Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
File: jixqlU7QBSEWyinuD89V91LY5HY.mft (raw, json)
Hash identifier: NFrqMcIPR5l/zipLk0FfvjfVFOFweOTII6ztnspn6ss=
Subject key identifier: 2E:1B:76:4B:0C:5E:F8:9F:81:C8:6C:AD:16:F7:C5:56:CE:9E:7D:4F
Authority key identifier: 8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
Certificate issuer: /CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Certificate serial: 0196BB9298A5FEE13EB77BED2A65834DD6CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 19:01:08 +0000
Manifest this update: Sat 10 May 2025 19:01:08 +0000
Manifest next update: Sun 11 May 2025 19:01:08 +0000
Files and hashes: 1: jixqlU7QBSEWyinuD89V91LY5HY.crl (hash: K5+E9VD2PBm7Lr5ba6QFpNS4/RyNMShtBM5lWfHDvRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:98:a5:fe:e1:3e:b7:7b:ed:2a:65:83:4d:d6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Validity
Not Before: May 10 19:01:08 2025 GMT
Not After : May 11 19:01:08 2025 GMT
Subject: CN=2e1b764b0c5ef89f81c86cad16f7c556ce9e7d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:1f:a4:ea:0b:ee:14:b3:7f:ce:b1:18:65:
94:32:db:c7:ed:19:47:e6:b8:bb:08:7b:cc:ec:46:
ea:8c:c5:da:f6:4e:88:10:26:2e:51:30:44:03:41:
23:a0:3b:30:42:84:41:bf:3e:47:cb:ff:b2:f4:98:
73:19:8c:b3:f9:d1:b5:c6:56:34:8f:25:63:f2:f9:
0a:27:9d:2b:99:7f:fe:3c:04:35:be:6e:3b:fc:10:
17:39:66:cd:b7:d4:76:ea:94:c3:6d:c9:b7:4e:2b:
ba:cb:fc:a3:f8:04:f5:76:06:5c:d3:43:3d:a9:ec:
47:0e:d4:17:81:0e:e0:36:c7:ed:15:1f:57:6b:8a:
64:88:71:78:87:2c:95:bd:02:63:8b:48:b6:5c:cc:
b3:53:db:4b:05:5e:b4:05:04:38:f1:45:8a:34:63:
1a:68:37:0d:1a:53:bc:08:64:bc:63:c1:b2:14:8b:
ef:68:b0:5e:bb:14:4e:5f:90:3d:e2:2e:04:10:e6:
a6:fe:cd:de:01:a6:48:6a:67:ce:51:ab:14:60:b4:
f6:d7:ff:b5:e5:2f:e4:73:4f:f5:9c:1e:2f:0d:35:
3f:76:5f:88:6c:49:f3:6b:aa:e1:fc:53:6d:b3:24:
57:c9:51:00:32:2c:23:a6:d4:c3:97:7e:31:9b:e8:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1B:76:4B:0C:5E:F8:9F:81:C8:6C:AD:16:F7:C5:56:CE:9E:7D:4F
X509v3 Authority Key Identifier:
keyid:8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:98:17:26:c1:40:48:0b:d3:40:f0:28:88:c7:29:3a:a5:a7:
1e:91:44:91:65:de:18:30:7f:34:9e:97:73:41:e3:4e:1b:c1:
0a:17:7e:22:4a:6a:6d:64:15:81:b0:2a:ad:f4:61:ef:e6:f9:
33:e4:ce:c0:7c:aa:18:30:79:7b:aa:46:14:b8:a5:26:ae:c2:
25:d5:3a:45:0a:5d:50:2a:04:47:21:b5:43:e6:fb:5c:e9:86:
65:49:c3:27:8c:69:d8:b5:86:c4:78:b0:de:81:1c:cb:29:bb:
d4:ea:29:22:df:12:56:9a:dc:6d:49:41:f4:d0:00:2c:f9:cf:
30:d2:41:35:55:6e:e1:b5:32:02:52:93:be:6b:16:9a:8e:50:
ff:5b:e6:ca:83:4e:49:4d:ab:f2:c0:e8:af:5a:e9:d1:bb:4c:
4f:cf:36:bf:b4:c1:38:4e:c8:59:57:4d:8c:d4:63:92:de:9d:
54:03:58:72:74:06:0a:cb:74:e1:9e:90:0f:c5:53:f2:79:c2:
18:ff:d1:b0:0b:11:b6:5c:0e:9f:b5:3c:f5:49:e8:7d:eb:aa:
3f:69:62:96:93:aa:60:8e:53:a8:d6:31:3c:1d:4a:08:91:50:
b0:6b:df:0b:66:08:d5:79:30:bf:46:03:65:8b:2a:ef:d6:f8:
17:7c:a0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:32:25 2025 by rpki-client