Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
File: jsIqh2Rb03Xm2yqguBbooGEOelY.mft (raw, json)
Hash identifier: 6BnUVT8dPqr0otcn9n5eJq4tn/+l8zh5CzJ2OkzctJg=
Subject key identifier: F2:DA:46:AC:75:D1:13:DD:8A:73:F1:DE:70:A5:1A:E5:C3:56:D7:5A
Authority key identifier: 8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
Certificate issuer: /CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Certificate serial: 0196907135D1C9C9D3EC337A7930EBED8946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
Manifest number: 05B5
Signing time: Fri 02 May 2025 10:01:00 +0000
Manifest this update: Fri 02 May 2025 10:01:00 +0000
Manifest next update: Sat 03 May 2025 10:01:00 +0000
Files and hashes: 1: jsIqh2Rb03Xm2yqguBbooGEOelY.crl (hash: jmReQO5AAxoQzXJ6BJfrMv2WFZNfBoN0SsJvHOp4zqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:71:35:d1:c9:c9:d3:ec:33:7a:79:30:eb:ed:89:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Validity
Not Before: May 2 10:01:00 2025 GMT
Not After : May 3 10:01:00 2025 GMT
Subject: CN=f2da46ac75d113dd8a73f1de70a51ae5c356d75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:94:61:07:1c:fb:70:5d:e7:4f:9b:3c:7b:
b7:a9:74:ea:c3:9c:32:d5:2d:b8:30:92:44:e3:b4:
e6:1a:cd:51:4f:db:51:cc:b8:ef:f2:31:41:76:1d:
28:a1:70:ed:c0:7c:c4:1a:c0:96:ba:06:a8:51:8b:
4f:0f:b7:de:4e:37:01:ba:16:1a:b3:7a:07:8e:08:
6b:1f:ce:1b:71:13:1a:d0:d0:61:fb:83:f7:9c:dd:
f6:12:cc:2c:fa:3b:d1:8a:c7:46:58:69:eb:c8:85:
6d:e3:94:b6:92:9c:d3:77:7d:07:95:52:f5:80:5f:
da:86:14:06:73:b6:7b:1d:c9:29:2b:48:ae:45:c8:
a7:d6:61:b5:7a:bc:17:fb:dd:54:cf:c4:2e:a8:2e:
63:81:98:f6:56:f4:ee:3d:b8:43:8f:4a:61:81:ca:
74:39:aa:01:a3:d5:b1:5d:75:a7:b4:4d:f2:c2:71:
9f:e8:c7:3e:f1:e2:da:d9:2c:61:ed:c8:9d:10:6b:
34:c4:04:0f:9b:4a:d8:e2:69:a0:aa:f1:fe:69:2f:
b8:6e:3d:d7:12:d3:ba:e3:b7:a0:02:fe:6c:ab:db:
2f:30:a1:54:de:3c:e0:9f:aa:81:49:72:07:5d:aa:
44:09:a5:af:ef:92:e0:80:17:2d:69:a5:10:17:05:
f7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DA:46:AC:75:D1:13:DD:8A:73:F1:DE:70:A5:1A:E5:C3:56:D7:5A
X509v3 Authority Key Identifier:
keyid:8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2c:23:d6:58:5a:c3:41:86:bf:52:76:19:73:dc:11:7b:52:
d1:15:e3:e5:45:fc:92:6d:80:78:95:79:60:98:54:d5:54:e6:
b8:86:14:16:2d:99:b4:00:48:1b:f0:b1:08:6c:2e:e6:19:08:
b5:88:16:2a:50:06:04:83:a3:16:4b:01:ca:00:ea:31:6c:59:
64:10:2e:cf:96:cd:a5:76:43:0a:e9:0d:17:1c:3e:cc:45:53:
20:57:3f:47:c9:a7:fd:78:92:b0:a7:68:64:74:4e:61:1f:fa:
8e:e8:ca:8c:7c:09:7d:65:bd:da:a4:3c:b2:a4:d9:a6:46:50:
2c:57:ea:77:24:e2:02:98:df:44:9d:6d:60:e8:7c:00:8f:5c:
10:6c:ba:3b:e4:42:e3:92:ad:57:59:eb:9c:ec:52:68:50:4a:
ca:32:6b:d4:ec:49:32:a4:05:de:ce:e2:08:4c:9b:46:2b:89:
35:de:f1:1a:85:c4:5b:18:f2:1e:30:5b:75:e5:3a:25:9d:f1:
84:f0:d9:e5:13:30:a9:ac:dc:05:6c:d6:8a:3e:62:18:e8:eb:
eb:3d:06:b2:00:9a:8d:46:14:06:65:da:30:ba:34:2a:0d:57:
18:ba:a4:94:ba:dc:37:7c:91:43:22:e6:2f:ca:7f:46:64:43:
00:cb:5b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:48:10 2025 by rpki-client