Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
File: jnfGrkiMOml4A3t3CqUjyyUcn_o.mft (raw, json)
Hash identifier: KQU2nWfBq6/5LrMquRhZ3FkUyxEIByMa39PM0iKQB6I=
Subject key identifier: FB:60:AC:D6:E2:BE:47:3F:60:41:02:7A:2B:A5:B1:45:36:AA:28:1D
Authority key identifier: 8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
Certificate issuer: /CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Certificate serial: 0196D2F5D820FE46F541DCFB0A068FF53642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
Manifest number: 1073
Signing time: Thu 15 May 2025 08:00:49 +0000
Manifest this update: Thu 15 May 2025 08:00:49 +0000
Manifest next update: Fri 16 May 2025 08:00:49 +0000
Files and hashes: 1: jnfGrkiMOml4A3t3CqUjyyUcn_o.crl (hash: z+LE3rbG4Nx0RExw7kqYPEVRn77W4f2dqfgeteVaQQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:f5:d8:20:fe:46:f5:41:dc:fb:0a:06:8f:f5:36:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Validity
Not Before: May 15 08:00:49 2025 GMT
Not After : May 16 08:00:49 2025 GMT
Subject: CN=fb60acd6e2be473f6041027a2ba5b14536aa281d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4d:f9:74:eb:11:b5:1f:26:a0:80:f9:22:80:
e9:55:ab:b5:bc:bc:f7:53:0e:b5:aa:c7:7a:45:b8:
d2:90:53:ea:e7:d6:f0:a3:da:e9:23:a3:19:62:7c:
32:55:3f:98:18:1a:1a:4c:5b:8a:8b:76:a4:10:e3:
e7:8c:ae:25:8c:27:50:18:43:99:51:60:d3:46:92:
d5:3e:13:27:d7:d0:de:20:13:66:b3:30:bf:7b:fb:
27:5f:4c:0c:ef:4d:e4:f3:cc:40:71:23:4a:1b:21:
5b:65:24:ec:1f:47:83:fa:ff:95:17:3c:b9:db:94:
fa:10:49:a2:d4:9f:6b:e5:27:ea:3b:8c:74:e4:f7:
7a:38:ce:ea:73:e6:bb:fe:7e:7f:b0:d3:93:23:17:
e9:12:4c:18:eb:db:a0:66:f1:20:69:78:32:8b:12:
3e:9d:29:cb:70:68:13:06:24:2e:df:5c:9f:8b:82:
4a:b2:12:ef:88:62:bd:86:5e:bb:08:f2:3b:7d:48:
6c:9c:3f:b3:4d:d9:87:86:f2:02:b7:30:75:03:43:
5a:50:85:dd:36:2c:da:02:35:59:96:68:ea:9c:de:
33:b2:d9:2c:3b:eb:12:2c:2e:5f:c6:e1:c9:c5:48:
b0:27:65:a9:5b:94:fc:cd:05:06:fa:eb:70:9f:94:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:60:AC:D6:E2:BE:47:3F:60:41:02:7A:2B:A5:B1:45:36:AA:28:1D
X509v3 Authority Key Identifier:
keyid:8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:03:98:ef:d9:51:20:4e:80:e7:6b:62:ed:3c:20:8a:15:bf:
c5:45:2f:60:48:4a:b0:08:4e:97:d6:ba:1a:2a:49:40:5b:dd:
5d:85:1c:2e:bf:67:32:97:7e:e5:33:be:2c:e3:d7:41:dd:aa:
a6:bc:b0:96:85:a7:d4:2d:fa:54:99:31:a7:4c:f1:1c:59:f2:
f6:38:0e:63:91:24:9e:d7:9b:7d:27:fa:46:50:95:35:4d:e9:
88:57:73:e9:6f:33:55:5e:ac:38:89:6c:a1:ca:52:1c:48:d9:
3c:38:60:fe:9c:bd:aa:ff:f1:1f:0e:7b:2c:7c:a4:88:e3:be:
5d:91:09:b8:01:0d:fb:66:ca:95:bf:9a:e7:75:46:9f:9f:63:
14:de:79:ef:6d:e8:2c:fd:56:d1:87:6b:b0:d0:f9:bc:84:14:
e4:61:c5:96:f9:7b:59:90:61:11:1b:17:5d:90:d2:82:96:44:
be:be:57:6b:72:68:5b:a9:56:8b:db:85:6f:95:10:16:f6:6c:
f5:11:b8:a3:24:b2:0b:43:ca:f0:55:88:45:dc:89:5f:dc:dd:
17:e6:9b:ab:2d:8d:37:bf:54:fb:78:1c:df:bb:b2:d4:bc:25:
ca:ce:17:9a:d6:f7:d1:2d:62:08:e3:2e:ab:49:51:1a:70:cf:
0e:76:21:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:04:25 2025 by rpki-client