Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: 53Mhh7P7M4NVSRJ2+rkUVH4vdHcmRBLrc0wYC/BszYM=
Subject key identifier: 67:44:F9:C1:66:D8:6C:3C:A8:16:8D:38:8C:33:14:1E:FD:E7:22:6C
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 01961245BCCB90459D074229E02766B0650D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 14DD
Signing time: Mon 07 Apr 2025 22:01:22 +0000
Manifest this update: Mon 07 Apr 2025 22:01:22 +0000
Manifest next update: Tue 08 Apr 2025 22:01:22 +0000
Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: tpGe3S4gUjZD+OgMsoHHQzwFmVBAy4aFyw4Hi7rslFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:45:bc:cb:90:45:9d:07:42:29:e0:27:66:b0:65:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Apr 7 22:01:22 2025 GMT
Not After : Apr 8 22:01:22 2025 GMT
Subject: CN=6744f9c166d86c3ca8168d388c33141efde7226c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:1f:5f:9e:d2:74:06:34:db:f5:9b:90:5d:
e0:9c:09:bc:ad:a5:e0:e3:59:37:c2:f1:23:c2:27:
51:c9:97:4a:dd:87:22:39:fe:aa:f3:78:9c:6f:21:
2c:33:0e:cb:16:37:4f:c9:90:68:a5:da:ee:f9:e4:
92:73:5d:dd:3f:40:14:1d:d8:44:51:2a:89:8f:61:
35:82:88:6e:79:47:d2:10:29:06:19:17:9b:c1:99:
35:06:ca:7f:d9:f3:e8:11:51:6b:a2:ca:99:ab:7e:
d1:f5:f4:63:44:4c:14:8e:de:f2:3d:69:f9:59:4c:
5a:5d:ab:33:c0:60:7d:7a:ae:81:fa:4d:47:3a:be:
4f:40:10:4f:db:30:9f:32:4b:cb:90:d3:5a:00:5a:
2b:32:ce:a8:52:b6:eb:f2:72:aa:cd:d7:5f:78:4b:
9a:a1:6e:2f:92:7b:95:4e:f6:29:64:4b:48:e9:37:
88:30:23:c1:d2:9d:08:01:f6:df:4c:09:7c:91:3c:
e4:ef:fc:e9:85:d3:ca:35:18:e0:f5:c9:20:64:75:
2a:1f:e0:5a:05:6d:f3:7b:aa:37:07:0f:f4:f8:16:
95:15:75:ff:39:78:7f:89:57:16:97:05:d8:bd:18:
17:2a:19:bf:5d:fe:1b:66:a1:6a:84:c8:58:e3:a2:
7f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:44:F9:C1:66:D8:6C:3C:A8:16:8D:38:8C:33:14:1E:FD:E7:22:6C
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:96:90:e4:1c:16:2f:f9:94:93:a0:b4:84:65:3f:bc:0c:d5:
50:09:dd:29:c8:e0:0c:f4:b2:ae:5a:1e:6a:a9:77:ed:1e:5e:
e6:b6:43:9c:a1:21:7a:29:ca:4b:f0:69:b0:d7:61:da:fb:59:
ae:e1:ce:46:ae:dc:17:80:91:3b:92:5d:dd:e3:df:62:35:ee:
ec:ec:c9:fc:78:87:15:22:2b:96:ed:44:63:d3:92:9a:f3:9d:
fb:7a:76:cb:84:6f:bc:22:5b:7e:2a:41:05:2a:75:e8:c1:72:
b3:51:8a:8e:d2:db:63:72:8c:23:dd:b8:06:5f:aa:92:8e:49:
07:2e:24:ba:d0:b6:ae:bb:1e:48:c6:a3:9d:02:85:f8:7f:a2:
0e:96:11:2a:55:cd:92:9d:4b:5b:29:10:a3:19:1c:59:e9:c1:
56:10:7e:5a:5a:e5:e6:23:6f:a8:d2:f0:ea:3d:c5:d3:14:45:
66:46:a9:ad:8d:dc:df:86:fb:5e:70:98:ba:5b:d4:21:19:21:
29:63:5d:ec:f4:5f:ca:eb:ad:d2:d9:1a:e5:76:76:88:a6:6a:
92:71:66:4e:11:47:19:2c:cc:14:bd:36:62:d6:1d:df:43:de:
f7:ca:ed:9d:ec:5b:4f:b9:89:94:cd:33:0d:e1:b7:6c:ef:f4:
73:e5:eb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:13 2025 by rpki-client