Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
File: jynNHq0DjoW9nTMswYrDCeBiDFE.mft (raw, json)
Hash identifier: 36GSCzsyf/uSNNHSYsXZ3iyDSnEMOjz6g7ASU/f9G6E=
Subject key identifier: 24:F6:AD:3F:8E:0F:F4:A0:09:92:19:B8:97:0D:D4:2E:B6:DA:A7:12
Authority key identifier: 8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
Certificate issuer: /CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Certificate serial: 01964D7F2D58E8B7BBC82B7E6567C3C30FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
Manifest number: 1364
Signing time: Sat 19 Apr 2025 10:01:42 +0000
Manifest this update: Sat 19 Apr 2025 10:01:42 +0000
Manifest next update: Sun 20 Apr 2025 10:01:42 +0000
Files and hashes: 1: jynNHq0DjoW9nTMswYrDCeBiDFE.crl (hash: 5i6JrEjfdFnN+0AIOeUWLRZFLf8hoWpaSn+vfn5ChpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7f:2d:58:e8:b7:bb:c8:2b:7e:65:67:c3:c3:0f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Validity
Not Before: Apr 19 10:01:42 2025 GMT
Not After : Apr 20 10:01:42 2025 GMT
Subject: CN=24f6ad3f8e0ff4a0099219b8970dd42eb6daa712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:e9:0d:fa:f8:65:00:d6:7c:0a:2f:36:f9:
f1:97:f1:8a:b1:50:91:f9:93:5e:cf:07:2d:9b:fe:
7d:24:fe:27:57:24:fc:fb:97:53:7b:de:f7:66:ef:
0d:cd:f4:d4:8c:21:7e:12:69:3b:13:d0:fa:f4:94:
ae:42:de:bc:f8:65:42:20:b4:06:d2:8e:35:91:f8:
d5:43:af:d3:33:a2:db:68:20:ef:f7:a2:93:eb:f2:
08:bf:bc:b3:1d:e6:3d:9d:fe:ad:dd:1f:a7:02:25:
51:8d:0b:c5:2a:af:c3:0f:e8:44:67:cd:a0:f6:24:
ba:24:56:60:e1:89:4a:23:5d:a8:47:8e:60:c5:ea:
16:3c:95:27:07:59:33:11:e7:e9:4c:52:30:2a:7f:
e9:d8:1f:25:ae:55:2d:3c:52:aa:e0:9b:d2:0d:91:
af:21:72:6f:bd:05:9c:06:05:a5:44:30:69:87:e8:
b4:e7:da:0b:4f:3e:f6:2b:42:92:91:30:1e:a1:a0:
1d:a8:42:c0:c8:f0:28:21:31:dc:ae:95:d3:28:33:
b9:b0:a6:5f:af:ad:bd:99:e2:1d:95:33:d6:ed:6a:
c7:66:08:8f:bb:da:46:70:a3:8b:f4:ee:c8:53:15:
6f:7c:5f:81:a1:e3:4a:df:5a:28:90:79:36:84:3c:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F6:AD:3F:8E:0F:F4:A0:09:92:19:B8:97:0D:D4:2E:B6:DA:A7:12
X509v3 Authority Key Identifier:
keyid:8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ff:ae:08:90:a0:c7:c7:9b:2c:ac:3c:fc:c0:ab:26:8e:7e:
b7:91:b3:59:c6:2e:2a:60:db:64:05:04:09:b1:dd:8f:ec:38:
a9:55:ed:cd:e6:a7:84:56:8b:ea:86:4c:8a:da:1e:9e:97:d3:
f7:d2:ad:97:9c:e3:ab:f0:66:26:13:16:49:3a:f9:54:5c:b2:
5b:de:c7:58:29:84:d0:e4:bc:6a:67:39:3a:d3:5f:a1:cf:16:
0c:81:9e:29:9a:9f:d6:dd:26:21:28:8c:d2:49:a2:2c:04:27:
c2:7a:74:d8:46:f6:2c:f1:c0:73:8b:a6:24:e8:8e:ed:ea:85:
24:be:8d:13:37:2e:f4:06:e3:93:9b:e3:23:8c:51:c6:af:e7:
59:0c:81:37:10:5b:27:9d:69:62:fb:9d:58:78:0a:a9:ad:a9:
7d:a4:8f:4b:6e:7e:e4:b2:7c:1c:f2:dc:e4:b6:c8:ba:53:e5:
ff:aa:73:40:0c:00:f2:f4:53:86:cc:88:92:89:23:12:e7:a1:
49:71:d0:84:ab:a0:a3:ff:a0:e3:fd:9d:04:59:93:78:6b:57:
c2:9c:eb:be:ea:1e:ca:85:a0:e1:7e:42:9c:e4:1b:45:f1:00:
2b:63:c8:48:78:a8:d7:ee:99:31:5e:cb:ce:df:f8:64:73:1d:
7a:a5:9f:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfy1Y6Le7yCt+ZWfDww/CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjljZDFlYWQwMzhlODViZDlkMzMyY2MxOGFjMzA5ZTA2
MjBjNTEwHhcNMjUwNDE5MTAwMTQyWhcNMjUwNDIwMTAwMTQyWjAzMTEwLwYDVQQD
EygyNGY2YWQzZjhlMGZmNGEwMDk5MjE5Yjg5NzBkZDQyZWI2ZGFhNzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf7pDfr4ZQDWfAovNvnxl/GKsVCR
+ZNezwctm/59JP4nVyT8+5dTe973Zu8NzfTUjCF+Emk7E9D69JSuQt68+GVCILQG
0o41kfjVQ6/TM6LbaCDv96KT6/IIv7yzHeY9nf6t3R+nAiVRjQvFKq/DD+hEZ82g
9iS6JFZg4YlKI12oR45gxeoWPJUnB1kzEefpTFIwKn/p2B8lrlUtPFKq4JvSDZGv
IXJvvQWcBgWlRDBph+i059oLTz72K0KSkTAeoaAdqELAyPAoITHcrpXTKDO5sKZf
r629meIdlTPW7WrHZgiPu9pGcKOL9O7IUxVvfF+BoeNK31ookHk2hDys/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCT2rT+OD/SgCZIZuJcN1C622qcSMB8GA1UdIwQY
MBaAFI8pzR6tA46FvZ0zLMGKwwngYgxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC83MGI3MTUtYTRmNy00OGQ0LTljY2Et
NmQwNzU0NmY3YTVhLzEvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC83MGI3MTUtYTRmNy00OGQ0LTljY2EtNmQwNzU0NmY3YTVh
LzEvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAef+uCJCg
x8ebLKw8/MCrJo5+t5GzWcYuKmDbZAUECbHdj+w4qVXtzeanhFaL6oZMitoenpfT
99Ktl5zjq/BmJhMWSTr5VFyyW97HWCmE0OS8amc5OtNfoc8WDIGeKZqf1t0mISiM
0kmiLAQnwnp02Eb2LPHAc4umJOiO7eqFJL6NEzcu9Abjk5vjI4xRxq/nWQyBNxBb
J51pYvudWHgKqa2pfaSPS25+5LJ8HPLc5LbIulPl/6pzQAwA8vRThsyIkokjEueh
SXHQhKugo/+g4/2dBFmTeGtXwpzrvuoeyoWg4X5CnOQbRfEAK2PISHio1+6ZMV7L
zt/4ZHMdeqWf1w==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:51:59 2025 by rpki-client