Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
File: JK_wO1q_sXhyXKbpD149mMumjr8.mft (raw, json)
Hash identifier: rr7Eu/LKGrZl/JyeyX7GOOwsEToJQAjX3uWrzUg1zXI=
Subject key identifier: 8E:5F:5C:A5:D7:B7:2C:66:08:77:A7:99:18:3B:EA:E5:08:59:4C:9D
Authority key identifier: 24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF
Certificate issuer: /CN=24aff03b5abfb178725ca6e90f5e3d98cba68ebf
Certificate serial: 0196564A56A551B8921D981F8C4D6D87399B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
Manifest number: 0601
Signing time: Mon 21 Apr 2025 03:00:34 +0000
Manifest this update: Mon 21 Apr 2025 03:00:34 +0000
Manifest next update: Tue 22 Apr 2025 03:00:34 +0000
Files and hashes: 1: JK_wO1q_sXhyXKbpD149mMumjr8.crl (hash: JADmkGaW6rC+RM1x6Z2QheZpMu4UIjEg2nwiSfgBOH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:56:a5:51:b8:92:1d:98:1f:8c:4d:6d:87:39:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24aff03b5abfb178725ca6e90f5e3d98cba68ebf
Validity
Not Before: Apr 21 03:00:34 2025 GMT
Not After : Apr 22 03:00:34 2025 GMT
Subject: CN=8e5f5ca5d7b72c660877a799183beae508594c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:cf:59:dd:0d:c8:a1:63:0c:8b:cb:65:d9:
85:62:c7:c0:7e:1c:bc:16:7b:fa:e6:03:17:89:45:
bf:2f:2d:85:35:80:6d:9a:ab:05:2e:fe:d9:bb:e8:
fd:6a:7e:42:4c:aa:fc:0c:44:ea:95:2b:af:d9:eb:
1d:b9:81:4d:51:bc:29:cc:ad:ef:12:3d:5d:d4:22:
2a:1b:65:0e:97:e1:90:8d:da:37:c4:d4:29:1e:c3:
75:0a:db:0c:ab:fe:b9:84:1b:65:36:58:de:12:20:
c1:3b:28:21:1b:21:8d:e8:da:fa:bd:32:af:83:b4:
0a:26:6c:ed:a1:26:3c:c1:6e:a8:44:fc:eb:c4:be:
bc:16:90:43:2b:48:3e:bd:40:0d:e1:2f:bf:14:74:
91:cd:a0:8b:31:07:ca:db:ee:a0:a9:76:40:c8:f9:
39:f4:88:0b:1c:0b:50:c7:8c:e3:90:0d:8d:c1:fd:
ac:42:18:30:fd:d8:6f:cc:17:8f:66:cb:c4:9d:7d:
22:cd:9b:88:23:bc:7e:f6:e9:23:8c:a3:cc:e4:22:
2d:5d:b4:8f:3e:e5:57:6e:24:9d:9c:58:ce:d0:2d:
53:f8:d8:90:4d:53:9f:ea:6a:a6:56:d3:10:68:96:
d4:16:b6:27:ea:70:4f:36:23:5f:5f:39:04:6c:73:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5F:5C:A5:D7:B7:2C:66:08:77:A7:99:18:3B:EA:E5:08:59:4C:9D
X509v3 Authority Key Identifier:
keyid:24:AF:F0:3B:5A:BF:B1:78:72:5C:A6:E9:0F:5E:3D:98:CB:A6:8E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_wO1q_sXhyXKbpD149mMumjr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab8137-3753-4eca-a94e-8c2130a35016/1/JK_wO1q_sXhyXKbpD149mMumjr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fc:ca:db:74:62:f4:6c:cb:ad:d1:f4:51:0b:a4:70:fe:37:
b8:c9:53:ad:4b:f5:14:5c:b0:0d:7b:25:3c:eb:f8:cf:15:ff:
bf:49:d8:ed:23:9e:c7:f3:99:30:3c:e3:e3:f7:08:2a:98:fe:
70:76:b5:d1:b4:92:4f:59:01:f6:26:76:7f:46:40:cb:28:70:
a8:43:da:d9:14:72:d0:06:46:c1:33:01:f0:5f:ee:d7:d9:01:
4c:73:9d:5e:1e:8c:f9:a6:c8:12:60:c3:57:3a:81:34:ef:ee:
f6:42:11:f8:c4:e1:dc:98:7b:ac:99:23:c1:80:74:1e:8a:42:
ec:67:fc:66:ca:12:7f:81:f3:9d:9e:7e:8d:c0:b1:72:dc:c0:
84:be:09:e8:11:0a:ba:1c:49:9f:6f:74:68:7a:d9:ed:b1:60:
b5:48:b0:5e:52:97:b1:36:61:4a:46:a8:c8:2f:c9:8f:6e:66:
4c:11:a8:9d:cb:b7:aa:b3:e3:4c:44:38:b1:c1:5b:58:a4:30:
af:34:d9:3e:6c:97:bb:0b:8f:5c:d4:e7:87:41:ab:b7:d9:08:
80:7a:1b:94:df:81:0f:c0:45:c7:5b:79:5b:99:08:a6:4f:8f:
d1:c7:fb:fb:35:77:b6:80:97:fb:ff:f7:b3:9a:36:a2:6b:39:
13:3c:f2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:51:26 2025 by rpki-client