c:e6:0c:1b:a7:91:5f:70:ab:ad:d4:b4:56:3e:30:21:9b:98:
fb:df:45:aa:4b:a5:6e:8b:55:2c:a7:fa:b4:34:e3:7d:35:7e:
cd:bc:3c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:15 2025 by rpki-client