Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
File: JkQpgYmVnJWm1KdLdU9JlqWltlw.mft (raw, json)
Hash identifier: rMgcYx7cEP9UULvaPc/XYrc3jfQkATnNzbRWr9Xzaps=
Subject key identifier: 1E:A0:9A:C4:94:E0:48:27:C2:81:B3:37:25:4A:51:EC:00:26:FA:2A
Authority key identifier: 26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
Certificate issuer: /CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Certificate serial: 0196B9A41A81B2B860C2C197445E589E8FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
Manifest number: 152E
Signing time: Sat 10 May 2025 10:01:01 +0000
Manifest this update: Sat 10 May 2025 10:01:01 +0000
Manifest next update: Sun 11 May 2025 10:01:01 +0000
Files and hashes: 1: JkQpgYmVnJWm1KdLdU9JlqWltlw.crl (hash: DshSBgNNKhPLy7PBCbClwQoDkfMI7GyCtLIdCmbBACo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:1a:81:b2:b8:60:c2:c1:97:44:5e:58:9e:8f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Validity
Not Before: May 10 10:01:01 2025 GMT
Not After : May 11 10:01:01 2025 GMT
Subject: CN=1ea09ac494e04827c281b337254a51ec0026fa2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:15:4d:35:28:6f:94:c0:3e:fe:8c:41:87:
33:b5:24:ca:6c:05:6e:0b:6f:e7:70:5e:01:49:67:
f0:89:8a:98:08:e3:1f:30:3c:0c:2b:03:e2:54:23:
0f:29:67:30:6a:c7:85:1e:f8:8b:9e:25:39:0a:3e:
0a:e9:f7:50:03:8f:aa:0e:24:3a:6c:fe:5b:50:8a:
66:26:c6:6a:b2:ca:ac:f9:e1:88:0c:80:15:d7:21:
97:f8:5b:17:9a:20:72:a2:27:e6:26:0f:2c:6e:16:
ff:39:d3:5f:04:d6:0d:bf:6c:6a:5d:a6:61:0e:ea:
d1:77:b4:f5:82:33:66:70:6c:b3:e5:b4:8f:b4:19:
3c:c2:fa:62:4a:b2:a8:65:35:cf:75:a4:cd:26:05:
69:8c:70:4e:6a:69:a4:30:2c:83:f1:6a:c2:fc:e8:
8d:e0:18:da:d6:39:aa:eb:84:cd:1d:6c:74:f8:b4:
9f:6e:83:31:d6:ba:eb:bd:c7:ac:48:90:26:a6:e3:
df:70:98:bc:0a:18:17:a5:c8:69:05:f8:56:39:32:
fb:6e:5e:98:f9:7b:dd:41:a1:1f:19:8a:09:36:63:
14:48:a6:78:d0:ea:4e:b2:a4:c8:1a:ed:ca:3a:66:
c3:df:22:ab:32:6b:5f:57:4c:ab:c6:50:e0:04:03:
77:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A0:9A:C4:94:E0:48:27:C2:81:B3:37:25:4A:51:EC:00:26:FA:2A
X509v3 Authority Key Identifier:
keyid:26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0f:a6:1d:06:06:74:b8:27:bb:bb:92:6b:67:07:7a:56:e7:
27:2f:e2:f1:a9:c8:41:28:c7:09:7b:d7:74:00:6e:7c:0f:4f:
3a:16:77:50:a8:84:07:06:07:de:9e:67:76:1b:4e:a5:cc:7e:
43:37:ac:fa:bb:31:c9:d6:aa:84:81:03:31:ca:bf:37:6c:e7:
e4:37:0d:26:5f:3a:8a:44:4f:bb:51:2b:69:7e:bb:17:b3:27:
43:ef:79:3b:4e:7a:0e:37:ba:b6:a0:e4:7e:1e:35:a9:a3:54:
2e:c4:ef:b0:38:db:a4:74:07:a5:ad:b5:c2:2b:6a:0f:b9:fa:
25:d3:5a:10:c2:bf:c4:aa:5a:03:49:d5:5e:88:c7:de:c3:8a:
9a:77:7c:05:52:66:44:5e:18:4d:f8:c6:26:b0:17:3b:45:f5:
6f:19:57:d8:68:9f:3d:7f:b2:91:4b:d0:7b:01:c1:ac:45:85:
80:43:e2:3c:dd:1b:63:69:e3:19:2b:aa:d5:05:a1:1b:5d:e3:
54:a6:ef:92:f9:82:26:27:05:8e:f4:6e:5e:03:7f:42:d6:a7:
d1:42:86:66:42:a2:be:91:be:78:53:47:22:46:5a:df:7a:56:
e4:65:d3:3a:18:11:0c:49:05:17:4b:43:ba:73:b5:56:a3:2e:
0b:49:bb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:52:19 2025 by rpki-client