Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
File: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft (raw, json)
Hash identifier: 7eNYOUyaCdi0bRrbyRgS+Txko2GCrgK/p5Qs+bnPMas=
Subject key identifier: 13:34:67:9B:5E:F0:64:23:E4:47:96:9A:3A:97:C7:AB:12:55:95:94
Authority key identifier: 25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
Certificate issuer: /CN=25a290559f72a701231c028e70a250690355a639
Certificate serial: 0196BF6EDFD0EC7DD169E3BBD23ABE57288C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
Manifest number: 1274
Signing time: Sun 11 May 2025 13:00:36 +0000
Manifest this update: Sun 11 May 2025 13:00:36 +0000
Manifest next update: Mon 12 May 2025 13:00:36 +0000
Files and hashes: 1: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl (hash: gQZ6UlIISo0ah0UJSot7TM/cnubsecBfhFpAZ2XvxSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:df:d0:ec:7d:d1:69:e3:bb:d2:3a:be:57:28:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a290559f72a701231c028e70a250690355a639
Validity
Not Before: May 11 13:00:36 2025 GMT
Not After : May 12 13:00:36 2025 GMT
Subject: CN=1334679b5ef06423e447969a3a97c7ab12559594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ac:20:0a:7a:51:86:bd:7f:3a:b8:66:1e:21:
72:2d:7d:c1:73:7a:cb:e3:e4:25:0b:35:c8:00:1c:
1c:f3:32:62:3c:73:16:a7:86:c0:71:75:82:48:86:
23:82:a7:2d:86:7c:94:f5:98:ef:ba:75:d4:5c:15:
3d:70:3f:c1:7c:34:86:2f:9e:09:1d:09:07:0d:a8:
95:78:a8:98:8f:71:b2:4b:39:e3:95:a3:42:3d:95:
25:8c:97:aa:1d:de:13:85:8a:e2:b2:30:a0:df:91:
ec:de:59:55:75:01:3e:5b:4f:c1:47:b9:da:3a:b1:
44:c6:d8:41:45:9a:6f:1a:a0:50:b7:c1:12:0f:3a:
4c:61:23:dd:3a:98:e5:48:76:a9:71:a1:45:a9:b8:
a5:1b:e4:e2:ea:23:86:d1:0c:2a:a5:14:69:17:00:
f2:80:fe:56:1d:c7:9e:ab:53:6f:b2:90:4e:20:70:
ba:f2:7f:3c:3f:d5:ef:21:1c:47:a9:7f:33:93:a5:
6f:2c:22:8a:1a:47:0d:5d:d1:f7:11:b3:f9:80:07:
6d:0f:66:4f:e4:da:b5:61:ad:ce:a6:ad:bc:f9:62:
a8:8e:b7:a5:64:25:52:d9:11:42:e5:8a:86:b5:43:
10:d2:d2:2e:a5:ee:90:67:06:a3:4d:0c:59:d4:0d:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:34:67:9B:5E:F0:64:23:E4:47:96:9A:3A:97:C7:AB:12:55:95:94
X509v3 Authority Key Identifier:
keyid:25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9c:55:d4:32:92:71:f2:95:7c:be:60:67:de:41:91:ff:6c:
cd:89:02:b2:66:b7:ff:e5:21:cc:aa:f1:e2:06:14:e1:a7:7f:
cd:72:1e:cb:4b:1a:75:69:9c:40:cb:01:4d:86:dc:59:d8:91:
43:c5:e0:f0:bb:9e:1c:bb:fb:ff:a2:53:c5:47:1f:4d:09:c0:
35:80:9a:e1:bb:86:7b:a7:76:cd:8d:c2:eb:e9:37:9f:ef:9b:
c5:49:b9:15:db:ad:bc:f0:12:f7:1a:27:76:9d:e1:be:55:3e:
b8:4d:b9:ab:ab:23:35:02:a2:f1:54:d7:b7:0a:d0:cc:94:53:
7b:50:5a:63:7e:70:f5:7f:9f:06:68:5a:7c:00:68:14:d3:cd:
0f:7b:f8:73:86:f3:9c:79:4a:f1:0c:17:ed:86:21:fd:dc:ae:
ec:18:da:da:9f:d4:72:ce:5c:3e:50:d7:55:e1:0f:bd:4e:83:
5b:bc:54:03:9c:b6:14:88:b5:cb:3d:ab:46:f1:01:0b:93:e6:
92:8e:c2:cb:0c:77:5e:c8:f0:48:b3:9c:d8:71:3f:6f:fa:82:
cf:08:90:39:fc:6c:81:d7:41:cd:03:90:2a:48:c6:b8:a6:32:
ce:10:ae:84:d4:c8:59:6d:5d:25:3b:e6:c2:1a:e7:9f:7d:7a:
20:35:91:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:22:44 2025 by rpki-client