Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/JQou0RQnyhZIM4Ur1JydtT1j5js.mft
File: JQou0RQnyhZIM4Ur1JydtT1j5js.mft (raw, json)
Hash identifier: LfxVSrLhjxL6p5qWZ8WufS8KZ66ixJerkD1vgAgkN6s=
Subject key identifier: E0:71:12:25:EE:12:62:6F:3B:9D:FE:5B:57:40:0B:B4:87:BA:E1:29
Authority key identifier: 25:0A:2E:D1:14:27:CA:16:48:33:85:2B:D4:9C:9D:B5:3D:63:E6:3B
Certificate issuer: /CN=250a2ed11427ca164833852bd49c9db53d63e63b
Certificate serial: 0196790D69510C95E1D00C5ABC6B6DA8EF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQou0RQnyhZIM4Ur1JydtT1j5js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/JQou0RQnyhZIM4Ur1JydtT1j5js.mft
Manifest number: AD
Signing time: Sun 27 Apr 2025 21:00:44 +0000
Manifest this update: Sun 27 Apr 2025 21:00:44 +0000
Manifest next update: Mon 28 Apr 2025 21:00:44 +0000
Files and hashes: 1: JQou0RQnyhZIM4Ur1JydtT1j5js.crl (hash: k2xWD2+k9MS8b4+yt/wkfhJTBf/Q/PnfEK1Tl3hTk8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/JQou0RQnyhZIM4Ur1JydtT1j5js.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/JQou0RQnyhZIM4Ur1JydtT1j5js.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQou0RQnyhZIM4Ur1JydtT1j5js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:69:51:0c:95:e1:d0:0c:5a:bc:6b:6d:a8:ef:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250a2ed11427ca164833852bd49c9db53d63e63b
Validity
Not Before: Apr 27 21:00:44 2025 GMT
Not After : Apr 28 21:00:44 2025 GMT
Subject: CN=e0711225ee12626f3b9dfe5b57400bb487bae129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:c3:21:e3:93:11:38:29:b6:93:af:db:2e:
64:0d:bf:9f:d1:63:bf:cf:85:27:01:db:e1:23:57:
37:ff:2e:dc:d0:37:7b:ee:f3:e3:19:bc:f7:87:68:
44:1c:c3:ce:04:8b:fb:41:ba:3b:66:cc:0d:9c:5f:
11:f7:d9:6e:c3:a1:ee:63:c6:b7:ce:f7:42:b1:d6:
f1:93:a7:2c:ec:72:c6:07:0d:8a:20:c2:b3:33:ce:
8e:a6:47:54:79:73:d2:a7:cd:c9:32:e7:ae:81:73:
5c:9a:8c:0b:e7:9f:75:c9:60:6c:a5:8d:7b:34:05:
f6:51:c6:74:f5:aa:10:f6:4e:cc:c2:6f:6c:75:a7:
74:52:9e:3d:51:bb:77:de:cf:8d:8a:89:13:46:32:
7a:ad:c3:30:4a:75:6c:08:e9:c2:62:b6:72:5a:23:
ea:0f:c1:ec:11:fe:f7:58:fc:de:a8:4d:37:1d:28:
b0:bd:ea:77:84:06:fc:9e:d8:7d:ae:60:29:ea:84:
1d:85:6a:f3:d2:32:b0:f8:90:76:ac:0a:ef:84:3b:
8b:94:9c:50:a3:ee:5f:2d:fb:7a:09:50:03:d7:25:
0d:44:f0:e4:14:4f:72:f2:aa:2c:a9:31:5a:85:36:
a9:ff:f1:90:6e:be:be:fb:66:a2:ea:e4:1f:92:f4:
82:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:71:12:25:EE:12:62:6F:3B:9D:FE:5B:57:40:0B:B4:87:BA:E1:29
X509v3 Authority Key Identifier:
keyid:25:0A:2E:D1:14:27:CA:16:48:33:85:2B:D4:9C:9D:B5:3D:63:E6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQou0RQnyhZIM4Ur1JydtT1j5js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/JQou0RQnyhZIM4Ur1JydtT1j5js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b439ef-2cc5-4a74-b1ea-55c65c415b36/1/JQou0RQnyhZIM4Ur1JydtT1j5js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:74:53:a5:c3:1b:00:5c:89:24:a5:ed:ff:2a:55:a2:9e:2a:
61:6a:bf:01:5e:50:33:ee:32:42:f2:19:2f:92:31:57:51:b7:
d5:ff:34:38:b8:ba:db:5b:4a:0f:87:a2:90:51:63:e7:c4:0e:
c4:7c:bc:d6:9e:a4:43:1a:55:28:a2:74:b2:8c:c8:0b:7e:0a:
b5:42:e0:78:8a:b9:69:40:a6:c1:6d:68:27:28:4e:e5:a8:2f:
60:e0:ae:9c:dd:e1:35:e2:a9:e7:08:32:5e:13:dd:f6:c9:03:
44:e7:b1:5b:1d:98:d7:1b:d2:be:8c:bd:03:cc:34:e3:9b:8e:
60:67:8e:ae:f2:84:48:8e:1e:7c:6e:26:62:40:9d:6f:aa:96:
b0:70:88:69:55:ad:12:43:89:f1:59:af:d8:de:79:9c:56:4f:
1d:d1:eb:af:52:12:c8:ef:ed:1e:63:b7:0d:61:a7:95:0c:58:
0e:e3:21:a4:64:ed:b5:39:7e:72:72:26:0a:58:ea:f8:01:39:
86:ef:1f:a3:82:a6:bf:17:3c:a2:37:4b:a2:0e:d7:47:75:6a:
85:ab:c2:fa:6c:94:dd:02:68:e7:ab:ba:1c:eb:0b:9e:27:68:
5a:83:c2:2b:20:6f:40:9a:d8:e9:15:c7:c2:ee:c4:12:19:f2:
ba:a0:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:46:58 2025 by rpki-client