Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
File: l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft (raw, json)
Hash identifier: Ra5m6UvEbZc4x9K6FJCwSzTbpMFszQzUn9xrqd7Chjk=
Subject key identifier: 71:EC:C6:AD:02:4D:8F:5B:66:55:48:00:65:E8:18:E9:68:F8:68:0E
Authority key identifier: 97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
Certificate issuer: /CN=97e271a1d447e410630fac3a6406e04a83067c67
Certificate serial: 01958C60839765DD9678CB18331A887D7B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
Manifest number: 049A
Signing time: Wed 12 Mar 2025 22:01:30 +0000
Manifest this update: Wed 12 Mar 2025 22:01:30 +0000
Manifest next update: Thu 13 Mar 2025 22:01:30 +0000
Files and hashes: 1: l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl (hash: l3ipD0YBxNKNkMdN5O7/CskqtYLZmE9AQRBkgWkmrq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:83:97:65:dd:96:78:cb:18:33:1a:88:7d:7b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97e271a1d447e410630fac3a6406e04a83067c67
Validity
Not Before: Mar 12 22:01:30 2025 GMT
Not After : Mar 13 22:01:30 2025 GMT
Subject: CN=71ecc6ad024d8f5b6655480065e818e968f8680e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:0c:e4:be:b3:b6:42:8d:38:e3:01:d1:39:
fd:01:70:d2:69:45:61:a4:88:b5:8c:cf:e5:be:b8:
95:d3:c6:eb:80:1c:74:5e:56:96:d3:3e:cc:7e:fa:
2f:00:0c:65:ee:b5:19:0e:c7:65:a7:51:b0:34:a8:
83:1d:49:18:d6:5b:c9:10:f6:91:34:25:16:14:96:
3a:47:38:e2:36:a5:60:49:31:3c:d7:9f:f1:a7:65:
0c:00:2e:2f:0b:86:1d:ef:1e:50:cf:19:7d:cd:36:
dd:42:56:09:07:f3:ca:74:bb:9c:e5:08:55:f0:29:
9d:78:c1:17:c1:60:53:c9:75:dc:9d:54:a5:e0:a5:
f8:c8:53:85:e7:cd:80:52:77:8f:c3:c5:d3:40:38:
c3:4d:e3:2d:26:2f:50:cf:bf:87:d5:29:65:61:eb:
06:86:25:f2:7c:3c:40:99:85:67:65:a6:fc:95:22:
da:8b:d1:e4:98:6e:23:84:e4:6d:da:d7:9d:e5:88:
c1:a5:66:b6:44:5c:32:67:f9:6f:60:7f:38:7f:d3:
11:7a:aa:6d:9b:d5:5a:12:e3:aa:54:64:20:8c:2f:
21:a2:4d:95:05:2e:94:3a:fd:e1:df:80:8b:2c:66:
46:b4:f2:c9:7a:0d:4e:09:f2:0d:0f:cb:98:5f:c0:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EC:C6:AD:02:4D:8F:5B:66:55:48:00:65:E8:18:E9:68:F8:68:0E
X509v3 Authority Key Identifier:
keyid:97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:e1:57:dd:d8:b9:14:60:c1:67:00:ef:40:5a:7d:05:a9:5e:
00:fe:4a:45:bc:54:49:33:39:62:3e:84:19:42:3b:fd:93:50:
98:76:c8:a9:fb:9e:3e:65:f1:50:8e:17:0f:5a:b0:5d:91:12:
91:01:43:bf:68:02:8e:bb:16:5b:40:f3:81:14:5b:89:ff:64:
2a:23:f1:96:05:1b:49:96:81:d9:72:f5:35:d0:bf:7e:bb:78:
e9:63:e5:37:84:32:1f:08:2b:33:f5:b5:67:34:e3:05:79:e7:
60:6c:3d:ad:51:10:b3:5e:f7:30:05:20:b8:20:5b:18:11:3c:
3a:1a:ab:06:75:de:69:41:4e:63:37:a3:73:04:47:06:e6:17:
2c:7c:9e:0e:5f:42:02:f7:c2:8f:bb:8c:cb:15:d6:36:88:fc:
6c:73:5c:e9:55:20:31:c3:b8:14:2b:dc:e1:c0:58:30:8d:15:
1b:3a:3c:b8:14:40:5f:65:42:5c:18:e7:a8:00:f7:a8:f0:fe:
d4:ee:95:53:21:d3:b7:8a:c2:43:36:e6:52:55:34:b7:c3:38:
a1:ac:c5:03:be:8e:2e:62:9e:bc:c2:46:da:a8:15:72:e9:bc:
1e:c0:96:64:73:35:cb:bc:b4:7c:d4:27:d4:0a:a6:45:ed:c2:
65:52:3b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:36 2025 by rpki-client