Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
File: JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft (raw, json)
Hash identifier: v4g9uLBlTmvhaj6S1N7YY/r8VEIsiZSSWC7YPyBvESY=
Subject key identifier: E7:FD:51:FB:58:22:7D:36:EC:B6:92:C6:DA:79:25:22:A5:F3:80:40
Authority key identifier: 25:BA:87:95:F3:E7:E2:D2:C7:C9:0F:1C:36:66:CF:7F:92:83:DA:9E
Certificate issuer: /CN=25ba8795f3e7e2d2c7c90f1c3666cf7f9283da9e
Certificate serial: 0196B9A3566D67E26407501A70E2894EA634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
Manifest number: 152C
Signing time: Sat 10 May 2025 10:00:11 +0000
Manifest this update: Sat 10 May 2025 10:00:11 +0000
Manifest next update: Sun 11 May 2025 10:00:11 +0000
Files and hashes: 1: JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl (hash: WMbVGBQzRM3q3kicyIf/NBl2W7dMFyD3SqG4GYkSbI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:56:6d:67:e2:64:07:50:1a:70:e2:89:4e:a6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ba8795f3e7e2d2c7c90f1c3666cf7f9283da9e
Validity
Not Before: May 10 10:00:11 2025 GMT
Not After : May 11 10:00:11 2025 GMT
Subject: CN=e7fd51fb58227d36ecb692c6da792522a5f38040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:0e:52:84:13:a3:4a:6a:95:46:f2:fb:47:
d2:d9:1b:dd:96:a1:a2:ce:90:c0:e9:18:23:2f:27:
99:f1:10:61:08:f9:8e:34:8e:47:a3:e3:c3:43:22:
5b:57:77:e5:42:c1:74:9b:01:30:60:73:6f:79:de:
7a:99:f9:5c:1f:52:49:39:3e:89:23:de:ee:43:95:
cb:ea:94:f7:e9:79:4f:3c:fb:e2:56:cf:7e:52:38:
af:a9:7a:50:a0:65:0e:c0:7e:34:a9:d0:79:30:5a:
18:4f:cf:14:06:55:a5:31:be:8e:60:9c:f6:bd:98:
1e:fd:b1:d9:30:7d:dc:c6:9a:39:ac:49:95:7f:02:
a5:e6:49:be:4d:f4:bf:ef:08:6a:56:18:77:18:48:
98:06:82:4c:5b:19:9d:3c:6a:39:3b:40:0c:e0:eb:
5c:4a:f6:79:8e:12:f8:a4:5b:ab:1f:17:04:d6:39:
3a:8b:25:8b:7d:a7:d6:d0:df:20:6c:27:98:0b:bb:
0a:9d:26:86:2c:78:08:4d:c5:25:af:2d:d0:cb:1e:
0e:0d:75:14:e9:fb:34:0f:52:58:84:80:48:92:c1:
05:90:12:72:57:4b:d1:bd:2a:7e:38:93:2d:cf:34:
a6:99:72:05:b1:49:8a:b9:ab:02:75:e0:30:29:3a:
eb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FD:51:FB:58:22:7D:36:EC:B6:92:C6:DA:79:25:22:A5:F3:80:40
X509v3 Authority Key Identifier:
keyid:25:BA:87:95:F3:E7:E2:D2:C7:C9:0F:1C:36:66:CF:7F:92:83:DA:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0b:c2:3b:e7:03:4f:53:a5:8f:c4:6e:42:60:06:75:15:d6:
e9:fd:94:41:6c:f0:c5:61:b5:ec:60:aa:62:54:b3:eb:98:e3:
03:59:da:2a:e8:8f:3a:6d:12:61:e2:74:9b:48:3d:22:f6:3f:
01:5d:99:a4:73:13:1d:99:72:d9:be:bb:ea:26:b7:6c:a0:22:
9a:aa:11:ca:69:fd:dd:d0:e2:66:2c:5a:3c:24:5f:9a:d8:f9:
3f:0e:7e:71:e5:d8:e0:26:d0:ec:c7:49:cd:2d:ec:47:6c:e8:
d4:66:26:a4:1f:87:41:d0:d1:b1:42:95:51:32:c9:f6:1f:16:
80:e6:72:88:4f:09:42:92:8e:30:8e:5f:99:90:b9:92:a1:58:
67:3e:55:be:e5:76:ed:11:b3:b4:c0:83:cd:c8:d3:e4:e9:30:
06:6f:b0:10:e6:4d:9a:f0:73:69:2d:e0:b0:8e:0c:85:d8:19:
d6:a9:f8:6f:58:1c:61:e2:df:4b:08:fe:27:df:13:76:f7:2a:
ba:44:59:58:77:11:82:ad:e6:f7:96:b9:37:b9:66:02:9c:32:
c4:04:89:fa:13:d5:02:99:37:0a:84:7b:11:c2:31:ef:f0:12:
12:01:bd:73:0a:0a:a3:32:7c:28:24:db:3c:ae:dd:75:00:39:
bb:cd:de:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:33:20 2025 by rpki-client