Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
File: jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft (raw, json)
Hash identifier: bWssYnbaTQgxlMhdtqWaETSZ7e8qDJ62FV0grvmsITg=
Subject key identifier: 20:DA:A8:59:E2:11:74:4C:BF:F7:A5:06:26:6E:E0:06:37:29:03:3A
Authority key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
Certificate issuer: /CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Certificate serial: 01965681656DDB84D123CB315099D306CFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 04:00:42 +0000
Manifest this update: Mon 21 Apr 2025 04:00:42 +0000
Manifest next update: Tue 22 Apr 2025 04:00:42 +0000
Files and hashes: 1: jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl (hash: 11JHW1IBoHNXZU8ophdTF3Z+kabw9I6gYPZHK7Y3Zd8=)
2: sAUuTa0NxQDQaogfsBE0spI7wLY.roa (hash: LqhsGf+sCdkce6YV0v+cako7Xiw7Niu7YnjSoKkIukg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:65:6d:db:84:d1:23:cb:31:50:99:d3:06:cf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Validity
Not Before: Apr 21 04:00:42 2025 GMT
Not After : Apr 22 04:00:42 2025 GMT
Subject: CN=20daa859e211744cbff7a506266ee0063729033a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:00:3e:4f:33:d3:59:35:37:21:97:45:8f:
56:42:f5:52:f6:cd:45:06:94:e3:a3:7b:94:56:31:
9f:85:db:d8:4b:dd:d5:c6:ff:14:59:db:0b:af:d5:
e0:71:8b:e5:77:29:87:a4:ec:3d:6c:d0:4e:36:57:
80:f0:58:35:0b:bf:b1:e3:0f:8e:93:da:83:e0:da:
b7:12:04:0e:a4:02:fc:87:b1:f4:67:75:e6:96:e3:
13:29:7f:1d:21:7c:8a:19:ed:87:7e:00:f9:f4:44:
78:38:80:e9:c5:b2:fa:b1:b6:ff:25:21:26:77:2f:
64:7e:ff:8a:8a:7b:9d:74:16:19:69:f5:0e:cf:22:
98:c6:42:e8:2b:88:24:1f:ac:5c:50:e2:f9:2b:f6:
3c:1b:1c:41:89:00:fc:56:7c:06:70:6b:95:e4:24:
9d:f3:2f:0d:d6:fd:15:38:b9:d7:c3:d1:7f:87:de:
34:4c:24:93:b9:4e:5a:4e:77:2d:a6:ad:18:de:4e:
3a:7d:30:e8:3f:6e:1e:42:4c:7c:98:75:01:8d:b0:
de:c2:03:0b:e1:c5:31:19:b1:f6:12:ea:8d:ea:47:
40:a5:8c:81:ba:d8:70:ff:0e:77:3b:fc:97:c1:30:
9c:a3:5a:a3:11:14:4e:21:25:8c:75:1c:4b:79:35:
f0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DA:A8:59:E2:11:74:4C:BF:F7:A5:06:26:6E:E0:06:37:29:03:3A
X509v3 Authority Key Identifier:
keyid:8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fb:96:db:8b:07:11:ec:91:20:97:bf:75:72:e2:9c:18:30:
4a:2b:cd:81:0f:ba:50:b0:38:40:d4:49:aa:f0:5b:d3:51:cc:
71:e0:6a:a3:bb:ce:3d:a2:16:f0:b1:4e:46:13:a8:c4:f4:ec:
51:dd:94:c1:0d:a6:4d:88:24:29:62:14:27:3e:35:ee:4d:39:
85:74:ba:1c:bf:04:3d:a4:1a:44:fd:22:2c:c8:19:6a:5e:c4:
0c:03:8c:7e:2f:fb:e1:06:5e:3b:7d:2d:f5:5d:4e:8f:57:bf:
91:ae:d7:e8:fe:f6:d7:06:ec:7d:44:a7:f4:91:d9:2d:e0:77:
c0:99:5d:bb:c9:cc:7c:6b:5a:05:8f:f4:91:4e:88:f7:48:0d:
98:ee:b3:7b:8c:bf:85:2d:1e:c1:e2:fc:fc:6f:be:c1:c2:8d:
99:d8:0b:9d:cd:91:a6:a0:bf:79:e7:de:ea:42:a0:54:a2:91:
61:3b:22:6f:26:69:79:bc:37:bf:f6:2a:64:b4:13:eb:05:7e:
87:f7:ed:d5:75:b7:34:98:12:61:f4:43:50:8e:a2:02:6e:fa:
02:eb:7b:65:57:af:64:da:7a:e8:85:a8:ff:50:fa:f7:59:da:
6b:45:4f:9e:e1:4d:26:31:8c:bd:06:ea:06:92:25:24:ca:98:
6e:cc:c0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:28 2025 by rpki-client