Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
File: jXIJqeqB_vMrGFNMHRHtoymZcO8.mft (raw, json)
Hash identifier: uN0+wFWjrikpSddm0xZQJkEOvoKjR9nLrgjqbrR9KzY=
Subject key identifier: 0C:F0:F2:88:2B:AA:50:E2:FE:AD:59:A6:5A:97:75:E2:B8:70:02:B8
Authority key identifier: 8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
Certificate issuer: /CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Certificate serial: 019683911A0809DF852121A9ED390DFB8375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
Manifest number: 0ABE
Signing time: Tue 29 Apr 2025 22:00:46 +0000
Manifest this update: Tue 29 Apr 2025 22:00:46 +0000
Manifest next update: Wed 30 Apr 2025 22:00:46 +0000
Files and hashes: 1: jXIJqeqB_vMrGFNMHRHtoymZcO8.crl (hash: E9meCOnVbNwmpMTvHLOsBSlPmKIr10hDKQ323pr0wVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:1a:08:09:df:85:21:21:a9:ed:39:0d:fb:83:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Validity
Not Before: Apr 29 22:00:46 2025 GMT
Not After : Apr 30 22:00:46 2025 GMT
Subject: CN=0cf0f2882baa50e2fead59a65a9775e2b87002b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c6:2e:d0:9f:81:39:d5:09:82:65:cb:e1:8d:
60:0d:20:3c:e1:1f:7f:2d:48:99:33:e7:e6:d2:dd:
18:cf:57:b2:12:b1:64:57:1d:99:10:37:fd:01:aa:
e8:48:53:8a:95:d0:0e:55:b8:4d:7f:8e:64:34:96:
e8:df:57:e9:4d:ae:9f:e0:13:f9:ca:c6:aa:35:55:
8d:68:0e:02:9d:49:99:c6:e9:91:9b:53:e1:23:30:
14:21:a8:65:d8:f4:75:c3:75:92:fe:44:29:c8:fb:
ba:c7:3f:c0:d7:c2:80:b9:a9:42:95:a8:25:2b:23:
24:29:ac:43:98:f3:8b:3f:22:e1:e9:51:87:ae:f8:
2c:d6:8d:14:84:05:84:54:44:ae:6c:4d:6b:a6:b2:
83:f5:b2:fa:79:83:21:da:64:eb:61:39:14:a2:51:
34:08:6a:bf:75:11:35:67:b1:8e:2d:ba:e2:6e:93:
4c:f8:26:c7:f3:6a:c7:27:6b:03:67:b8:45:8b:10:
48:1b:ea:0e:d3:59:c7:79:a6:20:e5:6a:be:dd:f9:
40:bd:5c:2a:3c:72:4f:e5:f4:3b:f1:eb:36:d5:09:
db:e8:b7:af:cd:91:5c:b5:d7:18:b9:a6:c8:2d:30:
34:6b:78:62:3f:bd:da:69:5e:e0:67:f2:62:aa:c5:
f5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F0:F2:88:2B:AA:50:E2:FE:AD:59:A6:5A:97:75:E2:B8:70:02:B8
X509v3 Authority Key Identifier:
keyid:8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1b:08:9a:db:32:dd:01:53:73:80:dd:af:00:af:49:b5:17:
79:f6:be:c2:c2:b4:d2:9a:78:39:57:18:9e:b2:0c:e8:e7:78:
d5:fd:98:48:f4:d0:cb:e3:4f:58:62:fb:09:fa:38:3d:4a:ce:
71:42:5c:72:f9:59:18:7d:16:b3:d5:62:cf:88:e9:4b:96:1c:
a1:36:92:7c:56:61:af:d9:3d:06:b4:c5:fb:32:7d:88:2c:22:
59:94:07:66:8e:2f:ab:e5:44:3e:2e:76:6f:ef:a7:53:ca:66:
0f:e8:37:c3:4e:b4:8c:7c:e0:03:91:fd:1f:dd:36:a9:89:81:
9a:7c:73:5e:34:d8:61:fc:e5:63:74:2d:7b:da:fa:e2:44:03:
3d:b0:86:d5:42:39:5b:0c:ef:5c:60:53:91:04:15:c0:de:7a:
5a:ab:ad:63:91:a5:5d:a6:c1:1a:c0:6c:ce:96:15:fe:2f:c0:
ea:10:51:d0:bc:d6:a8:20:58:a3:12:42:4d:73:eb:69:90:1c:
da:05:14:c8:60:68:ba:da:46:55:a8:21:2e:80:48:05:1c:42:
8c:6b:92:62:f9:f4:b8:20:57:0f:d7:ef:4b:14:16:13:0d:4a:
93:72:ca:ae:a9:0c:61:02:58:1b:4e:df:fb:b2:c9:71:a6:98:
97:43:f5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:14:59 2025 by rpki-client