Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
File: JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json)
Hash identifier: j0TZZa+c4KbEF8/nmxXfVQb/Yy3Im7riYraNz0gJSME=
Subject key identifier: 29:69:CA:34:B8:C3:9F:7C:B2:84:6C:C2:91:4B:2D:19:6D:1E:1D:1A
Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Certificate issuer: /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Certificate serial: 0196A50A2D3698BD1EA71760218CF30DB1A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
Manifest number: 0141
Signing time: Tue 06 May 2025 10:00:29 +0000
Manifest this update: Tue 06 May 2025 10:00:29 +0000
Manifest next update: Wed 07 May 2025 10:00:29 +0000
Files and hashes: 1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: S/Aw0k1eARdbVZDNk4CV766DB2ReF4bpewLYYdBIoCQ=)
2: xCvl2MPRqLFevw92K1xWqEyP8xM.roa (hash: x5lJC5gSbKWJztGnWxiyT9yj/ffbvJ91buVaYTLqpME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:0a:2d:36:98:bd:1e:a7:17:60:21:8c:f3:0d:b1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Validity
Not Before: May 6 10:00:29 2025 GMT
Not After : May 7 10:00:29 2025 GMT
Subject: CN=2969ca34b8c39f7cb2846cc2914b2d196d1e1d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:e3:9c:13:3d:a9:5c:ef:c5:a2:2e:6f:c8:
b3:c1:49:3f:27:ae:c8:5a:81:b7:a7:df:69:1d:b7:
5e:1c:3c:16:dd:d8:d7:cc:28:18:c9:4e:6f:da:01:
75:4e:9b:cf:69:39:08:78:c8:84:46:d4:27:c2:7b:
6d:14:25:d3:5b:53:54:96:cf:84:09:4b:66:a4:8a:
86:a9:47:c1:8f:38:d6:b5:82:05:8d:74:70:70:e2:
ac:c9:86:d9:36:57:ab:b5:2d:87:aa:91:4e:8c:77:
4a:8a:98:3c:52:5f:12:6c:5c:f4:ed:30:b3:56:97:
66:6e:a6:2b:9c:b1:b7:9b:7b:e6:99:b5:1b:0b:7e:
86:90:ea:02:ae:15:95:cb:1f:c2:1e:bd:d5:f2:67:
80:09:8c:37:01:d5:a1:4b:58:aa:83:64:7f:40:e7:
2d:1a:62:eb:a3:93:e4:35:07:11:67:50:2b:a6:22:
00:6f:41:3d:66:e2:cf:82:70:90:55:ba:e1:00:5b:
e6:b7:d1:28:ba:ac:07:92:8a:bf:15:53:ac:d7:cc:
b7:62:c6:9e:d6:3a:62:b9:f3:3b:61:31:28:bc:fb:
5d:6b:8a:f3:7f:cd:bb:17:e8:24:80:0f:13:14:f5:
cd:b2:8f:43:b3:fa:e0:70:b5:57:87:32:28:4e:a0:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:69:CA:34:B8:C3:9F:7C:B2:84:6C:C2:91:4B:2D:19:6D:1E:1D:1A
X509v3 Authority Key Identifier:
keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7a:0b:c4:31:83:e7:cc:1a:49:59:31:6a:fd:fb:a0:f6:ff:
dd:3a:87:a8:51:10:90:d1:da:7c:10:3a:89:ab:b6:04:ae:05:
71:0a:e6:99:23:ce:6d:42:ea:db:ec:13:91:72:80:e2:29:bc:
64:8f:71:89:53:2d:11:cb:b2:07:ed:8d:08:8c:23:92:03:15:
43:be:71:6d:01:7e:6e:69:6d:87:7e:f7:5e:e5:98:68:6d:5f:
ec:e7:c8:60:01:5c:6c:5e:fb:8f:ea:1d:92:ff:f5:eb:e1:dd:
da:43:1c:a6:69:14:0c:55:af:2a:3a:26:ba:20:42:e5:69:c6:
dd:fc:03:48:d9:24:b8:6f:93:83:e0:7d:d4:71:4b:1c:9a:41:
24:76:87:35:d7:fc:1e:5f:0a:13:ae:52:74:98:c4:0f:2a:31:
81:b7:bd:dc:32:3a:62:14:5a:4f:f9:42:68:8b:6e:46:62:3c:
36:62:d6:67:d2:7c:e6:59:85:9c:fa:51:c6:3a:96:54:1a:c3:
d4:12:4a:d6:ce:15:05:34:c1:2b:fb:69:ac:f3:5c:46:87:70:
b1:e2:0c:01:bf:49:3c:e1:76:40:54:24:58:8d:cb:7d:02:9e:
1f:d5:ba:0f:a9:cf:a6:5a:ac:c1:da:1f:ac:09:19:60:f9:f0:
0a:9e:ef:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:04:35 2025 by rpki-client