Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
File: jR4EozwylZxnL0X0a-EIZLgemEo.mft (raw, json)
Hash identifier: FJyhs1/NaQqwA9Nte42qmXjL+ZG4yjT2bsXiAF33LvI=
Subject key identifier: 69:60:09:B0:2C:63:5E:56:5C:98:17:07:5C:35:13:13:08:A7:5A:AF
Authority key identifier: 8D:1E:04:A3:3C:32:95:9C:67:2F:45:F4:6B:E1:08:64:B8:1E:98:4A
Certificate issuer: /CN=8d1e04a33c32959c672f45f46be10864b81e984a
Certificate serial: 0196B0A07B53F8CF4F8FBF1ECA9E06CD84A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
Manifest number: 1528
Signing time: Thu 08 May 2025 16:00:29 +0000
Manifest this update: Thu 08 May 2025 16:00:29 +0000
Manifest next update: Fri 09 May 2025 16:00:29 +0000
Files and hashes: 1: jR4EozwylZxnL0X0a-EIZLgemEo.crl (hash: qbb3pLULBfFRfMwN/d8WBFG3N2jOH1FuYRDET9vaF+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:a0:7b:53:f8:cf:4f:8f:bf:1e:ca:9e:06:cd:84:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1e04a33c32959c672f45f46be10864b81e984a
Validity
Not Before: May 8 16:00:29 2025 GMT
Not After : May 9 16:00:29 2025 GMT
Subject: CN=696009b02c635e565c9817075c35131308a75aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:5a:bd:f5:8c:34:65:73:f0:ea:0d:21:b8:
da:15:20:a5:ee:1e:2b:b1:1d:08:68:6e:fe:f3:f2:
99:aa:03:fd:24:40:fb:2e:be:10:11:67:47:91:aa:
9f:25:c8:27:42:bf:c8:7b:d2:8f:75:0d:dd:7f:74:
ae:95:64:a2:2c:06:4b:51:12:12:24:cb:4a:36:e9:
a9:04:6e:c0:ea:e5:4f:e5:a6:d9:ae:55:4a:61:aa:
82:9b:90:69:07:ea:28:ab:e3:45:91:04:3f:bb:08:
30:9e:f9:4c:2e:11:82:18:2f:d1:0f:ee:20:b0:d0:
0a:21:a1:95:61:93:79:0a:df:f8:a9:5d:e1:5f:84:
74:38:fe:0d:a9:d2:e3:f1:2a:7d:99:86:b5:c8:60:
0a:ac:7f:44:43:a7:66:ef:6b:33:1a:ad:1a:a6:35:
75:16:97:36:5c:fe:73:90:f1:1c:7b:dc:dc:f2:66:
1b:4b:e7:31:e2:10:41:51:cb:9d:17:08:59:0e:e4:
f3:a7:6e:67:a4:66:f0:af:3b:7c:69:d2:17:2c:a4:
57:8f:e6:53:b2:2a:4c:b1:1d:5e:06:db:2e:cb:d6:
6a:a2:a3:0f:ba:62:04:2e:4d:c6:cd:f8:65:34:a0:
48:2e:d1:19:a6:18:2a:3a:3d:08:80:ae:fc:e3:a0:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:60:09:B0:2C:63:5E:56:5C:98:17:07:5C:35:13:13:08:A7:5A:AF
X509v3 Authority Key Identifier:
keyid:8D:1E:04:A3:3C:32:95:9C:67:2F:45:F4:6B:E1:08:64:B8:1E:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ca:67:0b:d9:57:7e:6b:be:b4:69:7a:63:e7:5d:7d:e6:f5:
f5:e9:7c:c8:17:4e:fd:4a:cd:be:6f:93:11:03:68:ed:a6:a8:
0b:1e:9f:18:56:4f:52:8f:2f:06:b6:3a:0d:2b:bf:a9:75:10:
3f:ab:43:e3:04:45:02:ae:1f:74:72:5c:8a:82:91:9c:09:f5:
eb:29:a8:1f:5c:ea:cd:7d:1c:74:be:f4:0e:a5:a1:55:1a:fd:
b5:c3:ea:62:3b:ad:f8:d0:ef:94:c9:dd:fe:78:fa:17:f9:e0:
c0:e9:c3:36:0b:98:46:6e:4a:51:08:09:13:7d:ac:55:f3:30:
0e:70:4c:e2:6a:94:38:10:8e:c4:f8:13:1e:72:75:06:f9:df:
39:5e:5a:9f:4d:df:20:da:bd:c9:e3:49:c8:aa:31:25:c0:ca:
97:f1:01:c8:06:08:3c:9f:f0:b9:eb:0d:1c:ae:b6:d3:2c:f6:
fa:d8:ef:da:2d:4f:67:7a:40:71:ab:36:5f:55:35:65:9f:31:
06:8f:9a:b4:84:61:f1:4a:9c:bd:45:45:a7:de:be:f9:5c:30:
d8:ee:7b:92:67:0e:d3:5c:21:c9:26:40:36:9a:db:46:57:f9:
93:c8:7f:0b:e5:99:00:a8:52:52:c7:0c:e1:ea:2e:c0:82:b6:
2d:25:c2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:51:21 2025 by rpki-client