Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
File: jGrD-sRfBdkCaII3X-ArFX1LdRg.mft (raw, json)
Hash identifier: PeScPyNTHTuWXZJwzEGp3a9VfWHQXvbl6HT4EzrrXVs=
Subject key identifier: 0A:F9:96:32:2A:B4:01:1C:47:89:25:9E:EB:96:19:E7:A7:13:5D:38
Authority key identifier: 8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18
Certificate issuer: /CN=8c6ac3fac45f05d9026882375fe02b157d4b7518
Certificate serial: 019510C78EF73024AC7D097EB99558D2408D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
Manifest number: 0BF8
Signing time: Sun 16 Feb 2025 22:01:08 +0000
Manifest this update: Sun 16 Feb 2025 22:01:08 +0000
Manifest next update: Mon 17 Feb 2025 22:01:08 +0000
Files and hashes: 1: jGrD-sRfBdkCaII3X-ArFX1LdRg.crl (hash: QGxfdtaIqvW3oxMpv4eQ4i920sqASfsbipKwO/wM73c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:8e:f7:30:24:ac:7d:09:7e:b9:95:58:d2:40:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6ac3fac45f05d9026882375fe02b157d4b7518
Validity
Not Before: Feb 16 22:01:08 2025 GMT
Not After : Feb 17 22:01:08 2025 GMT
Subject: CN=0af996322ab4011c4789259eeb9619e7a7135d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:45:70:66:b0:1f:8e:99:60:4d:4a:52:9a:
1e:ad:90:c4:35:de:61:38:d4:7b:0b:99:bc:c7:17:
cf:35:85:fc:1c:ed:eb:aa:8c:d7:35:50:58:85:11:
d2:a6:b4:43:4b:8d:f6:ad:09:14:25:d9:df:29:2b:
c4:7a:91:6a:90:bc:ad:da:f8:88:d2:bc:ac:f1:d2:
b5:b9:44:d5:fa:b2:20:ea:71:c6:52:9e:16:6a:be:
86:2f:aa:5c:8e:e3:88:1b:15:e2:ad:52:f0:36:0d:
9a:31:79:11:79:85:a3:a2:19:a1:3e:f9:82:98:ff:
2a:ee:af:11:b8:93:e7:82:ea:c4:ef:02:79:96:20:
48:02:09:41:ce:5d:2c:b8:a2:9c:9f:94:fe:20:19:
87:32:82:a9:7f:29:60:4e:c0:54:b1:1b:4b:99:50:
2d:90:a1:27:45:a1:a2:d4:9f:38:71:52:35:fb:8e:
b2:e0:42:45:b3:c1:e3:8a:ea:98:7d:3e:f6:67:81:
52:b4:bf:6d:9b:30:c6:6a:6d:c5:8a:c8:07:43:c8:
70:11:5a:4f:a9:75:f4:b6:d4:af:95:92:04:45:4d:
63:1c:17:85:e9:6d:5a:19:0f:99:d8:ae:3f:1d:7d:
00:6e:66:c4:2a:d7:63:f7:92:5b:99:92:e3:f3:d8:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F9:96:32:2A:B4:01:1C:47:89:25:9E:EB:96:19:E7:A7:13:5D:38
X509v3 Authority Key Identifier:
keyid:8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d4:27:6c:01:f4:d4:c6:53:08:59:22:5d:2a:d7:a8:56:d5:
92:7e:43:20:18:ce:c6:19:58:72:b6:43:bd:6f:97:ca:0f:f1:
b9:93:e6:0a:b5:34:37:dd:75:28:6a:bc:f5:c6:1a:f9:00:77:
9a:21:97:9f:67:eb:a4:fd:37:05:3c:d6:a5:29:d5:f6:85:b0:
de:42:6d:70:39:68:7b:c0:16:4b:86:93:18:8b:2d:c7:f4:55:
61:66:99:ef:69:6e:63:84:1c:11:b2:df:1e:fa:51:0c:93:15:
e5:39:43:3b:46:a9:3f:17:75:93:66:13:41:62:ca:8f:49:74:
40:85:24:84:61:cf:7b:e5:5a:d0:28:27:27:1f:b2:ee:12:82:
7f:fd:de:25:60:3a:a5:c0:6f:2d:41:93:e8:d0:27:7e:d1:c8:
c6:fe:a8:28:31:fd:45:b4:1d:14:5a:b6:a6:84:5c:d5:47:cc:
38:ad:57:3f:cc:d2:0a:b0:fd:72:d7:df:44:16:b9:db:5e:11:
13:0b:23:3d:59:4e:ce:8c:f2:be:f4:9a:98:5b:67:e3:cf:0b:
0c:cf:41:0e:52:15:3e:09:8a:39:d0:c2:a9:9c:4c:40:d5:36:
0d:0b:02:ad:26:96:90:24:2a:e8:69:ab:38:c7:bb:44:2f:ac:
ed:53:46:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:46 2025 by rpki-client