Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
File: Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft (raw, json)
Hash identifier: VN73LKJM/uoV+gCV6WzUWypdAqh52I4h/7M+NSXDHGo=
Subject key identifier: 41:D7:0E:4C:B7:41:03:63:AF:74:38:D8:DC:7F:8E:C9:E8:32:7F:2E
Authority key identifier: 26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
Certificate issuer: /CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Certificate serial: 0196CEE2A12D16D35C5B93CAE994DF111E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
Manifest number: 1538
Signing time: Wed 14 May 2025 13:01:20 +0000
Manifest this update: Wed 14 May 2025 13:01:20 +0000
Manifest next update: Thu 15 May 2025 13:01:20 +0000
Files and hashes: 1: Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl (hash: efwGvq45AhwvMADi/41jdhz75dTrCV2ZN+95uWvg0Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:e2:a1:2d:16:d3:5c:5b:93:ca:e9:94:df:11:1e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Validity
Not Before: May 14 13:01:20 2025 GMT
Not After : May 15 13:01:20 2025 GMT
Subject: CN=41d70e4cb7410363af7438d8dc7f8ec9e8327f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:b5:4b:13:be:71:0c:e3:ac:9e:e9:54:6b:
41:89:74:47:87:09:36:b2:5d:27:33:aa:fa:6e:21:
dc:3b:29:01:b0:3a:30:bf:47:46:f8:88:c3:bc:9d:
d1:0c:46:05:47:1c:18:b9:8f:83:3e:1d:4c:79:6d:
38:47:a3:3e:30:14:d3:e0:f8:1b:cf:4c:36:ee:b6:
0d:12:51:49:6d:3f:1c:a4:db:fd:7b:1e:7f:8c:c5:
d0:f8:72:90:63:9f:59:2e:72:cf:9b:e0:43:69:a9:
02:70:18:22:d3:eb:69:bf:fa:06:be:d6:b2:43:1c:
f8:ce:13:67:b8:98:14:c4:86:89:f4:cc:d9:af:45:
53:0d:52:a4:c2:3f:cb:36:58:0a:2c:98:99:61:5b:
d8:72:33:19:0b:a5:11:a8:3e:9a:eb:65:7f:65:fa:
19:02:fb:8b:0e:83:ed:e0:b3:4e:6b:b2:04:2a:d0:
2f:4d:3b:1e:88:5e:90:6e:2a:08:1e:f0:3c:3c:c5:
87:03:2b:69:31:5a:a4:ce:bf:8a:10:19:32:cd:e4:
7c:d5:c6:89:79:d4:73:41:66:4d:09:bb:76:98:5a:
83:3c:b7:7a:ee:d6:9e:aa:08:cb:cf:f8:94:9c:e3:
4b:3c:27:73:71:44:45:c6:2d:56:54:3e:c3:5d:05:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D7:0E:4C:B7:41:03:63:AF:74:38:D8:DC:7F:8E:C9:E8:32:7F:2E
X509v3 Authority Key Identifier:
keyid:26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:49:54:f0:ad:89:32:f7:e2:72:01:fb:a2:d6:fb:a3:f6:f0:
d7:b1:23:8a:15:1d:32:12:25:96:f6:57:75:80:e3:89:2b:23:
88:2f:48:78:de:05:ff:00:d9:d5:b0:0a:3a:8f:64:58:61:f9:
76:8d:8f:0d:91:28:23:18:99:54:b2:be:33:4c:ce:09:fc:8d:
cd:de:2c:8c:ea:f8:e1:81:28:b4:3b:db:54:07:d8:18:6d:93:
74:ec:17:f2:3f:2a:d5:3e:a3:26:62:fd:51:d9:bb:19:27:90:
1d:48:dc:b2:f8:ef:39:2d:6e:c0:a6:1d:a9:4a:1c:3d:81:c5:
87:40:dd:0d:cc:1f:c6:26:eb:45:de:4c:e9:bb:0c:74:3c:ad:
d5:d3:52:c9:0e:06:f3:18:18:fb:03:53:30:ff:26:5a:e0:37:
a4:a6:0b:2e:ca:4b:f5:cb:8a:de:ec:0d:60:7e:5b:61:92:ca:
6e:cd:aa:b8:12:e0:89:27:ea:92:07:47:d9:80:a2:56:9b:c3:
0c:dd:ea:af:32:f2:8b:7d:36:38:2e:9f:cc:9f:31:95:9c:d3:
ae:9e:b5:0e:87:e3:63:63:39:0b:a3:fa:bc:49:f3:a4:af:41:
f3:df:cd:81:73:d7:48:99:7a:86:b9:31:e4:85:43:d4:8b:79:
81:22:1e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:25:25 2025 by rpki-client