Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
File: j39d3CK0NKz6QNZ-5QsEKQxw27M.mft (raw, json)
Hash identifier: wc6IlvvU+bwDTFIo6jww/NuDCmtaPFbvhZ7hJqdQCuY=
Subject key identifier: F9:7B:37:85:09:AF:DB:3B:0C:24:8C:87:AB:34:C0:1E:7C:5C:AA:A0
Authority key identifier: 8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3
Certificate issuer: /CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3
Certificate serial: 019510C7C1FD33406B8715620B532BC355F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
Manifest number: 05EC
Signing time: Sun 16 Feb 2025 22:01:21 +0000
Manifest this update: Sun 16 Feb 2025 22:01:21 +0000
Manifest next update: Mon 17 Feb 2025 22:01:21 +0000
Files and hashes: 1: j39d3CK0NKz6QNZ-5QsEKQxw27M.crl (hash: gMoUobO8IvzvB6Z7J+KBfl4MmFYffZuSidvWMk1q+lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:c1:fd:33:40:6b:87:15:62:0b:53:2b:c3:55:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3
Validity
Not Before: Feb 16 22:01:21 2025 GMT
Not After : Feb 17 22:01:21 2025 GMT
Subject: CN=f97b378509afdb3b0c248c87ab34c01e7c5caaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:4b:69:ec:d3:e2:86:55:2f:40:d6:6d:3c:
41:5f:84:3b:03:2a:25:8e:95:40:6b:11:cf:fc:e0:
9f:67:69:04:d0:90:c7:bd:9e:9b:14:2a:67:84:60:
2b:8a:5b:df:42:d5:d8:0c:1b:be:43:41:24:e0:18:
2b:2b:a4:f9:a4:ee:68:bc:08:39:c3:de:29:cd:b2:
2b:a1:f1:57:5d:17:c6:fb:f2:6e:85:49:24:73:f2:
83:b4:4a:54:18:84:e9:b1:33:30:5d:5c:48:e0:82:
dd:5f:53:a4:15:3b:35:11:a5:70:e8:b2:0b:e3:60:
1d:88:0a:3a:6f:fb:2a:85:f8:c2:c3:48:cf:f2:e8:
8d:bc:6e:35:1e:ec:41:a7:20:ac:33:82:ad:e2:d7:
6c:49:4a:41:20:22:03:46:ad:48:30:28:fe:09:b0:
27:79:0e:1b:69:73:0b:4e:f0:2b:e7:c1:96:13:01:
c0:ab:5c:2e:74:2d:60:24:e2:0d:71:e3:49:48:49:
78:ed:2e:16:b8:4a:7b:5e:17:3e:47:92:4d:d6:55:
a4:d0:b3:dd:88:e4:22:c4:4d:4b:70:25:66:79:f4:
b0:e9:95:8e:f4:af:60:2f:19:a0:47:6a:51:bb:6e:
af:b0:50:00:2e:18:2e:03:c4:5f:63:5d:56:2b:e6:
25:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7B:37:85:09:AF:DB:3B:0C:24:8C:87:AB:34:C0:1E:7C:5C:AA:A0
X509v3 Authority Key Identifier:
keyid:8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:68:64:dd:6e:4b:ae:5f:dd:96:77:85:b7:2e:94:e7:7d:d0:
9b:a9:05:ed:56:9a:6f:d3:eb:10:42:4a:01:44:98:4c:f2:9a:
0f:fb:9f:1d:48:19:37:38:71:ef:7b:af:c5:fe:07:64:68:92:
dd:51:dd:8b:16:a5:87:b8:cc:38:6d:57:1c:e0:79:41:56:88:
99:84:20:54:99:98:a7:87:85:84:1a:c2:7f:60:86:5a:6e:79:
9c:51:70:a6:8b:3c:ee:1d:90:20:51:09:17:ea:d0:c4:d6:8c:
6d:b8:14:14:3f:0b:9c:9f:be:c2:e7:e7:6e:cb:30:60:55:d5:
ab:b5:cc:97:04:f0:b2:a4:94:f0:3c:6f:d6:3e:37:80:dc:ef:
a3:a0:9c:84:fb:f9:f9:d3:9d:f8:f8:ed:96:65:f1:16:d4:31:
44:e7:b8:a8:54:4e:cc:fb:bc:93:3c:8c:85:8e:38:7a:19:9d:
bf:bd:ae:46:9d:c3:2b:c6:ce:4c:05:e9:64:1d:24:d3:ed:d3:
25:97:c7:8a:ec:ba:c1:a7:4e:6d:13:1e:42:a2:6d:68:2d:94:
a7:f8:c9:c9:c4:f4:e9:1a:1b:e9:e4:52:d1:eb:7c:1c:3a:3d:
de:c0:24:81:99:9c:76:9e:a3:48:57:f8:4f:37:cc:d5:46:5c:
04:3c:38:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:36 2025 by rpki-client