Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
File: JCSASgJ3cDnEz9jADcKfqR2KOQw.mft (raw, json)
Hash identifier: Gc7Fa4NQr+/E9Nr0kZd0bf8BzyDdWrcX8eX0xho0cJ8=
Subject key identifier: 31:61:E3:F3:F1:7F:22:BF:2A:F7:2C:80:F1:36:98:E4:2C:2C:94:80
Authority key identifier: 24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
Certificate issuer: /CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Certificate serial: 019655DC9D6FC330F18679645412E729FBE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
Manifest number: 013B
Signing time: Mon 21 Apr 2025 01:00:43 +0000
Manifest this update: Mon 21 Apr 2025 01:00:43 +0000
Manifest next update: Tue 22 Apr 2025 01:00:43 +0000
Files and hashes: 1: JCSASgJ3cDnEz9jADcKfqR2KOQw.crl (hash: KbwMVLdjWP2rr8I73QZFHp4pRwFoQf68wZBKUAq2WoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:9d:6f:c3:30:f1:86:79:64:54:12:e7:29:fb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Validity
Not Before: Apr 21 01:00:43 2025 GMT
Not After : Apr 22 01:00:43 2025 GMT
Subject: CN=3161e3f3f17f22bf2af72c80f13698e42c2c9480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:73:3b:37:b3:d6:79:2b:21:4a:22:31:3d:a5:
03:fa:f5:97:ba:59:82:0d:44:ab:08:5d:b9:21:f9:
f1:62:66:a1:79:26:4a:a5:13:be:95:56:87:c6:7b:
44:f7:63:fb:96:07:0a:b5:5e:4e:54:b1:be:41:66:
2c:c3:77:22:50:bb:4d:42:18:fc:ca:f6:f3:34:55:
7b:84:5c:74:f1:8a:02:b0:b5:2d:a1:de:71:29:0e:
9e:bf:f2:68:1f:c6:e4:4c:c9:06:b5:38:55:1f:83:
43:54:b1:a6:7a:65:33:60:83:be:62:66:b7:de:08:
19:11:21:4d:96:0c:ef:21:e9:04:e0:b5:ba:1f:91:
8b:f1:61:b4:c4:df:8f:1b:c2:41:91:60:27:1b:21:
ef:5f:8d:d8:4f:f6:03:ae:7c:c0:ca:97:3b:53:aa:
15:ce:65:e6:fa:68:e0:cc:f2:61:de:e2:ae:73:23:
90:fb:01:71:0e:d9:7b:a5:24:e0:da:e4:21:e6:94:
14:08:dd:5f:0e:ba:c5:41:f9:56:e9:4b:0d:80:59:
92:1a:6f:e8:f6:09:60:67:f7:ea:89:67:b4:1c:71:
67:49:95:2e:6d:12:62:99:ce:2b:03:a5:55:de:f8:
82:62:0c:23:f5:21:41:a0:d6:4c:a0:f8:f6:c1:16:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:61:E3:F3:F1:7F:22:BF:2A:F7:2C:80:F1:36:98:E4:2C:2C:94:80
X509v3 Authority Key Identifier:
keyid:24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:46:6c:61:c1:f4:cf:7c:93:f1:0a:0c:74:7e:ed:a3:e0:10:
de:57:31:32:d6:c3:85:11:a5:0d:80:c1:a1:7e:98:4f:e5:16:
c0:cd:fd:15:76:59:de:0c:13:c7:fe:6e:4b:0e:9d:ff:33:46:
11:0d:c6:1b:4a:dd:11:ef:23:17:52:25:26:ee:b7:a7:dd:89:
c2:27:99:b5:b4:dd:0d:8b:d3:ee:0b:6d:4d:91:44:fc:5b:f2:
88:bd:fe:96:e1:40:5d:a4:26:c6:5b:2a:2c:ac:19:c0:40:63:
74:3b:93:bc:1a:38:da:c2:1a:84:8a:06:ab:5f:91:3c:19:83:
6c:0d:d0:9d:7a:71:59:43:95:c0:13:55:42:3c:e5:a4:3b:6a:
7e:f6:82:94:87:65:93:6a:85:52:6b:5e:22:bd:0b:82:de:40:
3b:3e:60:42:7e:95:34:df:b7:e1:b9:bb:00:cf:3f:43:ac:d4:
98:67:a2:6e:0b:e2:fc:68:2d:0b:89:84:a9:f6:1f:04:bd:98:
59:ef:bc:c5:6b:f1:4a:ac:f3:8f:fe:9a:9e:fc:13:8f:68:07:
0d:96:87:d0:3e:34:74:11:70:58:97:5f:54:40:a0:23:e3:ee:
50:0f:53:f0:f6:8c:d5:9b:ee:68:80:1c:54:8c:45:97:b3:cb:
41:1c:2f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:33 2025 by rpki-client