Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: TBfPk3838qSipji/IynTKfuerwpx86aPpyXoZqUevks=
Subject key identifier: 1F:D7:A1:3C:64:31:AB:80:2A:D1:01:0E:00:A0:52:64:2A:79:CF:C0
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 019603E4E2194BA15614CF999E057B42F136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 075F
Signing time: Sat 05 Apr 2025 03:00:53 +0000
Manifest this update: Sat 05 Apr 2025 03:00:53 +0000
Manifest next update: Sun 06 Apr 2025 03:00:53 +0000
Files and hashes: 1: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: JXFq9cp/m1AWNHNj6rITfsWc9ZKOI/lvOTpXUihSMog=)
2: P7b5zmQiLmwTefl5liI-KoZJpcY.roa (hash: VJKcy+JlG04cLK8U6Txf4TogJYWS6O9qHAuZFHI6UVY=)
3: fkZMJf--qW7MT6bXdyPn8Rz0kGM.roa (hash: FGOPoxO9vvC4y9ljtcZplGO40KLgXf+OUCl+F6C8Bmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:e4:e2:19:4b:a1:56:14:cf:99:9e:05:7b:42:f1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Apr 5 03:00:53 2025 GMT
Not After : Apr 6 03:00:53 2025 GMT
Subject: CN=1fd7a13c6431ab802ad1010e00a052642a79cfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:0b:98:e8:09:5f:5d:ca:98:1e:56:c3:90:
a1:52:9c:82:d4:84:ff:56:e1:81:24:2a:13:15:14:
6f:51:ad:55:a8:be:db:5d:3a:bc:f4:ed:e1:c9:69:
2d:45:12:2d:f7:8e:11:4a:13:a0:94:b2:72:e4:7d:
92:73:cb:d0:b6:ee:f2:ee:94:d5:0b:c8:29:df:ee:
62:0f:00:b4:0a:f3:f3:a3:f5:3d:73:73:92:b4:b9:
83:4f:9a:06:5d:71:b6:4d:ee:3e:07:7d:73:55:14:
bc:d5:33:c8:07:47:f2:90:6b:2d:d1:3c:72:6c:25:
ee:b7:d8:99:7a:ee:e6:e6:5a:e0:c4:8b:7a:d9:a7:
07:20:6a:30:25:aa:64:f0:58:87:a1:0a:ad:a4:a6:
4f:4e:cf:ec:7c:34:87:ce:87:b8:ef:a8:47:97:bd:
7e:1e:71:63:eb:dd:eb:b5:04:3e:a5:b5:36:8f:9a:
5f:b2:45:c9:cf:e7:da:e9:ba:c5:8c:d6:1e:61:00:
07:8b:4f:56:d9:59:22:47:6c:12:20:df:31:e2:00:
8e:17:29:88:d0:1d:7d:74:73:f8:4a:91:61:f5:28:
bd:d8:01:18:b3:88:41:3a:3b:0a:77:22:8a:fe:d5:
84:0d:14:c1:db:7e:fe:2a:e2:5f:73:3a:cb:8d:30:
2d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D7:A1:3C:64:31:AB:80:2A:D1:01:0E:00:A0:52:64:2A:79:CF:C0
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:96:dc:3f:47:a9:84:9f:e6:21:5d:16:ea:69:0b:a9:6c:66:
c9:3d:61:a4:fd:c1:e0:06:4b:11:9a:7c:2b:8e:51:29:fd:5b:
b7:d0:9e:22:60:31:94:d9:e0:b6:0e:a1:81:81:32:44:36:2a:
cc:7e:51:b6:cb:30:fd:62:c4:ef:2f:82:20:fa:13:da:55:01:
9c:9c:66:57:2d:d0:24:fd:b5:fd:df:ac:f2:06:2a:7b:1c:52:
e4:4f:a1:f9:a9:c3:21:88:ea:db:24:32:e8:ec:4d:66:df:b1:
e5:30:52:ab:d1:1f:d0:02:95:5c:a8:66:b6:6b:f5:da:70:d4:
8a:b6:7b:6b:51:bb:86:4e:a7:f9:85:7d:25:bf:49:99:8c:59:
2e:64:c9:a2:39:b9:04:a7:32:9e:68:5a:a0:f2:2f:11:30:d9:
5b:b1:67:55:e5:62:7d:77:d7:92:91:3c:92:d7:77:36:53:63:
88:81:47:67:83:4d:26:7b:df:72:0d:ad:b8:b6:38:c4:03:5f:
e6:81:07:8a:75:c0:d1:75:4d:48:4b:5e:4c:a7:9f:a6:dd:97:
a2:30:cb:c7:da:d0:35:62:a0:0c:9e:ef:7a:14:c5:2a:fc:11:
67:80:1f:8b:b8:f8:09:a8:9b:88:8c:55:f9:c8:6a:87:d9:e6:
f9:45:fd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:57:20 2025 by rpki-client