Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
File: JOmh8SqE1TJSY3_4XW646xY2OT4.mft (raw, json)
Hash identifier: zgekVPesg+EdJdIKsl1N2JNRt3AEoGOEnysqYIhYpEk=
Subject key identifier: 72:66:24:0E:9B:3F:8E:60:18:C4:BC:34:A7:63:00:C5:2D:3A:14:F4
Authority key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
Certificate issuer: /CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Certificate serial: 019653B6FE95A6E7047AE39A56041C45FB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 15:00:23 +0000
Manifest this update: Sun 20 Apr 2025 15:00:23 +0000
Manifest next update: Mon 21 Apr 2025 15:00:23 +0000
Files and hashes: 1: JOmh8SqE1TJSY3_4XW646xY2OT4.crl (hash: EyWUPYAvBx5ui/pq5EAC1pjKTa1bQbFBFqLP20c2m9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:fe:95:a6:e7:04:7a:e3:9a:56:04:1c:45:fb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Validity
Not Before: Apr 20 15:00:23 2025 GMT
Not After : Apr 21 15:00:23 2025 GMT
Subject: CN=7266240e9b3f8e6018c4bc34a76300c52d3a14f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:51:6e:5c:b5:23:f1:58:6f:3d:ac:47:94:
94:3a:9d:8d:74:21:01:ed:90:b2:7d:88:92:04:86:
23:72:07:38:27:72:4e:ee:9f:83:d6:27:36:e7:10:
61:0d:0e:c3:a6:d2:6d:eb:00:74:5f:1b:1e:8d:a0:
5b:cd:59:64:8f:5b:35:29:06:4f:17:7c:52:3e:28:
b8:af:7d:ec:0e:14:92:3d:08:35:a4:b6:ce:f2:b3:
df:56:13:1a:37:a9:eb:97:d2:c0:26:28:b5:bc:a2:
c8:68:92:dd:41:9e:cd:b4:a0:92:21:88:52:2d:83:
cb:21:9b:98:e9:df:2a:a6:4c:4a:48:07:98:f0:fd:
6a:bb:28:e2:ed:29:5d:0c:8e:23:a2:30:79:a0:2e:
34:77:58:78:ec:ad:dd:c5:c6:f5:b1:83:df:28:61:
bf:b4:f2:ce:fd:02:d9:02:c9:38:54:f9:3b:30:d9:
02:3f:2d:e2:c5:f4:31:c4:9a:f1:ba:b1:38:d8:b9:
1f:10:54:8a:a1:9e:b9:f2:c7:7e:48:d4:75:22:77:
65:2f:72:c1:ef:da:36:17:3d:9f:4f:97:60:e2:05:
bd:d8:9c:29:e1:9e:1c:48:8a:db:d5:bc:f5:3a:7f:
b1:39:9b:93:35:e6:e2:53:b4:f3:60:5e:97:b2:4f:
9c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:66:24:0E:9B:3F:8E:60:18:C4:BC:34:A7:63:00:C5:2D:3A:14:F4
X509v3 Authority Key Identifier:
keyid:24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:84:dc:f6:b5:97:fc:3b:88:46:db:2a:74:ef:a9:de:b7:1a:
d4:11:7a:db:9a:97:93:23:1d:f7:6d:dc:d2:7b:ea:7f:38:a5:
49:87:d3:78:93:30:86:42:fd:cf:42:1b:8e:8f:7c:6c:ed:83:
9d:b2:db:17:f5:16:d8:c8:6a:e1:c6:1a:59:79:94:3c:ba:78:
fb:83:90:d6:db:a1:f3:4f:27:27:88:14:4a:fc:0b:cb:39:9f:
f5:49:56:53:7a:89:df:36:01:e8:a7:69:61:97:45:e6:58:2b:
50:69:5e:37:da:7d:72:47:0d:94:3f:82:a4:65:73:18:c8:39:
86:8b:63:13:05:80:30:e8:0b:de:05:fc:06:0a:fe:85:73:5c:
c3:8f:75:96:fe:dc:6b:d6:b0:50:17:0f:43:3d:14:dd:bf:01:
d7:7a:69:91:ff:6a:9a:23:9d:29:f1:11:c1:0b:67:cb:e9:2d:
c5:20:1a:34:ea:ac:41:04:3b:e2:c5:dd:f5:30:f4:79:d8:f9:
dd:3d:93:c5:51:87:55:f9:5e:68:12:ee:63:e1:aa:f4:fa:18:
8b:35:27:ec:c6:78:56:b6:61:0e:1a:52:98:1b:60:2a:fd:c1:
ff:28:81:0e:89:09:f1:6a:89:b2:fa:10:99:4a:f6:fe:44:6d:
33:38:16:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:27:57 2025 by rpki-client