Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
File: 02jCohY2GiT97Jfx838uHRIHEIc.mft (raw, json)
Hash identifier: iOEngdrjKOpwIjjOdk9cWdm9b1VTATqi9YP51xZRPuU=
Subject key identifier: 4A:B5:FD:C6:6D:F8:AC:33:5D:0B:09:FA:31:AE:22:E8:5D:1D:15:71
Authority key identifier: D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
Certificate issuer: /CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Certificate serial: 0196B521F8460CAEFF44F1192B07BB9C9A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
Manifest number: 152C
Signing time: Fri 09 May 2025 13:00:24 +0000
Manifest this update: Fri 09 May 2025 13:00:24 +0000
Manifest next update: Sat 10 May 2025 13:00:24 +0000
Files and hashes: 1: 02jCohY2GiT97Jfx838uHRIHEIc.crl (hash: tgyloN6KC1cyQ6l71NbuxgTcHkAqQyBSQYZOtvk0Jos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:21:f8:46:0c:ae:ff:44:f1:19:2b:07:bb:9c:9a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Validity
Not Before: May 9 13:00:24 2025 GMT
Not After : May 10 13:00:24 2025 GMT
Subject: CN=4ab5fdc66df8ac335d0b09fa31ae22e85d1d1571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:27:cd:15:77:76:fd:4e:4a:af:d8:0a:ff:a5:
26:3e:f5:80:c0:01:e4:2d:06:5a:11:8d:c9:0e:ca:
37:d5:98:82:5b:81:73:28:a3:c3:e9:b2:9e:0e:8f:
c4:11:25:3f:79:21:25:ce:a7:fe:3e:8c:63:63:49:
6c:e9:52:db:63:3c:86:40:7d:86:84:97:5c:a1:48:
5f:fa:6c:f7:c0:d4:f2:7a:bd:54:13:83:af:fb:b5:
cf:50:a2:02:26:67:04:f2:a0:e7:39:8c:01:b3:40:
98:52:ca:24:51:e0:88:06:0f:ba:ce:81:83:d2:9c:
a7:93:f7:e0:b1:73:76:ec:2d:ef:1c:a9:37:16:4a:
e0:39:b0:16:3d:0c:ec:ff:cb:9f:75:b1:9c:21:35:
bf:58:c1:59:c3:fc:95:67:55:aa:2b:25:99:4e:ee:
f8:c3:6f:18:e5:16:95:70:fe:ec:7e:13:37:79:8c:
67:54:22:df:8a:5f:f9:da:17:5d:b9:d9:81:00:82:
d5:bd:1b:1b:b3:c4:57:e4:f1:83:ae:b0:d8:13:aa:
81:79:c0:38:62:1b:59:11:fb:b9:cc:4c:f4:fa:c1:
68:c5:8c:2e:7b:eb:4b:6d:57:9e:cf:8c:2e:dc:95:
83:9b:05:eb:2c:11:f5:a2:44:ef:b9:57:ef:21:10:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B5:FD:C6:6D:F8:AC:33:5D:0B:09:FA:31:AE:22:E8:5D:1D:15:71
X509v3 Authority Key Identifier:
keyid:D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:34:e4:31:63:e1:18:38:f5:fe:6a:b2:ba:33:82:a4:7e:0e:
cb:e9:d8:ea:6f:7a:a4:ca:64:03:a6:84:34:2e:1f:d7:12:75:
73:21:d2:21:81:b3:df:3d:62:13:61:46:27:5e:0e:4f:51:3c:
93:6f:01:c1:ba:70:70:ea:30:a3:13:29:34:79:66:09:92:f0:
5d:57:78:a8:2b:c6:58:e5:15:bc:f3:98:34:19:36:a6:c2:e6:
51:87:57:9f:73:68:73:20:b8:92:36:61:40:7b:b1:50:e9:92:
c1:c0:e8:74:41:79:a0:b5:99:2e:b5:60:df:5c:a9:7b:8f:3f:
a3:73:4a:9c:68:6b:ad:e0:28:a1:40:6d:02:69:25:9b:10:59:
ac:fc:c8:ad:28:a5:bd:e9:59:ae:2a:7b:81:7e:d9:ca:76:9a:
c1:34:9f:a0:d2:9a:67:de:a9:79:58:f0:09:ea:13:27:7b:2a:
41:47:e5:b0:ac:e6:4e:46:b3:64:e0:c6:13:05:62:97:b2:ac:
7e:47:c7:ac:0e:6a:a2:89:d3:9b:95:1a:00:d2:93:3a:98:ba:
2a:96:3b:2c:df:f9:8d:56:74:cc:4d:c8:9e:6a:01:b5:49:51:
be:f6:ce:0e:5b:94:52:4a:65:8b:3e:e7:db:f1:61:90:8a:f6:
bd:41:73:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:21:12 2025 by rpki-client