Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
File: JKtnE2v5kKqL6IV6aNLDmezWKZo.mft (raw, json)
Hash identifier: z0QGx2Bw8/GI5+01ezJ5tTZpfDw53goAzxxHUpH0exI=
Subject key identifier: 91:9C:D0:6F:1B:07:45:AC:34:A4:58:93:E1:DC:E0:81:00:4A:17:62
Authority key identifier: 24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
Certificate issuer: /CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Certificate serial: 0194C3F628009D382F04F97DDAE3E1F505F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
Manifest number: 13BD
Signing time: Sun 02 Feb 2025 00:01:16 +0000
Manifest this update: Sun 02 Feb 2025 00:01:16 +0000
Manifest next update: Mon 03 Feb 2025 00:01:16 +0000
Files and hashes: 1: JKtnE2v5kKqL6IV6aNLDmezWKZo.crl (hash: U27Ba6/tfaTJ7R2MkxloDGxYKu7UWxa9k4yLcM30AAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:28:00:9d:38:2f:04:f9:7d:da:e3:e1:f5:05:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Validity
Not Before: Feb 2 00:01:16 2025 GMT
Not After : Feb 3 00:01:16 2025 GMT
Subject: CN=919cd06f1b0745ac34a45893e1dce081004a1762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:6f:e6:9a:0c:29:70:92:0e:54:f7:cc:9b:
e6:e0:80:2c:f0:74:7c:09:11:4a:2e:7f:bf:b1:f5:
9a:c7:b0:df:ef:21:52:99:c2:fc:b4:fc:d0:73:1c:
9c:13:d0:0a:7b:0d:31:55:dc:a2:17:31:c8:eb:d0:
18:45:e8:73:13:ff:6d:aa:3f:d2:db:46:d8:18:6e:
7d:12:5d:bf:e3:58:4c:08:5d:7e:3c:a9:bd:b8:6b:
bc:0b:36:51:73:04:1a:51:37:45:95:f6:c8:54:2c:
63:e7:b3:02:63:7c:ca:78:71:e2:82:44:ba:cd:da:
ff:aa:06:ff:86:38:ef:6c:db:b5:9a:33:87:c3:53:
f7:41:7e:da:fb:86:fb:1e:97:1c:f1:84:d6:ed:28:
09:b3:01:4a:c4:9f:07:bc:a0:49:b7:37:69:7f:29:
08:35:71:93:9a:c1:ef:9d:40:95:75:62:e0:8d:d1:
1b:46:d8:60:07:f2:ca:54:4d:65:89:56:8c:fb:1a:
b2:60:f4:59:00:2e:db:5a:60:ed:33:c7:5a:01:63:
e4:0f:ea:22:af:03:78:ea:d3:d3:a6:72:19:e5:8c:
8c:23:52:8c:c1:c3:66:15:24:68:1f:69:31:b7:d0:
3d:35:3f:7a:47:0d:de:f6:3c:c4:2c:a9:a9:fa:91:
41:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9C:D0:6F:1B:07:45:AC:34:A4:58:93:E1:DC:E0:81:00:4A:17:62
X509v3 Authority Key Identifier:
keyid:24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4f:8c:e4:2c:f4:0e:58:9d:18:79:1c:c5:65:4b:b6:6f:04:
d6:05:ca:1b:f7:34:f3:3c:a3:95:08:c4:78:ef:40:d4:51:35:
58:df:36:7d:2f:b3:31:ed:8f:bd:59:a7:ea:58:f2:f9:a3:00:
b1:9e:fa:bd:ec:04:69:87:98:eb:67:6e:15:97:22:8e:1d:37:
25:ae:3a:2a:20:0d:2c:45:3c:28:c6:dc:0a:ff:db:f4:ab:1b:
ad:c5:68:6b:a0:56:81:73:9d:f0:44:e3:c8:f2:d1:c6:c1:07:
8d:c3:74:c3:33:85:62:d6:a7:ce:7e:ff:1b:90:d3:fa:17:89:
eb:26:d8:f6:dc:bf:bc:3a:89:e4:91:3c:ae:ab:4f:13:9e:ba:
d3:17:e9:b5:75:45:3a:ae:f8:ab:57:73:9b:e8:09:1a:90:8d:
cf:85:42:5e:05:8e:e2:8a:3d:91:3a:14:10:70:40:85:f0:e7:
19:d5:f8:f1:12:37:64:16:12:4f:ea:71:ea:28:eb:b9:e6:1e:
a6:da:79:40:d5:82:94:ce:43:f7:f9:6c:a2:52:b1:ab:12:e3:
5d:8b:69:c2:9c:ee:54:97:96:39:d3:f6:92:2f:ac:90:37:cb:
4a:43:98:cc:3a:8f:16:9a:f9:14:40:28:09:4b:3a:00:aa:b6:
3a:06:2d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:29 2025 by rpki-client