Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
File: jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft (raw, json)
Hash identifier: +6wknUv7MwM9qu1CXXmmneqn96FhUNe3SEdDDjW5g5s=
Subject key identifier: C7:BD:C3:B6:A9:D0:15:1E:B7:E0:AE:FF:0D:D1:C8:73:92:48:47:6C
Authority key identifier: 8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
Certificate issuer: /CN=8e5661697da90b5800bc42adf9b45953219755d0
Certificate serial: 0196D88A8C0986FB065CC1F3D64D28082F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
Manifest number: 0E3B
Signing time: Fri 16 May 2025 10:01:20 +0000
Manifest this update: Fri 16 May 2025 10:01:20 +0000
Manifest next update: Sat 17 May 2025 10:01:20 +0000
Files and hashes: 1: jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl (hash: IG8d/cEbPoQx1tt2T3ntRiTeOAPlZpDdYSxjvfQ3mKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:8a:8c:09:86:fb:06:5c:c1:f3:d6:4d:28:08:2f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5661697da90b5800bc42adf9b45953219755d0
Validity
Not Before: May 16 10:01:20 2025 GMT
Not After : May 17 10:01:20 2025 GMT
Subject: CN=c7bdc3b6a9d0151eb7e0aeff0dd1c8739248476c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:f6:9e:6e:cb:ae:b4:69:75:36:60:f7:42:
e3:ef:37:7f:8b:e1:16:bb:dc:95:9e:d1:6a:c7:d4:
27:3a:ee:aa:22:f5:6e:ec:68:e1:20:1b:39:58:ac:
ce:f0:d4:4b:ea:a6:6f:12:77:7a:e8:14:6c:0f:fd:
bb:a9:20:0c:d0:c1:83:d2:ca:fd:b3:3e:b9:82:50:
70:cc:70:a8:b4:47:42:13:f1:79:94:6f:c0:87:4d:
94:89:b4:ed:6b:e5:6a:ce:16:fe:76:bb:88:66:a1:
44:47:de:52:1b:98:a7:f4:f8:43:ae:25:3b:4a:45:
38:bf:bc:71:72:d6:fe:ba:c2:64:68:d7:f6:37:a0:
ee:07:87:67:07:8a:14:1e:3b:5c:fe:b0:b6:14:10:
ab:c9:30:e7:ed:17:02:39:f1:eb:27:b8:8c:de:36:
15:17:d7:89:57:c3:bf:90:5a:76:50:cc:3c:86:e4:
d6:78:78:9a:4e:05:2b:3e:31:c8:27:cb:fa:27:23:
34:ee:0a:b3:d9:0c:37:16:cb:5d:76:01:da:ed:9f:
09:7d:90:de:89:ee:68:93:25:91:bf:b2:e7:1f:24:
81:03:db:9e:28:21:eb:4d:92:cd:04:ab:cf:7f:b3:
a6:fb:56:9b:85:95:dd:2c:d5:28:7e:fd:39:a6:75:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BD:C3:B6:A9:D0:15:1E:B7:E0:AE:FF:0D:D1:C8:73:92:48:47:6C
X509v3 Authority Key Identifier:
keyid:8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:61:84:90:11:0a:51:84:02:e1:b3:18:ea:6c:86:71:4c:04:
df:9d:82:e9:a1:f7:fc:23:f6:dd:60:2b:75:fc:ae:98:8d:b3:
fc:72:dd:11:e3:14:d8:47:85:82:5d:83:87:8a:b4:99:38:22:
57:08:97:c5:08:06:60:91:db:ce:01:85:ad:67:c4:4c:bf:01:
d3:36:5b:9d:07:67:34:00:41:08:f9:d7:24:02:c7:07:e8:74:
a7:88:99:fb:0e:86:b2:94:c6:ec:9e:69:18:b6:86:03:03:22:
9a:d5:a2:64:63:76:40:55:66:73:1c:98:c3:a6:8a:19:b7:50:
3a:1a:3b:fa:13:24:a5:29:cd:c4:a4:a5:64:93:e8:e6:b0:dd:
30:5f:45:8f:5b:c6:7e:f1:d9:83:22:69:e4:8b:d0:6f:2d:b3:
e8:92:82:88:4f:f2:d5:94:44:4f:bd:7f:01:55:a1:e1:32:75:
f8:5a:64:49:c3:fa:0f:d7:6c:89:32:84:cd:1c:04:16:6a:c5:
24:ec:26:e8:a2:87:7a:b8:d4:69:51:38:9f:6d:a4:f0:c8:43:
7d:70:8f:ff:2c:98:45:61:fa:e6:fb:0d:d2:c5:da:da:2e:5e:
28:66:fc:37:92:0e:fe:4d:a4:29:84:5e:60:50:01:25:c6:e5:
af:d0:62:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:16:55 2025 by rpki-client