Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
File: jWvXmZuRV6pP3EcXQUWA1PziQDk.mft (raw, json)
Hash identifier: tIYBfkjMF14tQIIuVGs+wI3P0Ndv+7FVZxfbjxQ4wUA=
Subject key identifier: A0:8C:F8:72:9B:73:F1:A5:4A:0D:A2:84:E4:D9:49:CE:C0:D9:09:BE
Authority key identifier: 8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
Certificate issuer: /CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Certificate serial: 0196BF6EE5991F7AD18A1AA40AD13639DDCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
Manifest number: 0D09
Signing time: Sun 11 May 2025 13:00:37 +0000
Manifest this update: Sun 11 May 2025 13:00:37 +0000
Manifest next update: Mon 12 May 2025 13:00:37 +0000
Files and hashes: 1: jWvXmZuRV6pP3EcXQUWA1PziQDk.crl (hash: /nU+LN+OiIRrj+uuafogY0/zhFltA/NcryrrEx1/SyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:e5:99:1f:7a:d1:8a:1a:a4:0a:d1:36:39:dd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Validity
Not Before: May 11 13:00:37 2025 GMT
Not After : May 12 13:00:37 2025 GMT
Subject: CN=a08cf8729b73f1a54a0da284e4d949cec0d909be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:24:6f:83:1e:7a:1a:c8:89:6f:db:7d:c3:
74:3c:06:2f:16:02:dd:21:2f:e8:c7:15:ee:af:7b:
72:dd:96:19:5b:bb:91:62:e8:2a:c3:56:41:d0:3b:
5c:02:97:1f:b2:e9:0a:34:1e:e2:f4:ec:fd:e9:68:
b8:7c:a9:6e:a6:21:d7:c0:33:5b:ef:a1:09:ae:c0:
ec:7e:98:1b:db:43:66:e2:8f:5e:bd:36:f1:a9:ce:
ff:7e:15:62:cb:13:81:3e:b8:9f:a2:0f:0b:cf:b8:
bc:11:b8:55:c3:6a:47:83:e6:22:fb:e0:29:c2:70:
c8:e8:4d:d5:b0:9f:87:92:f0:80:78:10:e0:02:f2:
61:f5:50:41:2e:59:98:15:68:46:61:51:ad:f0:63:
b2:7e:62:e8:b6:4c:61:19:d7:c5:2d:58:c1:f5:b7:
e4:ac:bc:17:20:c3:bd:d3:78:ca:26:1e:e4:1a:eb:
e3:57:99:f9:55:8d:57:ea:32:0e:30:9a:9e:ea:2d:
92:cd:b0:bc:b6:c6:e8:50:24:71:03:8e:cf:07:64:
4b:de:0a:c5:6c:a5:76:05:01:69:fe:ec:9d:a9:7b:
11:6f:c6:4a:e4:62:f3:95:2a:6f:7b:c9:07:ee:27:
64:25:ba:b7:f1:e6:fe:33:21:39:82:30:b2:f3:67:
c9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8C:F8:72:9B:73:F1:A5:4A:0D:A2:84:E4:D9:49:CE:C0:D9:09:BE
X509v3 Authority Key Identifier:
keyid:8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3f:91:9f:a0:04:e4:d4:ee:23:ea:bb:d5:99:21:86:4e:de:
c1:01:14:a0:e6:75:f0:1a:25:d8:2c:5a:d2:b5:0a:1e:9f:0d:
b3:e3:48:b2:61:22:0f:68:d0:24:1f:2a:ae:4b:99:d9:87:eb:
c1:53:87:b0:75:a4:e2:e5:9c:ee:fb:3e:8e:f1:5c:fb:2e:60:
fd:4f:2c:0b:d7:ad:e2:c4:d9:21:d7:7c:0e:bf:d2:70:80:5f:
be:b6:46:6f:97:c3:d2:88:79:26:24:b8:85:9e:f4:da:4d:3b:
e2:3c:d8:cb:95:4a:ec:15:cd:b6:a4:3b:6b:da:a7:aa:f0:bd:
ea:8f:61:9e:3d:74:38:f9:4c:1b:68:f6:08:7e:b2:3c:52:c8:
d1:0d:5f:9b:79:6e:2c:63:fd:15:8a:5a:6e:99:80:ef:b5:2a:
35:ca:1c:47:b7:9a:6d:18:4f:0a:bb:ef:b4:4a:bf:22:b5:0c:
5c:f4:dc:b8:36:77:49:c1:09:78:76:1f:fa:22:9f:dd:56:c8:
a1:32:9f:bb:14:47:2e:6d:43:6f:de:d1:31:8d:21:f2:cf:a1:
d3:e1:5f:dd:96:cb:71:06:23:d9:5e:3c:85:0f:7e:b2:9e:87:
ba:ff:3d:01:8c:48:0a:e6:cd:71:0d:94:c9:10:e2:c1:68:41:
4b:c9:5c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:58:13 2025 by rpki-client