Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
File: JkQpgYmVnJWm1KdLdU9JlqWltlw.mft (raw, json)
Hash identifier: H79Zu4YErzaI5w2iDdi5p+VR7KFzhP+OAd+MavqDZR4=
Subject key identifier: 56:E8:94:E8:4E:D0:1F:45:BF:BA:79:6E:D8:6C:9D:4A:61:A0:54:14
Authority key identifier: 26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
Certificate issuer: /CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Certificate serial: 0194C3889B1A1857020F478491527043B5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
Manifest number: 142A
Signing time: Sat 01 Feb 2025 22:01:37 +0000
Manifest this update: Sat 01 Feb 2025 22:01:37 +0000
Manifest next update: Sun 02 Feb 2025 22:01:37 +0000
Files and hashes: 1: JkQpgYmVnJWm1KdLdU9JlqWltlw.crl (hash: MCfF0e31xQFq5TSLB2tSib14bk7Q+U2Mqlkr1Q9snr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:9b:1a:18:57:02:0f:47:84:91:52:70:43:b5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Validity
Not Before: Feb 1 22:01:37 2025 GMT
Not After : Feb 2 22:01:37 2025 GMT
Subject: CN=56e894e84ed01f45bfba796ed86c9d4a61a05414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:81:75:a9:af:16:ca:e1:01:11:12:c3:b8:
38:2d:e8:7a:ce:75:64:56:63:bf:d9:64:21:e3:5f:
9b:85:80:47:86:4f:3e:4a:cb:c0:01:eb:c0:93:91:
a1:e5:50:44:0f:4a:3c:00:ff:3d:75:2d:7c:14:5e:
ef:19:93:19:a2:6a:bb:5b:bf:5c:2e:0c:54:f0:f2:
86:54:f0:d5:9c:67:fb:1d:4f:23:da:52:e7:5f:29:
ce:f5:e1:c7:b0:57:32:32:a0:55:14:d1:5c:27:13:
82:c7:b0:d1:ff:14:a5:01:af:d4:63:c2:11:c8:6f:
d7:4a:78:07:04:08:d6:f6:52:6e:32:4c:60:2d:81:
ba:14:86:98:05:d5:fc:0f:21:2b:25:26:8b:d8:c1:
ee:63:5b:7d:21:48:97:3e:ef:b3:52:af:21:36:06:
dd:be:5a:b2:6a:25:69:00:85:49:4d:e9:e4:de:c2:
14:3c:41:a3:51:1c:a4:98:78:57:34:f2:a5:42:03:
1c:7a:79:a4:6a:e5:3b:d5:10:5f:19:39:66:7a:eb:
d4:6d:39:b0:61:ae:62:6c:87:03:e0:a1:4d:e9:a9:
10:73:f6:f9:9b:25:28:ef:dd:11:94:c6:dc:bd:62:
5f:93:ec:b7:6a:5b:b0:97:7a:2d:92:1e:b3:b9:23:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E8:94:E8:4E:D0:1F:45:BF:BA:79:6E:D8:6C:9D:4A:61:A0:54:14
X509v3 Authority Key Identifier:
keyid:26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:93:fe:33:3b:df:d4:87:28:1f:c4:ae:b4:38:82:38:76:9d:
20:6b:bc:cc:53:f2:de:f3:e9:c3:89:db:ef:1c:9b:26:75:29:
d2:8e:d8:68:57:94:bb:16:fe:d7:98:12:c8:65:a0:4d:c9:b2:
9c:c6:d9:68:3b:17:d9:5b:f3:d6:ad:be:45:b8:05:94:da:e6:
1d:4b:cd:56:36:8f:a5:8e:f8:8a:fa:df:64:d7:36:d9:78:ef:
5d:be:37:ee:c0:4a:be:b3:41:a1:f1:3f:0a:b0:52:8a:e4:a6:
c8:ac:ba:1c:94:3f:81:53:9c:0e:4e:c4:e4:ef:bf:40:77:d3:
90:78:1e:5a:f8:ba:19:2a:fd:b6:dc:cc:8e:96:a9:48:c4:d1:
60:93:2c:02:4f:a8:76:00:a4:5b:04:b7:5b:9d:e8:6a:2a:46:
20:e7:1c:98:80:c3:9c:89:fd:fb:b0:e5:2b:98:1e:4e:4c:ba:
bf:58:47:6d:d0:54:5d:26:b7:89:af:ff:00:6c:ca:0a:b6:18:
4f:55:2e:a7:90:aa:4d:04:4e:07:fa:eb:12:7e:30:ff:18:c4:
60:8b:ef:1a:72:5e:23:64:ba:4b:a1:27:00:9a:87:85:49:a9:
91:52:c0:f3:f5:26:35:6a:56:94:23:bc:6c:99:1d:1d:9d:84:
8a:db:f3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:01 2025 by rpki-client