Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
File: 2JkZ-1GnBREdaZbuww_8RC3pei8.mft (raw, json)
Hash identifier: DoBPJ80GGwzKVtIVRMq446BWYTEO3Zrowj4zNRetzzM=
Subject key identifier: 5D:26:1F:24:76:0D:17:36:39:F6:D2:82:FA:04:F5:78:06:D7:55:8C
Authority key identifier: D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
Certificate issuer: /CN=d89919fb51a705111d6996eec30ffc442de97a2f
Certificate serial: 019654933F07FA9CB4D42C8F374CB55137A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 19:00:58 +0000
Manifest this update: Sun 20 Apr 2025 19:00:58 +0000
Manifest next update: Mon 21 Apr 2025 19:00:58 +0000
Files and hashes: 1: 2JkZ-1GnBREdaZbuww_8RC3pei8.crl (hash: DvReMDUsETDeAmk6uadtlYgiOGBQLOgp3XoT+otCo+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:3f:07:fa:9c:b4:d4:2c:8f:37:4c:b5:51:37:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89919fb51a705111d6996eec30ffc442de97a2f
Validity
Not Before: Apr 20 19:00:58 2025 GMT
Not After : Apr 21 19:00:58 2025 GMT
Subject: CN=5d261f24760d173639f6d282fa04f57806d7558c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:73:c9:ab:f0:21:09:d7:89:be:30:4e:c3:ec:
9f:2a:ae:e6:26:96:80:e5:3f:4e:39:33:bc:a4:91:
64:b5:eb:b4:4a:80:3c:56:2d:2c:c3:cc:c9:07:11:
25:8e:b8:e0:26:ef:5b:da:dd:f0:2c:9d:07:d2:87:
db:31:ac:df:ae:f5:f7:65:32:35:c0:5e:09:aa:0f:
d3:4f:0c:67:4b:8a:2f:d4:18:32:5a:7d:a8:1e:38:
cc:8e:d3:f1:71:f9:6d:04:48:76:15:5d:97:94:38:
61:c1:7c:4a:44:a7:6c:62:5a:12:e0:a8:de:88:53:
55:53:1b:f0:ef:ae:23:20:21:49:25:99:fb:7c:0b:
5b:bd:8e:70:7e:92:6d:c1:04:78:71:03:ae:ff:6e:
98:e8:32:0a:b4:60:28:52:4a:8f:b6:5b:14:5d:61:
c3:18:b6:58:3e:f4:bb:bc:c5:5b:8e:81:80:69:13:
2d:7c:46:02:25:51:91:67:3f:80:e3:d6:fd:e4:82:
ce:fc:b6:96:81:f3:b5:c0:bf:0c:56:cc:48:f1:0e:
8b:ca:69:63:27:75:16:83:42:8e:5d:b9:75:8f:bb:
31:2f:6f:59:0c:68:a0:9e:d1:a7:30:58:90:09:46:
6c:36:68:e8:a1:38:07:01:7b:05:90:7c:25:88:68:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:26:1F:24:76:0D:17:36:39:F6:D2:82:FA:04:F5:78:06:D7:55:8C
X509v3 Authority Key Identifier:
keyid:D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:8b:6b:44:62:b2:fe:64:3c:f3:57:fe:28:e7:91:ba:47:ca:
e2:5b:80:22:fc:bd:3e:b2:41:55:13:3f:73:95:ff:fb:97:46:
88:06:1e:6d:f7:55:a8:d3:cd:74:e0:9a:c8:81:25:14:42:9d:
31:93:cd:aa:9c:17:b2:d8:f4:32:c7:a7:86:a2:b1:90:0b:2a:
78:43:05:52:c8:22:07:5b:23:03:e9:64:43:af:40:80:95:6b:
67:d4:65:ac:cf:bb:31:08:a7:b9:6f:1d:59:5d:94:19:d3:bc:
3b:70:cd:fe:ec:43:06:e5:65:40:3f:82:4c:39:17:c2:a5:0c:
11:b1:01:90:59:78:4d:93:23:08:53:67:05:e4:c9:0c:ef:68:
cd:71:0e:17:32:21:cc:04:ba:c6:a4:b3:e8:e8:89:72:56:fc:
dd:6d:32:d0:7f:bf:62:93:82:64:6c:ba:89:41:e8:81:09:27:
f2:0f:21:96:d6:80:f8:f1:62:ad:9d:0e:09:c0:26:d0:ca:5c:
d4:a9:22:aa:85:22:27:fd:8d:1e:c7:e2:68:cb:ca:a8:16:35:
2a:44:f4:49:6a:57:17:8e:3a:d4:bd:38:6f:d8:ee:33:83:2d:
71:04:be:5d:ec:42:65:a3:b4:14:cc:36:9f:9e:9e:c8:7e:02:
fb:79:5d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:20 2025 by rpki-client