Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
File: K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft (raw, json)
Hash identifier: d2j0DASVFwOOk20qaMra3f61gKOQCAsDovon7lulJO0=
Subject key identifier: 4A:77:34:28:AA:A0:D0:C1:3B:07:CC:A7:3B:83:82:6C:F0:22:19:39
Authority key identifier: 2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
Certificate issuer: /CN=2b4989fe3caca3f30443c54a902f6912110d9195
Certificate serial: 01964A469A6EB9FB3BAC410BC49D9AAD57FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
Manifest number: 0721
Signing time: Fri 18 Apr 2025 19:01:03 +0000
Manifest this update: Fri 18 Apr 2025 19:01:03 +0000
Manifest next update: Sat 19 Apr 2025 19:01:03 +0000
Files and hashes: 1: K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl (hash: BCOgplwFTzOlXHXnuXlwE6QZHCPHmkxn/smGWDmnd1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:9a:6e:b9:fb:3b:ac:41:0b:c4:9d:9a:ad:57:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4989fe3caca3f30443c54a902f6912110d9195
Validity
Not Before: Apr 18 19:01:03 2025 GMT
Not After : Apr 19 19:01:03 2025 GMT
Subject: CN=4a773428aaa0d0c13b07cca73b83826cf0221939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:4a:0f:c1:a4:0b:92:0f:1c:22:b7:42:05:
06:6b:0a:6e:06:f3:db:4e:91:c0:e5:78:42:12:88:
f3:4c:9e:f7:11:d0:b2:d7:5b:c8:15:66:24:31:01:
ef:41:e3:e5:0d:fe:cf:85:16:ea:d6:9c:92:4d:a6:
99:07:b2:4a:cc:72:45:62:54:57:68:67:fd:07:e7:
ef:2a:9c:2c:a6:c1:72:f9:c0:cf:ba:f0:16:37:f9:
30:70:c6:5b:c5:94:4a:5b:f5:68:9e:90:d5:82:5f:
4e:7e:20:f2:1a:b2:55:e5:bd:e2:30:f1:41:94:93:
b7:04:c5:da:b1:c7:24:44:89:7b:af:62:d9:08:fa:
09:40:8c:05:45:3d:d5:b8:25:b8:a2:a5:c7:e0:7f:
26:03:35:99:d4:b3:67:42:ac:0d:e2:90:54:00:e5:
62:b8:47:ed:c9:41:d5:6c:fc:93:58:7d:e2:d3:de:
2d:f7:8d:c0:2c:06:82:9a:da:3c:51:eb:1c:78:83:
e4:26:ff:b5:07:ae:7f:d8:4c:b4:61:04:90:85:7c:
dd:ba:4f:73:a1:6e:a8:f6:59:17:f7:2e:b7:6e:3c:
c9:c5:f4:09:eb:2b:2d:96:1a:cd:b4:34:d9:86:8b:
17:ac:b7:58:46:66:c0:b8:86:27:96:3f:1f:4b:f0:
de:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:77:34:28:AA:A0:D0:C1:3B:07:CC:A7:3B:83:82:6C:F0:22:19:39
X509v3 Authority Key Identifier:
keyid:2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a5:1a:2d:cc:f5:3e:5b:12:1f:19:be:be:96:d9:eb:16:89:
97:eb:e3:fa:24:10:f1:88:f8:de:9a:fa:72:f5:d1:cb:48:42:
ed:c1:70:7c:2e:ed:67:fd:8f:af:72:df:c5:54:cb:41:0a:1b:
c3:71:58:5c:10:23:8f:9f:1f:33:26:07:84:e8:df:f9:3b:33:
42:a0:17:05:b1:98:6c:6c:a8:8a:11:a4:07:7a:8f:a7:17:67:
48:3a:e0:1d:48:ab:90:d3:b1:81:03:09:3c:a8:05:70:a7:f9:
8b:64:3d:bf:11:d6:6e:02:e7:84:d5:77:0b:42:0f:31:63:ee:
6c:5e:b4:0a:0e:26:f1:8e:20:b3:f7:22:83:10:75:1d:6e:b4:
a2:52:ea:79:38:85:fe:f5:91:dc:ce:5d:30:2b:7e:97:fb:4a:
85:75:75:bf:f1:45:47:b7:1a:d7:cd:e9:27:0b:60:42:79:1d:
b9:f4:e9:58:ff:a2:23:77:5a:14:fb:c8:ac:0e:fa:69:b2:3f:
89:9c:11:21:9f:1b:df:0b:49:c7:df:d8:97:27:4a:9c:35:fa:
44:1b:fb:f7:e4:24:1e:eb:47:35:8f:3e:55:c5:ca:4e:99:07:
7c:dd:a1:c9:f2:23:dc:93:40:fb:f5:03:bc:59:67:1d:aa:a2:
8d:7c:33:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:13:00 2025 by rpki-client