Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
File: jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft (raw, json)
Hash identifier: CSM/Mw7eoGzB05Jv0ExMIpDzXRPQk+E3MjGLpa1Pb9c=
Subject key identifier: F8:E7:B3:C2:82:6E:BA:6D:52:9B:B7:E1:0E:6B:BC:32:93:8D:02:EA
Authority key identifier: 8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
Certificate issuer: /CN=8c4378b571682d34773b463752701c9405fbed78
Certificate serial: 0196B58FE9C3B43CB06FABD7C2575B55B629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
Manifest number: 0426
Signing time: Fri 09 May 2025 15:00:29 +0000
Manifest this update: Fri 09 May 2025 15:00:29 +0000
Manifest next update: Sat 10 May 2025 15:00:29 +0000
Files and hashes: 1: jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl (hash: sGIqVdYCXbnoFBZSeSuZoH3pbQIBLz3+hcT+LDFWqtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:8f:e9:c3:b4:3c:b0:6f:ab:d7:c2:57:5b:55:b6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c4378b571682d34773b463752701c9405fbed78
Validity
Not Before: May 9 15:00:29 2025 GMT
Not After : May 10 15:00:29 2025 GMT
Subject: CN=f8e7b3c2826eba6d529bb7e10e6bbc32938d02ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:06:2a:10:86:a1:bb:4a:25:cc:73:12:7e:
e4:1b:2c:60:d6:25:e0:d8:f5:a2:b5:58:11:22:67:
1a:24:37:96:84:ad:a0:94:1c:28:ac:15:3b:50:89:
6c:54:73:7a:4b:34:61:19:bd:bb:63:f2:1d:9e:54:
40:88:6d:7b:ec:5a:16:b0:4f:8b:42:9b:56:bc:b9:
94:c9:75:e4:89:1f:06:fc:4f:9e:5c:ea:1a:e2:6b:
22:48:80:89:48:24:15:d4:ce:1d:84:ce:1f:6a:6a:
1b:42:b9:80:4a:54:b9:30:5c:2b:9e:57:fb:0f:26:
5b:9d:1a:3b:2a:7e:6d:7a:ad:f9:c9:79:29:e6:95:
85:b4:45:2d:54:36:77:f9:fb:b6:80:24:e2:94:5c:
17:e1:a5:04:18:d4:2d:8f:27:9b:5b:78:29:ef:ef:
99:ef:03:c7:83:1a:b6:b0:6c:6e:96:2e:dd:e3:05:
c6:bd:63:9c:49:72:e7:10:ca:12:b5:98:a0:e0:25:
01:38:84:f5:fa:f6:83:c4:9a:06:89:d3:dd:ef:2f:
96:9b:e3:0b:43:77:c2:74:92:34:e4:26:a7:2a:73:
9c:49:5f:1f:28:76:b7:7c:48:bf:e8:6b:ca:3c:50:
d4:f3:33:23:87:f6:f3:74:de:ea:c4:cf:ad:2f:af:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E7:B3:C2:82:6E:BA:6D:52:9B:B7:E1:0E:6B:BC:32:93:8D:02:EA
X509v3 Authority Key Identifier:
keyid:8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:54:4b:cc:eb:e8:89:c4:07:0f:cf:5d:01:a7:c1:5d:61:4c:
cb:85:0c:f4:42:dd:72:3d:f9:f2:d2:5c:49:4b:cc:5f:13:24:
3f:3b:77:69:dd:43:cc:32:5e:7f:34:ed:f3:f2:36:c7:88:19:
33:ce:da:7a:a2:4d:7c:0e:57:d4:7f:70:5b:53:d0:eb:73:82:
66:14:d2:bf:c0:72:05:fb:bc:48:4e:d7:9a:55:e2:9a:84:a0:
3f:e7:ca:7e:90:89:4d:cd:87:3b:75:d9:13:3e:c0:64:a8:7a:
64:e5:eb:75:ce:68:7a:a9:12:80:10:f0:d4:08:16:9d:99:c5:
7a:2a:40:04:28:1c:b7:c5:b1:da:b4:82:77:6f:4d:b7:51:f2:
92:c5:f1:25:86:41:47:43:82:77:b0:80:f0:4a:16:db:58:da:
09:9e:b8:42:31:23:86:64:1f:8c:aa:af:81:50:80:50:33:18:
c0:60:62:d5:c9:47:ce:f1:0c:29:4a:71:6e:1c:a0:65:72:aa:
fd:c7:e0:7d:02:60:d1:af:7b:15:ac:b2:ea:92:93:99:23:b4:
8d:6d:7c:9f:1e:e1:01:22:21:69:38:d1:ed:ea:67:c9:66:63:
28:67:4a:8e:e9:ef:63:d4:ef:70:30:93:19:a5:de:dd:b5:35:
76:a2:9a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:44:49 2025 by rpki-client