Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: BvYfMSxfyG1IMzpIYYoN2srgxqDE2WLi8x6xmlJJ08w=
Subject key identifier: 0A:8C:BC:4E:2B:C2:7F:E1:FC:5D:20:62:8B:45:8B:9B:A2:2F:F7:3E
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 01965B03517F38001DA4F10CA4509EE04B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 14FE
Signing time: Tue 22 Apr 2025 01:01:06 +0000
Manifest this update: Tue 22 Apr 2025 01:01:06 +0000
Manifest next update: Wed 23 Apr 2025 01:01:06 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: wO+JxZX535L6A+HtoSumylvkFFJQuZn9QgAJM8mmUHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:51:7f:38:00:1d:a4:f1:0c:a4:50:9e:e0:4b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: Apr 22 01:01:06 2025 GMT
Not After : Apr 23 01:01:06 2025 GMT
Subject: CN=0a8cbc4e2bc27fe1fc5d20628b458b9ba22ff73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:37:29:5c:95:77:34:1e:01:d7:cd:67:a8:89:
ad:bc:6f:98:02:a4:65:de:d3:a1:54:d6:45:26:e2:
a9:35:05:3d:17:36:a2:5d:d8:18:bc:68:a6:8a:8d:
bb:49:d9:a3:b3:6d:34:37:14:4e:cc:2c:4b:94:c7:
10:45:41:f6:c6:10:dc:03:92:43:cc:34:96:17:4a:
0e:14:fb:78:07:ff:42:ca:eb:5f:0d:3a:12:4a:5d:
11:be:c9:06:6a:45:e7:5f:8d:29:92:b4:4c:a3:0b:
42:be:28:49:89:2b:b4:92:42:b7:95:02:86:ff:fe:
77:1a:21:08:5b:9a:c2:8a:f6:05:f8:be:67:2d:1a:
60:ed:04:13:de:ee:12:17:23:c2:ae:e3:3e:d4:16:
f6:5c:e3:e4:6e:d3:68:26:c8:7f:73:76:2c:3c:1e:
00:f6:5c:02:82:3a:d8:76:cf:77:c4:80:07:53:03:
d3:d0:d5:76:8d:05:c1:be:06:17:ce:67:42:69:f4:
18:9e:4d:9e:b9:76:eb:a1:ab:24:03:0b:02:9d:99:
7a:fd:15:8d:1e:18:f1:30:ea:b6:cf:93:64:02:d0:
3e:51:1f:53:76:65:b5:b0:b8:54:8f:76:9a:96:f7:
8a:30:88:78:51:c0:6c:b1:c6:5c:0d:3a:48:d0:b7:
7d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8C:BC:4E:2B:C2:7F:E1:FC:5D:20:62:8B:45:8B:9B:A2:2F:F7:3E
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c9:0a:c0:22:41:91:6d:8b:c7:e6:1c:fb:fc:73:ce:be:1a:
79:1e:c2:34:1f:e6:01:f6:f2:92:7a:ce:45:83:84:f7:fa:6d:
b5:8f:0d:6f:af:28:57:98:a0:77:0c:af:bf:14:8e:84:c8:17:
c2:55:a6:7d:4b:61:62:e8:04:4a:12:60:43:13:e9:5b:f8:c7:
2d:45:b3:ce:9c:39:fc:57:fb:61:30:08:a4:26:3e:95:1f:84:
63:65:d8:65:fa:c1:db:ec:43:8d:56:2f:32:0b:69:3c:59:91:
44:76:96:3e:12:0c:44:69:4e:02:5b:58:78:f6:3e:33:e9:0e:
06:2a:64:89:d9:42:a9:98:ab:c6:ad:75:54:3c:16:9b:a0:e1:
8c:0a:ec:91:74:22:da:6b:3b:31:4d:fe:2b:63:2a:47:45:16:
2c:1b:ce:36:11:c4:78:94:15:ce:78:c2:87:74:75:e1:61:72:
e3:06:6f:52:c6:cb:a8:d6:31:f7:01:2f:fc:ed:4b:29:9a:d1:
f7:25:cb:dd:1e:87:c5:cd:f2:33:e4:15:c8:60:55:81:3d:ba:
56:a4:1b:5b:31:93:b0:fa:5a:41:59:16:98:00:30:1a:99:0d:
93:3b:8c:8f:c5:0d:b2:10:f2:f9:1f:f4:80:c8:7a:04:2a:de:
a1:0b:fe:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbA1F/OAAdpPEMpFCe4EssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDI2YWRiNDRmNTRiMDk5MmM3NTNlYjE3YmFiZTgxMmIw
NzQ4NjMwHhcNMjUwNDIyMDEwMTA2WhcNMjUwNDIzMDEwMTA2WjAzMTEwLwYDVQQD
EygwYThjYmM0ZTJiYzI3ZmUxZmM1ZDIwNjI4YjQ1OGI5YmEyMmZmNzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zcpXJV3NB4B181nqImtvG+YAqRl
3tOhVNZFJuKpNQU9FzaiXdgYvGimio27Sdmjs200NxROzCxLlMcQRUH2xhDcA5JD
zDSWF0oOFPt4B/9CyutfDToSSl0RvskGakXnX40pkrRMowtCvihJiSu0kkK3lQKG
//53GiEIW5rCivYF+L5nLRpg7QQT3u4SFyPCruM+1Bb2XOPkbtNoJsh/c3YsPB4A
9lwCgjrYds93xIAHUwPT0NV2jQXBvgYXzmdCafQYnk2euXbroaskAwsCnZl6/RWN
HhjxMOq2z5NkAtA+UR9TdmW1sLhUj3aalveKMIh4UcBsscZcDTpI0Ld9vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqMvE4rwn/h/F0gYotFi5uiL/c+MB8GA1UdIwQY
MBaAFAjSattE9UsJksdT6xe6voErB0hjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMt
Y2NlNDlhOTMxYzllLzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hY2U4ZGQtZDNhOC00MmYwLWEzYzMtY2NlNDlhOTMxYzll
LzEvQ05KcTIwVDFTd21TeDFQckY3cS1nU3NIU0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjskKwCJB
kW2Lx+Yc+/xzzr4aeR7CNB/mAfbyknrORYOE9/pttY8Nb68oV5igdwyvvxSOhMgX
wlWmfUthYugEShJgQxPpW/jHLUWzzpw5/Ff7YTAIpCY+lR+EY2XYZfrB2+xDjVYv
MgtpPFmRRHaWPhIMRGlOAltYePY+M+kOBipkidlCqZirxq11VDwWm6DhjArskXQi
2ms7MU3+K2MqR0UWLBvONhHEeJQVznjCh3R14WFy4wZvUsbLqNYx9wEv/O1LKZrR
9yXL3R6Hxc3yM+QVyGBVgT26VqQbWzGTsPpaQVkWmAAwGpkNkzuMj8UNshDy+R/0
gMh6BCreoQv+wA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:26 2025 by rpki-client