Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json)
Hash identifier: kaWxYcf4QUJ5/mZ/PEQtAgO7Q2np4jvIeN/Q7II9aRc=
Subject key identifier: 88:D9:E1:3C:54:5E:FE:71:1F:1C:05:DF:28:50:EC:1E:D2:A5:18:C5
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial: 0196BF6F1C566B6BB518A6CA2A0D2503B540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 13:00:52 +0000
Manifest this update: Sun 11 May 2025 13:00:52 +0000
Manifest next update: Mon 12 May 2025 13:00:52 +0000
Files and hashes: 1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: okwHm8EKfA2G98eKszCvcOpb+rDTVQqppkTdEAe6g+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:1c:56:6b:6b:b5:18:a6:ca:2a:0d:25:03:b5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Validity
Not Before: May 11 13:00:52 2025 GMT
Not After : May 12 13:00:52 2025 GMT
Subject: CN=88d9e13c545efe711f1c05df2850ec1ed2a518c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:fe:fe:43:a3:d8:f4:2c:11:0d:e2:74:84:
31:7f:8a:79:14:32:80:38:30:78:37:ac:9c:7f:51:
95:4b:9a:93:cb:9f:f7:5d:2d:30:59:b1:83:82:31:
37:86:1e:2e:b8:60:fa:a8:e7:80:d3:31:00:97:b1:
2b:84:61:e3:87:a5:9a:16:a2:fa:e1:c1:f2:38:9f:
b7:c9:77:3a:19:e8:99:96:6a:9b:0a:32:20:a9:55:
37:8e:c0:12:14:6b:fc:66:f1:54:34:c0:39:6a:5e:
9b:d4:55:d4:75:f2:c9:b6:d8:d1:a7:4a:12:ee:b7:
68:98:0a:33:be:b3:71:13:8c:42:f1:8f:ee:f4:7c:
79:e1:90:31:98:7b:c9:9a:00:7b:89:ea:e8:2c:db:
05:3f:75:f5:52:80:a4:40:77:0c:8e:9a:96:c3:ae:
29:46:9a:26:c4:1f:5d:7e:60:83:76:71:dc:b4:bc:
99:2c:9c:77:e4:93:b3:6c:a0:a1:b4:5e:aa:cf:87:
83:cf:a9:d8:ec:e6:18:18:65:29:6d:23:33:c3:53:
9e:6a:bb:5c:42:e8:8c:b5:36:df:14:53:b0:53:d9:
60:1b:17:e1:e3:77:42:f8:21:5e:cc:52:c7:02:77:
26:f3:31:26:37:a6:25:80:03:56:a5:27:5f:17:f7:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D9:E1:3C:54:5E:FE:71:1F:1C:05:DF:28:50:EC:1E:D2:A5:18:C5
X509v3 Authority Key Identifier:
keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:97:8e:56:bd:5c:61:00:d2:26:26:f4:5a:88:08:7e:ca:b5:
f6:a8:90:1f:8f:32:54:b7:1e:ff:9a:08:43:81:07:ac:86:22:
6b:55:d2:cd:2d:9a:e7:6a:c8:88:4b:1a:6d:65:85:ec:40:f7:
c1:fe:0e:75:4b:ea:ac:4a:e8:16:18:79:a0:6b:a3:7a:a7:e3:
11:90:74:ff:81:dc:00:bc:c5:95:29:cd:12:ed:27:26:3d:80:
1a:3e:73:b3:33:33:66:a8:75:a0:f5:7c:04:8a:b7:8e:dc:08:
e6:82:b3:9f:b4:76:44:06:92:6e:3c:62:b4:62:36:44:38:23:
38:b0:80:f1:bc:93:e6:fc:f2:2f:00:1f:46:8f:a7:5a:c4:45:
d1:13:a5:af:cc:7e:c7:e5:d3:86:6c:4e:3f:10:ed:e8:6a:81:
87:a7:91:ff:ea:57:28:bf:ec:36:05:e6:31:e1:ec:98:f2:a6:
a4:ea:b3:b9:ef:9c:a2:99:c4:bb:a0:84:34:38:21:e4:e6:bc:
60:1e:5a:e3:f0:63:0b:05:c0:92:f0:59:37:e1:17:26:73:bf:
97:4f:89:5b:36:cb:d5:f4:9a:39:bb:c1:82:36:59:f8:be:9f:
2f:40:e2:bc:3d:50:46:a5:bc:7c:3b:03:49:b0:e3:ae:30:90:
91:2f:09:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:12:16 2025 by rpki-client