Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
File: JUYEmZh5H-hXcDE7pmDEElGSmAs.mft (raw, json)
Hash identifier: zGN06oRRbl3tLBr6YOxbYTYblVh8uiICKG9bgSF8AGg=
Subject key identifier: 1F:BD:B0:FB:52:41:F3:F6:D8:0F:B3:49:3B:DB:4C:C9:D6:3F:3E:EF
Authority key identifier: 25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
Certificate issuer: /CN=2546049998791fe85770313ba660c4125192980b
Certificate serial: 019511A251F67C700B2DE1252C11FF7DA33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
Manifest number: 1282
Signing time: Mon 17 Feb 2025 02:00:05 +0000
Manifest this update: Mon 17 Feb 2025 02:00:05 +0000
Manifest next update: Tue 18 Feb 2025 02:00:05 +0000
Files and hashes: 1: JUYEmZh5H-hXcDE7pmDEElGSmAs.crl (hash: HrxDIGDHKZ6qHddzZFAbdj2WONk3w5sYIw9/Jam3DUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:51:f6:7c:70:0b:2d:e1:25:2c:11:ff:7d:a3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2546049998791fe85770313ba660c4125192980b
Validity
Not Before: Feb 17 02:00:05 2025 GMT
Not After : Feb 18 02:00:05 2025 GMT
Subject: CN=1fbdb0fb5241f3f6d80fb3493bdb4cc9d63f3eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:f2:c8:f5:67:9f:a8:09:c6:ee:96:46:b1:
0f:d8:fa:7f:30:01:fa:a5:cf:43:c1:e8:05:11:80:
72:be:93:7d:0a:ba:b6:22:9b:58:27:db:87:01:58:
a0:25:03:e4:6f:ff:0b:7b:c2:65:40:b7:cd:6f:a6:
6c:d3:6a:86:08:b2:07:95:9c:ff:13:3b:5d:1c:8c:
27:b1:0c:8e:5a:03:6a:d2:31:bb:b2:f2:2d:82:bb:
8b:31:d4:5c:8f:80:39:dc:7e:e5:db:85:e7:9f:96:
79:6d:81:ab:2c:b3:71:0d:e2:d1:09:85:98:bd:a0:
fd:02:61:c1:04:4d:7b:41:73:5a:f0:b0:7c:04:6b:
b1:c0:93:13:16:57:ef:3e:e6:f6:d6:ff:33:70:14:
f0:12:98:5c:28:a5:fe:9a:e4:bb:e6:eb:7c:d9:dd:
3c:dd:20:b3:b3:d1:12:58:58:d8:d0:80:04:e5:ec:
0e:52:8d:ab:4d:52:35:0a:c0:65:ae:e8:cf:fa:a6:
3c:08:1d:2b:0b:82:ba:cf:ed:cb:64:07:8a:45:b7:
96:b2:4a:9e:cc:70:83:29:87:9d:c9:47:e9:b0:fa:
2f:8b:55:e3:93:00:f3:e4:9c:d4:94:8c:db:c4:81:
1d:28:79:c3:89:de:26:7e:c8:6e:71:34:ac:2c:9b:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BD:B0:FB:52:41:F3:F6:D8:0F:B3:49:3B:DB:4C:C9:D6:3F:3E:EF
X509v3 Authority Key Identifier:
keyid:25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a0:b1:b0:b4:90:35:46:87:94:fd:da:17:49:87:1b:dc:32:
d3:f7:af:5d:08:d4:6c:36:42:a8:0c:f8:c1:ef:c4:82:1c:c7:
3c:ed:26:54:13:d1:aa:c0:bf:53:52:fa:3f:1f:f5:b4:1e:ee:
3c:dd:cc:52:82:b0:a1:58:c1:f2:87:ed:97:be:71:80:2c:96:
8d:f1:6b:91:d0:3f:53:0f:89:0a:65:b7:e9:0b:11:13:8d:4a:
ba:82:fd:0a:96:c2:4a:b1:9f:7b:f8:2d:f1:6f:13:1c:bf:b8:
40:75:56:88:85:9c:4d:e6:fa:ad:ee:46:89:4c:33:e3:5e:44:
4f:d3:1a:22:a2:84:3e:2b:24:8b:5f:87:04:9d:aa:08:46:2d:
f9:f6:cd:57:fc:f1:ec:c9:3c:4e:2d:a2:85:a6:a3:c4:06:e8:
4b:25:c5:52:79:fb:da:96:93:17:6d:bc:a4:50:6a:f1:ff:3b:
83:df:8f:ad:a8:51:3a:22:f6:91:7e:c9:06:b8:37:31:84:90:
fa:a8:e1:a6:09:b6:96:2d:e6:f4:cf:14:19:b5:25:b9:31:ed:
50:51:4d:80:a5:a9:e7:68:4c:ce:56:d7:08:79:61:51:6a:f2:
39:59:58:e1:39:1d:91:2c:10:bd:1c:49:56:b9:bf:2d:7c:19:
12:43:35:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:58 2025 by rpki-client