Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
File: jnfGrkiMOml4A3t3CqUjyyUcn_o.mft (raw, json)
Hash identifier: 2+JfPjnAJlOQSze/5UFks6ZJIZDEVWjnLjOwouZ/cZs=
Subject key identifier: DA:6D:70:5D:2D:2C:72:5B:E7:32:01:49:E2:3F:56:91:F6:93:8B:E1
Authority key identifier: 8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
Certificate issuer: /CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Certificate serial: 01964FA33E9BA22083C8E96A9B64FCC7720B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
Manifest number: 102F
Signing time: Sat 19 Apr 2025 20:00:20 +0000
Manifest this update: Sat 19 Apr 2025 20:00:20 +0000
Manifest next update: Sun 20 Apr 2025 20:00:20 +0000
Files and hashes: 1: jnfGrkiMOml4A3t3CqUjyyUcn_o.crl (hash: JlT1kO4OUN767R6VnsSqwjU05LdLad+5bB463T/IzGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:3e:9b:a2:20:83:c8:e9:6a:9b:64:fc:c7:72:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Validity
Not Before: Apr 19 20:00:20 2025 GMT
Not After : Apr 20 20:00:20 2025 GMT
Subject: CN=da6d705d2d2c725be7320149e23f5691f6938be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:07:e2:2d:12:bc:6d:f3:21:4f:8d:3f:a1:
33:54:bc:37:34:a4:ba:6d:52:a4:25:ca:b1:f5:fe:
d2:08:85:3a:84:97:79:ff:f0:18:f3:1e:bb:49:d7:
55:36:bd:ef:88:f8:bb:48:18:fa:50:29:2d:15:64:
36:b4:4f:ad:80:26:7c:e5:b9:bf:fe:a9:c2:c4:3b:
77:65:79:6d:ec:1c:b2:9f:dc:b8:9c:91:09:fb:46:
2e:24:ab:d9:ee:f9:ea:f4:e2:8b:49:68:63:33:9c:
8c:59:fe:bd:68:d8:ad:a8:e3:a6:a8:4a:f8:95:8e:
a8:ff:8d:14:a0:80:aa:1a:5d:9b:16:34:21:37:12:
66:c8:ce:92:db:28:cf:91:52:b3:c2:67:31:02:4d:
37:04:6a:b2:7d:ed:90:13:50:c6:86:9a:e4:38:a2:
e3:7f:6e:0c:45:4d:50:f8:36:46:a5:7d:15:21:17:
8a:90:b1:fe:4e:29:12:04:22:76:9b:4f:30:07:e4:
89:f2:9a:f8:d6:23:ce:05:7c:01:99:68:9e:28:23:
89:79:aa:2d:12:c1:d8:e0:f6:c3:8a:46:5e:76:cb:
59:e6:de:dd:eb:6c:f0:bd:61:ba:69:05:83:ee:0b:
48:8e:32:f5:4a:b2:07:fe:c5:42:b4:dc:f7:62:19:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6D:70:5D:2D:2C:72:5B:E7:32:01:49:E2:3F:56:91:F6:93:8B:E1
X509v3 Authority Key Identifier:
keyid:8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b2:e5:18:0b:bd:4e:08:52:35:df:f2:31:5f:29:31:91:cf:
c7:b9:82:50:ac:ba:f7:8d:eb:55:cd:a5:3f:27:54:11:c1:84:
83:00:46:33:a2:b4:30:1a:d8:c3:95:9e:b6:39:0e:6b:a6:15:
32:02:5c:4a:57:16:59:49:7e:02:cb:58:ee:f3:1d:e0:b1:d4:
44:9f:ad:bc:df:e7:85:fa:90:e3:21:de:a8:0b:2b:df:66:c1:
59:b3:ba:5b:1a:df:a8:bb:5c:fd:39:60:aa:74:37:4f:de:3a:
1f:c8:7c:98:99:cc:02:94:98:85:c9:8c:08:88:8b:e7:0d:62:
08:df:cb:5d:03:46:48:9e:22:cc:0e:90:27:6d:8e:34:c9:12:
54:eb:2e:05:62:01:6f:72:2d:d2:34:c5:df:87:44:8d:ae:ec:
79:a2:90:02:97:15:db:be:c5:24:45:7b:f6:30:af:60:85:97:
44:60:dc:0b:80:fa:a1:b8:94:ca:a5:3d:6e:03:1f:4c:f8:70:
d1:62:4e:15:22:1c:2e:bf:68:c8:c5:3a:d7:45:c1:d8:22:ad:
fd:d4:ab:59:fc:61:62:9d:5c:2a:02:95:fa:0a:46:d2:b6:51:
07:32:d2:3f:e4:89:a8:db:11:ed:49:08:b7:81:bb:1c:01:1a:
9e:21:b7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:48 2025 by rpki-client