Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
File: B-jeamdMH-qtmpzNPOoi3yYXTyI.mft (raw, json)
Hash identifier: QsKhEfCa/u7ChD+W11n/yEZblAb6XgIeRfhwMyXYNHA=
Subject key identifier: 33:F2:8D:E7:7D:53:80:8E:73:7E:50:4D:CE:9C:BD:61:97:D1:3E:5A
Authority key identifier: 07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22
Certificate issuer: /CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
Certificate serial: 01969FE3D6C4113FC7C544FAC7D317988CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
Manifest number: 1520
Signing time: Mon 05 May 2025 10:00:31 +0000
Manifest this update: Mon 05 May 2025 10:00:31 +0000
Manifest next update: Tue 06 May 2025 10:00:31 +0000
Files and hashes: 1: B-jeamdMH-qtmpzNPOoi3yYXTyI.crl (hash: BLhQj0lNshadCtBoi/DLcxjoFgn0FIwL/McqCm0Fmw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:d6:c4:11:3f:c7:c5:44:fa:c7:d3:17:98:8c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
Validity
Not Before: May 5 10:00:31 2025 GMT
Not After : May 6 10:00:31 2025 GMT
Subject: CN=33f28de77d53808e737e504dce9cbd6197d13e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e6:78:8b:d9:da:11:46:c5:b8:b1:5c:0c:23:
7b:d1:81:d6:61:b8:19:1a:b8:65:4e:dd:ed:d1:57:
e1:51:e5:18:10:25:4a:16:b2:52:d3:8e:87:fc:ea:
64:bb:ac:32:18:33:61:10:3b:0e:b0:42:f4:a6:db:
c9:39:b7:82:16:85:43:d7:ba:c9:1d:02:53:dd:49:
ee:e3:45:22:e7:02:b0:39:57:7a:1c:09:bd:5e:36:
c0:09:40:86:16:d8:58:58:d0:3a:d6:c6:9f:aa:50:
57:3e:cc:5b:fa:3b:87:7a:1d:d6:e3:53:47:c3:5f:
3b:ff:9b:51:b2:58:4a:4f:42:46:0d:83:00:82:fb:
99:b3:78:04:65:76:9e:f9:f7:28:e4:4b:27:a5:05:
60:1a:a4:4a:4a:2b:ee:52:18:7c:3c:0a:e5:0b:5c:
3f:bd:91:b6:1e:cb:40:e2:c9:84:8b:be:9b:fb:1a:
1e:3e:d6:ef:c4:e3:f6:36:0c:28:7c:13:14:63:09:
6d:f3:0a:80:01:32:0b:6d:2c:da:04:c1:d6:eb:15:
bb:f6:05:7e:11:61:77:4c:51:f0:96:ad:21:f6:80:
57:e8:b7:43:ee:52:53:c4:86:37:f3:81:66:3b:d9:
04:ba:10:d5:28:c7:72:1a:13:59:33:4d:27:7d:0e:
3e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F2:8D:E7:7D:53:80:8E:73:7E:50:4D:CE:9C:BD:61:97:D1:3E:5A
X509v3 Authority Key Identifier:
keyid:07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:4d:81:40:33:91:6b:bf:78:53:f9:4d:06:7e:61:aa:88:40:
2a:6f:b9:53:ed:79:33:fb:bf:52:23:fd:f5:cc:0e:08:b4:1a:
5a:78:8d:fc:07:4f:3b:df:50:fd:28:b7:a4:2e:a1:68:b1:53:
6b:b2:c6:63:c4:be:2d:00:a6:2f:6c:7a:6d:92:1a:b5:b8:1b:
55:67:5c:37:b9:a6:4c:dd:8e:4c:ca:17:b8:99:95:ea:6c:5a:
0d:c3:32:4d:3c:fe:d1:fb:20:0e:16:d4:39:62:97:18:0d:36:
e8:2b:2b:23:8e:76:a7:67:6c:b8:c2:3c:a9:58:36:e9:ad:b8:
8c:94:1a:71:d6:e1:d9:d3:6b:2f:ef:2e:04:5e:ad:b1:dc:38:
d0:47:c2:e6:3b:81:54:8d:63:be:2e:16:7f:0e:41:e0:95:b1:
05:f2:13:32:b9:d5:02:66:8c:e8:7d:f7:a1:dc:48:03:61:a2:
c3:d6:62:9c:66:56:ba:32:e6:7a:a5:b5:9b:3d:de:76:1a:7e:
0a:b2:08:ed:b9:b6:b8:8c:8f:3f:be:49:ad:65:0b:bc:7e:ba:
89:04:1c:bc:59:90:23:0c:de:c4:79:22:e5:ea:9f:f0:f7:8d:
58:cd:ce:1c:a0:13:29:53:9b:a9:e9:8e:dd:ae:23:03:9c:e8:
65:4d:73:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:31:53 2025 by rpki-client