Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: OIwdbx34EU2BepH7lo3TECl2O8sZoSJu2uNPG6tgXzg=
Subject key identifier: 69:0A:59:EE:07:E5:CE:16:7A:69:FA:54:CA:0F:F3:09:CE:AB:FC:EA
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 0196C5A7D0B481A8F3B595994126DC3126B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 09E8
Signing time: Mon 12 May 2025 18:00:31 +0000
Manifest this update: Mon 12 May 2025 18:00:31 +0000
Manifest next update: Tue 13 May 2025 18:00:31 +0000
Files and hashes: 1: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: Z3F25pnvl9zqhuJi7iO/+WKpN7+k8Hdzs4w6NTtzlQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a7:d0:b4:81:a8:f3:b5:95:99:41:26:dc:31:26:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: May 12 18:00:31 2025 GMT
Not After : May 13 18:00:31 2025 GMT
Subject: CN=690a59ee07e5ce167a69fa54ca0ff309ceabfcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:e0:ba:c7:1b:17:65:0a:18:7d:52:1a:23:
3c:39:d3:48:86:89:d1:0e:53:dd:ac:22:a3:5d:28:
60:16:5f:88:17:18:58:fa:e9:0f:fe:4f:a1:38:eb:
72:3b:07:a0:54:6e:db:4f:c6:30:41:47:25:47:1d:
53:47:cd:97:2e:ef:89:10:d8:d2:ba:45:8b:04:86:
06:b7:bf:4a:03:2c:20:12:65:fb:ae:10:ec:c7:b4:
db:a7:00:ff:94:5d:ee:7d:f9:b1:40:b4:76:ff:cb:
57:6f:dd:42:99:d4:2c:f8:dd:23:66:78:97:77:33:
03:57:54:2e:79:6f:e4:33:a5:02:ea:ed:b0:84:dc:
8b:97:f6:b2:59:e9:55:b1:33:0c:f5:39:c6:ac:ce:
0d:99:1b:b9:f6:76:e4:0a:22:f7:5c:be:82:5e:0b:
c2:7f:aa:4e:c7:65:b1:ca:58:80:89:d6:c2:b2:af:
2c:c0:fb:f2:5f:b4:a3:56:66:56:52:f1:e5:d1:9e:
f6:ea:d8:14:da:eb:3e:00:91:5d:9f:b9:09:83:10:
64:a7:b9:9d:e3:fb:7d:f7:a2:cc:15:a9:53:3b:be:
5e:53:0d:05:e1:14:da:6a:53:58:99:d9:ee:c9:9f:
53:fd:03:46:8b:dc:bf:15:e7:ff:6f:90:84:9b:68:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0A:59:EE:07:E5:CE:16:7A:69:FA:54:CA:0F:F3:09:CE:AB:FC:EA
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fb:f0:1f:27:97:2a:fb:35:86:ab:db:2d:c6:a4:d7:d3:bc:
c1:fd:6d:27:78:54:25:c1:2a:1a:bf:84:a7:2e:7a:21:ea:93:
e1:c9:9a:ee:a2:2b:73:88:e0:bf:28:da:63:e2:bb:41:d4:1d:
55:21:6c:7c:22:09:27:42:2a:0a:02:0c:42:a6:82:2b:8e:ca:
95:51:12:46:6d:ad:68:f4:f3:10:fb:f4:ed:e3:7b:86:87:6f:
1f:0a:fa:41:53:66:bc:3a:7b:a3:99:e9:0f:36:99:ae:30:4e:
3e:ff:1a:b5:73:fe:3c:37:73:0b:ac:b7:fb:62:27:74:03:3d:
98:c0:ae:97:ce:e7:15:b2:16:44:5c:ba:7c:3c:ee:57:13:1e:
7f:dc:79:aa:36:53:22:fc:6e:1b:7a:65:6b:99:dd:b4:9b:9e:
61:03:ef:2c:96:f1:74:84:42:b6:48:2b:14:15:22:39:23:59:
3f:d9:fa:59:d5:e4:76:5a:12:a8:f7:bc:1a:89:ec:20:dd:91:
14:f2:cd:e1:2e:5f:e4:16:c3:b3:e6:ec:a2:41:ee:36:fc:3f:
4b:5e:25:e6:62:e1:55:c9:01:ba:5b:38:8c:24:51:79:d2:42:
02:b4:d3:b0:87:55:9e:32:64:f6:65:4d:8c:e0:f6:55:f8:9d:
f9:11:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:47:14 2025 by rpki-client