Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
File: fj-4U_hAs3cM0_pCs_nS-b59G38.mft (raw, json)
Hash identifier: K60rCsduMPsW0Xv59xqyiwR9oePnUSzVwt/H1U3d0mQ=
Subject key identifier: 29:F4:A2:57:65:65:17:00:72:CD:9E:9B:EE:AA:31:7F:1B:E8:5A:5E
Authority key identifier: 7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
Certificate issuer: /CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Certificate serial: 019655379FF95F348B563756E6D102F0FCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
Manifest number: 13B0
Signing time: Sun 20 Apr 2025 22:00:30 +0000
Manifest this update: Sun 20 Apr 2025 22:00:30 +0000
Manifest next update: Mon 21 Apr 2025 22:00:30 +0000
Files and hashes: 1: fj-4U_hAs3cM0_pCs_nS-b59G38.crl (hash: 2JF0jBbJpWVRBYiaLnzOMgZFjiWB4M9vMx5Oe6950Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:9f:f9:5f:34:8b:56:37:56:e6:d1:02:f0:fc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Validity
Not Before: Apr 20 22:00:30 2025 GMT
Not After : Apr 21 22:00:30 2025 GMT
Subject: CN=29f4a2576565170072cd9e9beeaa317f1be85a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:09:7b:df:c3:1f:cd:c5:b7:cc:0c:cb:f1:
c5:14:44:6d:42:5a:33:7d:27:8b:82:39:9f:50:05:
2f:57:ed:b3:63:43:7e:80:ab:80:8a:47:bd:cb:70:
a9:7e:c6:eb:b4:a0:a9:73:59:96:bb:4f:c2:51:b9:
d9:ff:9a:19:72:41:a8:15:09:2f:c6:02:30:94:46:
7f:30:34:56:4b:c4:66:15:03:d0:2f:ef:7c:ba:5f:
fb:1a:bf:d5:2e:74:a6:69:c4:6e:0c:8f:b9:e8:70:
88:93:bc:d8:a9:70:64:4f:db:53:ba:56:97:94:76:
8f:42:67:6a:ac:af:d0:39:38:91:2c:57:1b:b0:59:
49:5f:bb:03:47:1c:49:db:8b:2b:88:c5:ca:1d:f0:
a1:da:88:b1:e4:5e:f0:a9:b1:d1:24:35:1e:59:16:
36:9a:de:cd:91:64:da:b2:55:69:d6:55:9e:17:e2:
f7:3a:2a:93:a2:72:d3:8e:c2:9a:c6:55:6b:a4:f0:
cc:02:31:0d:50:46:8f:9d:ee:c8:02:24:f3:bf:6d:
7a:15:f2:07:16:8c:8a:bd:cb:e4:2f:3b:cd:87:a5:
f7:8f:b0:a9:96:62:d7:cc:8a:75:8d:e3:8d:c6:11:
39:82:c8:4f:20:d2:1d:95:bf:4c:f0:57:38:f2:b1:
12:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F4:A2:57:65:65:17:00:72:CD:9E:9B:EE:AA:31:7F:1B:E8:5A:5E
X509v3 Authority Key Identifier:
keyid:7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:90:71:d2:57:a6:8d:9e:52:af:55:1f:ca:e5:c8:68:bb:20:
5f:5d:05:ae:6d:ef:8d:03:b5:31:d3:04:5e:fd:87:fa:eb:94:
bb:31:32:20:9a:a9:11:9c:6e:67:f3:b4:dc:4d:94:18:4b:78:
3d:e0:97:4a:cd:e2:a5:f6:cf:5b:00:5b:1f:74:71:77:bc:71:
b1:76:ec:a3:2b:9a:cc:70:51:a1:de:22:fb:dd:fe:a4:7a:89:
6b:1a:cb:f9:4c:25:f1:54:80:a3:44:e0:84:49:14:21:fd:fa:
60:af:31:4c:a7:bf:2a:80:e5:de:75:23:5f:a4:5d:36:76:c9:
20:f2:ed:0f:5b:40:84:db:0c:3a:72:84:c4:7c:38:d6:45:b6:
ec:e4:7e:b1:cb:73:30:2c:07:ce:0a:d0:42:2c:ea:1d:29:0d:
d7:e9:f8:25:a4:be:54:8c:e5:88:81:23:a2:61:32:4d:32:be:
ec:81:48:65:fc:cf:9b:4d:7e:1b:08:f5:a4:83:46:9f:18:2a:
3e:72:cd:0b:4b:46:e7:7d:3d:48:f5:66:09:76:00:53:18:1a:
37:9e:41:d3:9f:ff:53:d2:bc:98:29:1d:30:2b:4f:23:ed:37:
70:a4:e6:80:00:11:95:d6:36:ae:ef:25:ef:12:8d:aa:ab:f3:
cc:31:a9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:27:57 2025 by rpki-client