Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
File: jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft (raw, json)
Hash identifier: O48W+fOxlDW1HM+FmlInplucgwFVd4xIgmTTyPWX0xE=
Subject key identifier: 00:BC:4F:82:43:C8:59:50:9E:9F:2F:E4:97:3A:24:93:E7:8D:6B:46
Authority key identifier: 8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
Certificate issuer: /CN=8cda93a702f03d6034b02c4637212a743a472c8a
Certificate serial: 0196447B7D7A1839870182997C25595F5D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
Manifest number: 14F1
Signing time: Thu 17 Apr 2025 16:01:05 +0000
Manifest this update: Thu 17 Apr 2025 16:01:05 +0000
Manifest next update: Fri 18 Apr 2025 16:01:05 +0000
Files and hashes: 1: jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl (hash: Jaj4fUhIoFaFB8U6Dox5tHUC8wsgIT56F3lf9FY6E+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:7d:7a:18:39:87:01:82:99:7c:25:59:5f:5d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cda93a702f03d6034b02c4637212a743a472c8a
Validity
Not Before: Apr 17 16:01:05 2025 GMT
Not After : Apr 18 16:01:05 2025 GMT
Subject: CN=00bc4f8243c859509e9f2fe4973a2493e78d6b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:8f:e1:3b:78:9b:9a:76:bd:cc:ad:94:d1:
6d:2d:f3:0d:20:e1:b1:80:a5:3b:ed:da:b2:b1:60:
4b:d5:46:a4:b6:b6:32:1b:86:9a:e2:ee:a6:ab:e8:
57:bd:86:1d:14:21:f3:65:34:ba:4b:28:4e:07:43:
32:d2:ee:e7:70:f9:34:83:2c:b0:ae:06:08:9e:d4:
74:c9:d2:17:8f:37:cc:1b:d0:0d:94:76:1c:c9:a3:
d4:db:4e:49:c7:c3:d5:9d:e9:85:83:19:16:61:a0:
66:1d:35:4e:0d:bd:8b:ef:7b:29:05:da:81:5d:19:
25:71:dc:db:31:25:56:01:f8:d1:9f:16:17:ac:7c:
6e:6a:ee:ff:c6:7e:42:7a:04:7d:bb:35:2a:35:2c:
25:88:ab:e9:58:1b:a9:07:98:b8:5b:57:a7:aa:2a:
ea:57:55:dc:d3:42:8e:65:f8:ab:14:c0:1f:bf:e0:
32:6c:c5:0d:cf:f8:cd:f1:de:5e:c2:c6:8f:5f:e2:
52:6b:0b:8b:2c:a4:a4:81:13:8a:d0:1b:39:ce:50:
d4:c0:9e:96:75:ce:9a:f6:c8:57:98:2e:df:58:fe:
34:30:3b:77:a6:ee:a5:92:b1:53:e4:8e:6e:38:cc:
b4:9e:ed:cb:ec:81:11:d2:f0:74:92:70:a5:12:6f:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BC:4F:82:43:C8:59:50:9E:9F:2F:E4:97:3A:24:93:E7:8D:6B:46
X509v3 Authority Key Identifier:
keyid:8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:8f:71:07:39:bb:03:c5:e9:32:5a:04:ad:37:22:9f:bb:e0:
a8:a4:3b:bf:ed:65:00:d1:6e:cc:ef:16:79:13:73:f2:7a:5b:
6b:47:8f:b9:75:62:66:62:3c:29:50:51:43:e7:bc:c2:74:10:
3a:86:e1:2a:fc:f6:d1:7b:c0:4e:24:94:4d:46:39:d9:a3:fb:
92:bb:a3:6d:9b:19:1a:e3:47:23:78:d7:18:87:91:b5:b6:ba:
0d:7a:6d:b7:c7:6d:49:ff:c6:29:8c:3f:55:ef:1f:52:ee:d5:
04:62:4e:b3:f0:a8:8c:93:30:a6:ce:12:db:cd:c0:1e:29:a9:
6e:c4:20:09:33:c7:9d:27:0c:91:b6:aa:9c:20:03:f1:29:5b:
64:e5:d0:a3:15:d9:bf:92:ae:5b:94:88:b7:78:44:57:49:81:
e5:73:00:52:1f:54:03:2d:4f:43:f2:bf:31:b9:9d:9c:8d:95:
c8:9a:02:c0:1d:e7:78:c5:ca:a3:a0:c1:8e:64:ee:7d:5d:94:
f9:7d:a1:3c:37:88:0d:3b:24:1a:8c:f3:3a:1a:2a:7d:99:fe:
43:dd:bb:74:4d:c3:c8:06:56:bc:84:ac:8d:6d:d5:a2:0a:45:
28:17:24:84:c9:03:93:f0:a6:3c:27:bb:21:79:22:ab:e9:4b:
08:3c:10:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:35:31 2025 by rpki-client