Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft
File: jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft (raw, json)
Hash identifier: d+STB0SbKskZeoTNZ7xtbWYNVOlg526bnAlj2l0+YcY=
Subject key identifier: D2:9C:17:44:EF:B2:CC:C2:C7:B2:94:A2:AB:FB:A1:73:69:49:94:FE
Authority key identifier: 8D:CF:82:69:02:62:F0:62:2E:EB:FA:AD:14:33:D5:8F:B9:CA:9E:1F
Certificate issuer: /CN=8dcf82690262f0622eebfaad1433d58fb9ca9e1f
Certificate serial: 0196D1754D8F357CA0C5DC3E424B31BF4380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc-CaQJi8GIu6_qtFDPVj7nKnh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft
Manifest number: 1543
Signing time: Thu 15 May 2025 01:00:47 +0000
Manifest this update: Thu 15 May 2025 01:00:47 +0000
Manifest next update: Fri 16 May 2025 01:00:47 +0000
Files and hashes: 1: jc-CaQJi8GIu6_qtFDPVj7nKnh8.crl (hash: oVyblipn6CylZ2qnqV5o9s5LzxQj4N669mv7KoMb+I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc-CaQJi8GIu6_qtFDPVj7nKnh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:75:4d:8f:35:7c:a0:c5:dc:3e:42:4b:31:bf:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dcf82690262f0622eebfaad1433d58fb9ca9e1f
Validity
Not Before: May 15 01:00:47 2025 GMT
Not After : May 16 01:00:47 2025 GMT
Subject: CN=d29c1744efb2ccc2c7b294a2abfba173694994fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:db:8a:5f:c0:b2:10:39:27:c5:b2:d6:28:
da:4c:99:66:3e:81:71:2b:46:4a:2d:aa:bc:43:78:
a1:a8:d2:79:0f:de:d0:c0:5b:d2:00:2b:e7:be:fa:
67:da:97:6b:8e:e5:96:d9:2a:83:ad:da:4e:2e:3a:
b1:37:4e:33:8e:f2:fa:10:b8:8c:39:7b:b2:d5:c6:
ab:56:91:46:2d:23:f5:ae:d8:4d:ff:5a:ff:72:94:
aa:01:1a:39:e5:fc:fb:e2:71:17:48:34:d8:55:ae:
b4:c5:80:d6:69:7b:94:67:fd:95:11:64:cc:4e:f7:
ca:be:91:d0:c6:b0:d7:b8:8d:8d:63:13:d0:18:92:
ce:52:51:37:f7:59:e9:18:f2:e7:9a:cf:71:05:48:
96:ae:88:7a:7d:ec:42:68:cf:e8:d8:7d:5e:b7:70:
90:ca:4e:32:d2:aa:9f:96:3c:76:c0:a3:19:a2:16:
d6:cb:9f:b2:0c:bb:cd:2f:27:53:17:0d:20:e7:b1:
2b:b7:7d:0d:fb:f5:ed:54:5b:96:91:74:2a:fe:6d:
a4:53:c0:43:38:64:bd:35:db:db:69:c5:d5:6a:e6:
a0:a2:1f:37:45:81:c2:0b:45:57:6c:34:da:a4:cb:
86:c4:a8:79:15:31:f2:45:6c:cf:ad:12:16:c8:79:
a9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9C:17:44:EF:B2:CC:C2:C7:B2:94:A2:AB:FB:A1:73:69:49:94:FE
X509v3 Authority Key Identifier:
keyid:8D:CF:82:69:02:62:F0:62:2E:EB:FA:AD:14:33:D5:8F:B9:CA:9E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc-CaQJi8GIu6_qtFDPVj7nKnh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/938a07-2758-4223-a947-49c844791ae2/1/jc-CaQJi8GIu6_qtFDPVj7nKnh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a4:73:a1:f1:6f:94:0a:2d:45:af:05:46:d5:3c:ae:05:3c:
db:d0:d0:5c:2b:77:e6:6c:8a:41:0c:07:d9:a4:63:26:15:b2:
4e:03:df:50:6a:35:e1:8d:cd:97:13:c4:37:7d:f0:a1:19:4e:
c3:db:fa:a3:5e:69:fd:38:56:e3:45:8c:36:46:89:3a:71:39:
c5:3e:5b:74:86:da:3a:8e:14:c2:e1:7b:8c:ea:f7:0d:57:a5:
40:c0:59:3a:6e:01:36:b6:b2:da:26:1c:e0:60:e7:be:56:56:
98:46:d3:1f:d8:8c:1f:40:06:b1:3e:e2:d6:7e:f4:ca:f9:de:
20:0d:8e:5c:7c:89:ca:f6:f4:99:80:94:88:d7:49:33:9a:af:
34:08:ce:81:d6:f3:9f:26:70:aa:ee:a9:4a:6d:4e:64:12:04:
5b:d4:9b:cc:ea:c8:2f:73:bd:ae:d9:7a:73:04:f0:37:00:66:
d2:ba:6b:97:b1:f3:90:f3:10:2e:82:75:aa:23:62:f8:bc:f9:
a5:3a:19:39:00:0a:af:30:71:b5:ee:66:26:de:19:59:ae:8a:
3d:79:2a:18:c7:c0:8e:21:67:e0:c1:23:f5:f4:b2:a0:01:56:
63:d8:01:f5:cc:de:e5:e1:7f:17:4c:16:5b:81:6c:55:63:36:
2e:b4:02:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:48:31 2025 by rpki-client