Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: q0XWlLItiw4UoOafywPchWmJWIDh9g+RhL1j8fO8ufk=
Subject key identifier: 4D:CA:58:EB:34:15:F3:96:66:65:99:A7:19:56:BC:C8:F2:22:13:BA
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 01951134D0F42D9B4755F4F69F02B0D5B15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0906
Signing time: Mon 17 Feb 2025 00:00:28 +0000
Manifest this update: Mon 17 Feb 2025 00:00:28 +0000
Manifest next update: Tue 18 Feb 2025 00:00:28 +0000
Files and hashes: 1: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: whJM2HGVj7CJBcDjZccBGxZ5PZNGRjGqAGtxto8HeM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:d0:f4:2d:9b:47:55:f4:f6:9f:02:b0:d5:b1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Feb 17 00:00:28 2025 GMT
Not After : Feb 18 00:00:28 2025 GMT
Subject: CN=4dca58eb3415f396666599a71956bcc8f22213ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:5f:df:45:dd:ff:8c:28:f4:3d:a0:0c:84:
5e:d0:69:ba:84:7f:78:d2:f2:d2:52:c2:ec:1b:06:
de:33:ea:c1:36:f8:4b:3e:9c:cb:48:92:e3:4c:4e:
d4:83:f8:b8:8a:b7:89:01:3a:a4:29:66:c5:47:5a:
ab:06:8a:07:23:2b:cd:a3:62:8b:8c:55:e3:51:71:
1b:bb:8a:11:4a:fe:01:2b:a8:38:47:73:27:fd:f7:
23:b6:83:98:c3:14:86:ab:bc:15:d2:e2:ed:20:56:
c3:53:a5:58:02:e4:0d:89:8b:1b:8f:da:52:7a:5c:
9e:07:12:89:44:6a:ce:60:da:f6:d8:ea:8f:ee:19:
1c:9f:82:de:b9:02:62:c8:56:82:08:ea:58:51:3b:
4b:31:04:ac:53:5d:4e:b6:8b:ab:8a:99:78:16:9d:
36:a0:f5:67:15:0c:8c:e1:d8:3f:e8:f6:17:2f:5f:
aa:da:3f:3d:a7:7a:92:13:24:54:6c:47:b8:2d:78:
bc:d4:23:bd:4a:a9:7a:df:26:0a:88:a0:8b:9d:b8:
6a:f6:61:c5:e1:02:fc:26:42:b3:1d:b4:02:57:e5:
9b:51:cd:e2:76:b1:81:59:a1:72:50:fd:2d:7b:3e:
27:ce:5b:2f:6d:01:b0:ee:17:e8:b7:da:e6:f2:66:
1c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CA:58:EB:34:15:F3:96:66:65:99:A7:19:56:BC:C8:F2:22:13:BA
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ae:0c:d8:c3:d7:1f:4e:0c:32:ce:10:42:d5:14:a5:da:e5:
63:31:93:95:76:1c:32:76:c5:99:d1:8e:7a:79:02:fb:f8:29:
fd:59:0f:d4:36:7e:f2:3e:2c:a9:bf:7e:4e:34:f4:3b:10:bb:
7c:0d:6e:77:9e:f0:0e:af:6b:da:cb:01:6f:cb:1e:8b:50:d9:
73:17:db:e1:b1:d4:a0:c1:2a:65:cd:5e:46:c7:3c:22:91:eb:
39:a1:09:4f:1c:bf:93:03:30:92:31:ba:d8:b6:c3:d3:c9:98:
7d:8c:aa:27:57:cd:60:40:e2:c4:0a:c5:b2:fb:57:3b:bf:b2:
58:a8:b8:78:98:e1:13:9a:29:92:b2:a5:50:ff:f1:18:6c:56:
71:e8:38:2c:cd:e4:68:8a:d0:f7:61:12:61:29:63:1b:72:15:
c1:47:a1:a3:3f:67:7b:de:65:c1:55:a4:b9:b4:64:27:73:6d:
b7:8d:eb:a4:70:aa:f9:cd:89:bb:a9:a5:d7:09:14:18:64:d6:
6d:50:4c:ce:02:dc:8e:74:75:ec:bb:30:3d:81:0b:b5:e1:24:
bc:b7:82:46:c0:c3:e3:1b:7c:79:19:7d:88:1b:54:fa:81:de:
f7:30:e5:9e:d4:5c:c7:17:ff:15:69:52:c9:81:e8:e2:0e:0c:
f6:30:80:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:16 2025 by rpki-client