Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
File: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft (raw, json)
Hash identifier: ib4k/Bg5L/5snn6rXX8m2CsayhRM79OH9hyPG693jSg=
Subject key identifier: FB:28:91:25:2F:A5:AC:71:8C:55:5D:80:C8:11:8C:B2:71:2E:D0:8D
Authority key identifier: 25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
Certificate issuer: /CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Certificate serial: 0195903D2DBEA6DBCE798973E18C70FA0CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
Manifest number: 07DE
Signing time: Thu 13 Mar 2025 16:01:23 +0000
Manifest this update: Thu 13 Mar 2025 16:01:23 +0000
Manifest next update: Fri 14 Mar 2025 16:01:23 +0000
Files and hashes: 1: JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl (hash: f689FJEnFcRho+vfnsSPzvq2w+Ys9jOga3OCPuQ9sEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:2d:be:a6:db:ce:79:89:73:e1:8c:70:fa:0c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25443e3e03a67f946e63b225f43c914bb9325ccb
Validity
Not Before: Mar 13 16:01:23 2025 GMT
Not After : Mar 14 16:01:23 2025 GMT
Subject: CN=fb2891252fa5ac718c555d80c8118cb2712ed08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:09:a7:bf:7c:b1:92:ab:d8:61:00:4b:29:
6a:b9:d3:c1:00:d0:a8:f3:b8:d5:30:8d:ff:15:f3:
a9:b9:c4:f7:9b:91:28:2e:b8:5f:9c:cf:c1:63:bf:
75:1d:21:e3:55:06:e9:24:a7:3b:78:fa:a9:4e:37:
8a:ea:02:bd:6f:33:8f:03:de:98:01:b1:ba:8d:93:
cc:ea:17:a2:93:3a:06:44:d4:11:fd:ec:4d:cc:24:
c6:42:bd:5d:6d:52:07:97:22:3c:69:d6:51:5c:e1:
3f:09:9c:c9:70:8b:aa:36:9c:30:49:08:1c:9e:fc:
dc:0c:f8:49:d6:97:54:ef:0a:12:5a:ba:f2:0a:12:
44:d5:2b:3b:01:28:d9:57:83:c6:3a:30:98:42:17:
d8:04:3e:44:d9:5f:0e:2b:d5:61:f5:58:0b:10:40:
26:fb:80:af:b0:76:bf:fd:df:85:f5:eb:30:01:05:
40:14:2d:ec:f8:80:80:a3:cd:6f:f4:47:5a:16:52:
b0:34:4e:7e:d1:8a:4a:41:ed:af:5d:ea:12:da:58:
95:ec:c3:a6:fd:af:a1:0a:74:2e:ed:52:9b:5e:c4:
0e:f5:86:81:4b:71:ad:8b:f5:c0:52:21:33:ef:f3:
17:e6:6a:6e:9c:a7:6e:c5:4f:85:03:f2:39:1f:ff:
9c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:28:91:25:2F:A5:AC:71:8C:55:5D:80:C8:11:8C:B2:71:2E:D0:8D
X509v3 Authority Key Identifier:
keyid:25:44:3E:3E:03:A6:7F:94:6E:63:B2:25:F4:3C:91:4B:B9:32:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf70fd-86dc-4d5c-af7e-62a6e2866fc3/1/JUQ-PgOmf5RuY7Il9DyRS7kyXMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3e:55:28:2f:26:50:83:fd:bb:c3:92:e7:56:a7:1c:58:a5:
66:a2:92:1e:10:6c:28:29:21:9f:0b:9a:34:7b:e3:b7:bb:3f:
88:7b:26:ab:54:46:2a:5f:fc:66:56:11:27:a0:c1:a8:d6:ae:
40:4f:bf:3c:42:9e:c1:54:84:41:e2:ed:02:02:49:6b:06:c5:
18:cf:65:18:6d:a7:f7:a9:1b:97:80:60:62:39:51:ec:59:a0:
76:d8:82:64:2d:73:88:a7:97:e5:f1:22:bc:53:cc:8e:35:64:
78:0c:5e:29:2d:25:91:a2:92:34:71:c5:15:77:b0:f7:b3:f3:
23:bf:ba:c4:98:09:41:39:4b:ba:8a:46:fd:1d:98:c7:77:0a:
be:3a:57:c5:75:ce:83:55:85:3e:c0:80:f4:d0:df:73:02:17:
41:b5:8f:38:8b:4f:aa:84:8b:74:c9:9b:00:0b:3d:da:5a:30:
6c:7c:82:45:67:2b:a0:12:a6:c2:0c:72:a8:b4:9a:0f:c6:5d:
7a:9c:45:1a:33:01:57:f3:84:15:5a:c7:44:4d:bf:a8:b5:a2:
91:42:73:5e:4c:c7:ed:31:13:d7:3b:c2:14:e1:0e:c5:f2:75:
02:8b:34:47:fe:50:ed:a5:64:50:e9:9e:36:bf:a9:96:46:e3:
2c:f6:94:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:35 2025 by rpki-client