Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
File: miIdT5cAcYIi7es06TinZjQ_JOE.mft (raw, json)
Hash identifier: WUbCIJmPzqUy0bgHINAKqnAsUvq3UROy0DW+xYCAdsU=
Subject key identifier: 03:30:85:B4:E2:C5:C6:CE:20:AE:27:0D:12:A3:6F:2B:85:C3:C2:A1
Authority key identifier: 9A:22:1D:4F:97:00:71:82:22:ED:EB:34:E9:38:A7:66:34:3F:24:E1
Certificate issuer: /CN=9a221d4f9700718222edeb34e938a766343f24e1
Certificate serial: 019679E9D2849D11CA80B3460C57D5E22101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
Manifest number: 13BB
Signing time: Mon 28 Apr 2025 01:01:28 +0000
Manifest this update: Mon 28 Apr 2025 01:01:28 +0000
Manifest next update: Tue 29 Apr 2025 01:01:28 +0000
Files and hashes: 1: miIdT5cAcYIi7es06TinZjQ_JOE.crl (hash: z/M6OS+/Mj/nV9xVVoKDXVqLdE4Dc3RJmw3bk0fUmzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:d2:84:9d:11:ca:80:b3:46:0c:57:d5:e2:21:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a221d4f9700718222edeb34e938a766343f24e1
Validity
Not Before: Apr 28 01:01:28 2025 GMT
Not After : Apr 29 01:01:28 2025 GMT
Subject: CN=033085b4e2c5c6ce20ae270d12a36f2b85c3c2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:74:7e:2c:ac:d7:93:27:85:09:01:d3:d5:5b:
96:ab:75:7f:8e:65:b5:b3:62:d6:c0:7f:9e:6c:d0:
d0:a7:7a:77:2a:f3:28:3d:44:8d:1f:64:ab:b4:2b:
73:98:d2:b4:92:b4:a7:90:98:28:4b:18:95:82:02:
9e:42:88:f3:78:56:52:97:b6:3e:80:01:24:01:9f:
5e:ed:56:4a:59:1d:4a:a0:ba:76:28:60:27:da:47:
70:f4:ca:4d:ce:dc:ae:f8:23:ae:bb:3f:a4:0b:2b:
c1:2f:b1:75:b7:90:1e:ce:28:21:38:dc:32:6d:8d:
4b:46:30:d8:20:2b:05:42:33:a2:69:97:b3:2c:1c:
2d:5b:a9:5b:78:97:40:11:99:ea:6b:5d:b5:fe:aa:
11:b3:3f:30:6b:7d:b2:80:f8:1d:7c:5f:e3:1e:5a:
6e:6e:1c:67:bb:ea:7e:e1:e5:f3:4e:eb:2d:2c:c3:
74:62:e4:8b:06:6d:76:60:33:29:b1:54:eb:2c:a1:
41:e2:e9:5a:cd:03:c1:5c:2c:c1:5f:e2:59:12:2f:
e1:b0:f1:7c:f7:99:8e:a1:06:21:2e:a3:ae:a0:af:
78:5e:e9:56:ec:b1:ee:b1:1c:b4:c4:ea:a2:f7:e2:
e5:68:f2:77:d4:4b:b2:09:5d:8a:9f:0b:e8:d6:8e:
8c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:30:85:B4:E2:C5:C6:CE:20:AE:27:0D:12:A3:6F:2B:85:C3:C2:A1
X509v3 Authority Key Identifier:
keyid:9A:22:1D:4F:97:00:71:82:22:ED:EB:34:E9:38:A7:66:34:3F:24:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miIdT5cAcYIi7es06TinZjQ_JOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ac63b6-55c6-46df-8c11-7de7a7c5bf72/1/miIdT5cAcYIi7es06TinZjQ_JOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:92:87:66:99:c4:27:09:0f:ed:89:79:3d:39:e6:b9:a1:c4:
35:eb:0a:33:b4:b6:27:2b:7b:f4:da:75:1c:90:f3:3b:7e:85:
83:30:2f:15:56:dc:01:ec:6c:82:2d:63:59:3f:79:9d:ea:c6:
34:68:87:69:a1:6d:f4:09:89:7e:a2:78:22:26:1c:9b:97:ef:
6b:7c:38:35:63:8d:2c:5f:45:67:33:38:d7:a4:03:d9:19:fa:
d0:03:80:4c:e3:cb:48:8e:26:b8:f3:be:50:d7:74:be:be:18:
26:11:e4:49:c7:81:19:4e:c6:aa:46:b6:3e:9c:a4:74:26:0c:
61:a0:28:c7:ac:17:f9:0e:9d:90:35:10:04:41:9b:47:09:6b:
0e:4a:0f:c9:73:fa:46:31:00:ab:64:21:2d:13:a7:1c:61:d1:
c1:bb:34:ed:e8:47:db:38:4d:7c:ea:33:b1:3f:8e:4c:df:c1:
0d:0f:aa:3e:3a:b3:67:b2:d2:bd:bf:68:61:31:18:6d:4d:de:
de:69:8e:54:63:68:0c:58:d2:65:e6:0d:9f:18:2a:e8:c6:50:
e5:33:34:7c:ca:49:38:67:92:86:d7:8a:3b:92:78:1a:6b:6b:
69:c1:63:44:e4:db:97:cf:43:78:87:bf:2c:56:96:08:3c:8e:
a2:34:cb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:22:58 2025 by rpki-client