Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
File: jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft (raw, json)
Hash identifier: yltLHPDU0ue46XB2cg+/SMrO2GNtK+lHdvgRfqwn5xA=
Subject key identifier: 61:06:55:B6:61:2D:D2:8A:38:8B:D2:EA:AD:49:23:A0:02:2C:B0:D4
Authority key identifier: 8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
Certificate issuer: /CN=8c5002f639e81958d0f9b3585aed76707d2625de
Certificate serial: 0196B710C36A4BBF8FDC7CCEDE748836C00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
Manifest number: 152C
Signing time: Fri 09 May 2025 22:00:51 +0000
Manifest this update: Fri 09 May 2025 22:00:51 +0000
Manifest next update: Sat 10 May 2025 22:00:51 +0000
Files and hashes: 1: jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl (hash: cTxdkOOhhPPM7e3a+bWKS6k155PCfJkhBriafv4myEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:c3:6a:4b:bf:8f:dc:7c:ce:de:74:88:36:c0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c5002f639e81958d0f9b3585aed76707d2625de
Validity
Not Before: May 9 22:00:51 2025 GMT
Not After : May 10 22:00:51 2025 GMT
Subject: CN=610655b6612dd28a388bd2eaad4923a0022cb0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:29:b2:a7:39:29:76:03:f8:bb:18:1b:2b:
c8:f8:d9:9a:60:45:3f:62:5b:8c:2f:f9:cb:cf:0e:
ed:af:c2:9c:5b:b1:d7:bc:bb:f8:e2:d2:69:12:2a:
1e:43:cf:b6:b4:cb:da:c1:22:a1:24:7a:68:3d:99:
e5:af:2c:c4:f2:a8:59:49:ac:0b:c8:76:91:50:9f:
16:69:87:fc:96:8c:b8:dd:2d:6d:b8:66:a4:1c:24:
cb:6a:14:58:c2:4f:8d:06:5b:8d:f2:4b:69:62:e7:
7b:e4:c7:98:90:60:6b:92:40:3f:84:16:8c:ae:69:
fd:c6:d8:43:62:be:95:48:ee:0d:d6:b6:04:a9:40:
00:73:07:7b:c3:bf:5d:e5:55:00:ea:6e:61:c5:32:
cf:9d:01:bc:db:49:e1:b3:ed:68:30:ca:af:8e:ed:
21:7a:b6:3f:3a:08:3f:62:61:9e:cd:09:9c:14:15:
68:7d:9c:1c:45:e3:19:11:0b:aa:17:a5:01:00:21:
3b:ce:58:84:44:f4:a8:95:b0:2b:83:9f:e5:6d:0a:
49:ec:bd:62:a3:3f:95:d9:0b:5c:5c:1b:6e:1d:a7:
df:76:a7:1c:90:8a:51:9b:90:74:bd:2f:4a:87:c9:
67:ba:59:66:8e:f2:5b:f2:0b:b7:4e:88:ab:29:18:
47:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:06:55:B6:61:2D:D2:8A:38:8B:D2:EA:AD:49:23:A0:02:2C:B0:D4
X509v3 Authority Key Identifier:
keyid:8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e8:1e:30:f9:07:ed:b1:76:a5:22:89:e2:0b:89:0d:eb:4b:
f8:f0:51:7e:a9:23:53:9c:ea:62:9d:1c:0f:52:f3:5e:41:4f:
3b:28:cc:f8:a2:d2:4f:50:4b:b4:4d:17:ed:e7:a8:f7:c1:5b:
73:ee:1f:8b:ac:08:d0:0a:8d:ca:2b:f8:10:02:5f:86:d6:b6:
52:33:eb:7d:af:f4:f7:99:ad:6c:03:72:ce:82:34:2b:b8:0e:
86:85:10:40:89:c1:4f:28:e7:04:47:16:03:09:e0:dc:8b:28:
0b:7a:88:31:c5:fb:cc:4b:5d:11:71:25:1d:17:d1:22:72:75:
27:17:92:c0:1e:32:33:2d:bf:25:8e:60:6a:b3:77:96:fa:ec:
00:a3:28:1e:bb:95:4b:5b:5a:7d:17:dc:5e:5e:f9:51:3b:42:
1e:97:35:f7:a8:5a:57:bf:30:b4:92:3d:a0:69:1c:12:e8:b8:
c7:51:9f:b1:f1:7d:e6:8e:17:25:12:d6:42:cb:96:2a:2d:5d:
61:24:02:c5:ac:57:c4:97:92:12:6e:15:29:65:76:9e:47:d4:
e8:1a:38:ea:f8:d0:51:48:f0:00:59:99:aa:40:e4:e9:3a:13:
d2:89:db:5f:cf:a2:5d:36:77:4b:74:b7:71:a2:2e:51:a4:0b:
8e:be:7f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:24:41 2025 by rpki-client