Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
File: 0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft (raw, json)
Hash identifier: kJ/AxcTYxT8MieSJ6AVpsqhH7snc587GZDBNtaJfAAU=
Subject key identifier: 9A:6E:03:00:5E:FA:B4:45:E7:48:B2:24:10:55:56:BB:4F:EA:F2:C5
Authority key identifier: D0:90:4A:36:68:D1:D5:A1:9B:DE:41:E5:A1:BA:D2:E9:94:D6:98:05
Certificate issuer: /CN=d0904a3668d1d5a19bde41e5a1bad2e994d69805
Certificate serial: 019659150FAC98BA7FD7786F3DF76B616B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 16:01:14 +0000
Manifest this update: Mon 21 Apr 2025 16:01:14 +0000
Manifest next update: Tue 22 Apr 2025 16:01:14 +0000
Files and hashes: 1: 0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl (hash: vXTLwknMVUur+3rI3pEvkUkVoKI2DFWRE+qToC1CUtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:0f:ac:98:ba:7f:d7:78:6f:3d:f7:6b:61:6b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0904a3668d1d5a19bde41e5a1bad2e994d69805
Validity
Not Before: Apr 21 16:01:14 2025 GMT
Not After : Apr 22 16:01:14 2025 GMT
Subject: CN=9a6e03005efab445e748b224105556bb4feaf2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:bf:27:46:e6:5d:f0:92:8c:3e:4f:da:90:
66:b1:8c:00:67:91:c9:1c:ac:ae:93:a9:c7:7e:d6:
42:8d:a1:79:d3:9f:2e:2f:6d:5a:3f:50:56:a9:de:
2b:93:76:c1:36:f7:26:f5:71:4d:21:8c:68:b7:90:
58:c5:a2:b6:27:d5:48:2e:31:ea:5d:73:6f:cd:83:
5d:d6:2c:20:a8:4a:ff:26:2e:0d:55:25:bf:23:14:
c3:0a:8f:d5:5a:63:eb:50:dc:34:e2:62:ec:5b:a6:
6c:ab:d7:24:aa:4a:1b:e7:a5:2a:58:69:72:3f:ad:
98:bd:9a:db:0f:27:23:36:fd:39:c2:33:83:9b:aa:
26:58:5b:21:04:a6:47:19:e1:a2:76:c8:99:e1:c9:
c2:53:f7:c1:fd:dd:01:d2:d4:66:85:e6:9c:dc:a5:
aa:34:c1:ff:b0:90:19:85:5a:d1:c8:8b:7d:00:1d:
17:3b:ad:97:ef:52:df:f7:e8:23:26:85:cf:9d:a8:
b2:60:50:a2:07:dc:82:0a:c0:9e:3f:c4:c8:f0:15:
f2:1e:04:bb:79:0b:6f:66:89:a3:ea:83:6f:20:94:
ff:ba:ce:b9:11:2d:ab:1b:2e:94:c6:53:48:95:15:
8b:62:91:4f:43:ea:a4:80:28:c7:d2:59:7e:97:90:
25:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6E:03:00:5E:FA:B4:45:E7:48:B2:24:10:55:56:BB:4F:EA:F2:C5
X509v3 Authority Key Identifier:
keyid:D0:90:4A:36:68:D1:D5:A1:9B:DE:41:E5:A1:BA:D2:E9:94:D6:98:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JBKNmjR1aGb3kHlobrS6ZTWmAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/20c91f-1050-4e44-a07f-9076301dd194/1/0JBKNmjR1aGb3kHlobrS6ZTWmAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bc:a2:90:02:d8:bc:ec:bb:8b:5b:6b:e8:9b:fb:17:61:18:
9b:56:5b:f0:60:56:10:56:10:c5:b2:48:b0:2d:ef:5d:aa:32:
23:27:02:d0:06:25:e8:ad:38:27:40:3a:9f:b8:d1:ba:09:39:
6e:3b:db:ce:16:82:ca:dd:fa:a5:6f:1b:c6:18:75:95:73:cd:
f8:c2:7d:93:41:a9:a5:7d:b2:ac:73:c1:f6:84:ba:20:f1:4b:
9b:b0:8e:aa:68:f5:df:35:5f:67:c8:94:68:11:f1:fc:f2:38:
6a:d2:92:dc:66:29:d9:8a:2a:2a:82:76:d2:56:4c:b7:df:e7:
3c:e9:75:23:06:f3:57:65:62:5e:8e:6a:66:41:80:c2:3b:16:
81:08:e0:5c:ea:f2:70:4a:c9:34:0e:43:ea:cb:40:3d:9e:7a:
a1:8e:19:4b:a0:4b:2a:1f:7c:15:93:d8:71:98:87:1d:41:a7:
eb:77:ac:94:2c:b7:6e:0d:d0:c0:25:37:ee:79:b1:9c:75:75:
43:e7:8c:0a:ac:97:25:d2:be:e9:b0:98:04:4c:5b:ca:3c:12:
a4:e6:1f:8c:19:64:5c:27:1b:17:8f:aa:47:c2:fa:0c:37:33:
13:b8:cf:64:53:17:2b:62:5e:c5:cf:66:f0:2a:b7:37:12:a4:
54:22:b2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:30 2025 by rpki-client