Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
File: jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft (raw, json)
Hash identifier: 2pb/iTRKR8cvxw95qU1a3grQX+vgicpgTdtimx/UJSE=
Subject key identifier: 2D:73:78:2A:6C:6A:69:F1:13:D1:BA:24:51:F7:78:A2:AC:A8:1E:21
Authority key identifier: 8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
Certificate issuer: /CN=8c08363e5c1067ad188c380390b09d09a62a1709
Certificate serial: 01958CCE0F8572F799954007C2B7369BFF47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
Manifest number: 0210
Signing time: Thu 13 Mar 2025 00:01:09 +0000
Manifest this update: Thu 13 Mar 2025 00:01:09 +0000
Manifest next update: Fri 14 Mar 2025 00:01:09 +0000
Files and hashes: 1: jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl (hash: U4aiThyQc1GY1Q0EdcHaf/mGvBd4+RN6b5aIARukjA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:0f:85:72:f7:99:95:40:07:c2:b7:36:9b:ff:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c08363e5c1067ad188c380390b09d09a62a1709
Validity
Not Before: Mar 13 00:01:09 2025 GMT
Not After : Mar 14 00:01:09 2025 GMT
Subject: CN=2d73782a6c6a69f113d1ba2451f778a2aca81e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:06:4a:77:c8:25:ab:1e:d4:9e:5e:80:5c:
b8:21:e5:cd:35:9f:12:4a:06:6c:dd:ef:cf:b3:14:
53:3a:f2:c0:62:cc:bd:96:97:f8:23:e7:af:cd:c8:
91:56:f8:9f:a5:83:85:43:b3:2e:42:af:44:10:fa:
1f:91:0d:76:18:eb:81:a4:36:b0:e5:de:d9:83:62:
5e:da:f5:a5:e0:a5:1f:d1:ef:ea:fc:5c:d2:18:e9:
5f:60:d2:1c:9e:f5:bd:ca:9c:a1:8c:5c:e1:e4:64:
84:36:4b:9e:c9:6f:e0:45:2a:67:03:8b:5b:13:a8:
fd:98:ab:d5:25:9e:ff:1b:f4:17:23:bb:a6:be:b5:
85:e7:00:9b:b4:59:e8:be:6e:3b:74:d1:20:f2:cc:
02:82:f3:20:e2:89:2c:81:48:9e:1f:94:c9:b0:a6:
6a:e9:9d:67:2a:ed:35:c5:65:e1:8b:d4:56:a8:7d:
83:62:07:c3:94:62:8f:db:d1:84:8e:89:35:78:10:
3e:68:bd:a5:b1:d9:18:39:18:0f:b8:60:c1:70:c6:
1d:55:89:d6:55:23:cf:fa:89:a9:17:ff:28:6c:3f:
9a:ec:68:48:b5:8c:60:e4:66:90:94:71:b5:ac:a5:
c1:7a:bf:57:2e:00:73:df:e6:b4:29:ff:22:55:82:
84:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:73:78:2A:6C:6A:69:F1:13:D1:BA:24:51:F7:78:A2:AC:A8:1E:21
X509v3 Authority Key Identifier:
keyid:8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3b:0a:ee:f9:73:af:02:b1:6f:55:c3:e6:c1:b9:e7:a9:a2:
3d:79:6e:86:92:8d:c8:80:36:9b:50:77:0c:47:4d:e5:ac:e1:
72:cb:d0:d0:f7:a7:7a:f9:6a:f7:23:8b:e7:0d:a6:4e:c1:3c:
45:7d:18:a7:86:5e:9c:d8:1f:d1:72:95:45:0c:35:b1:a0:06:
af:bb:31:5e:3b:73:ea:45:1d:d9:5f:e8:7e:63:39:a5:b3:3e:
b5:bb:a0:7d:a0:97:d6:3b:15:ce:6e:c4:d0:70:a2:42:3a:e2:
ba:8f:ad:ea:e6:f3:2e:ad:e4:50:8e:6d:ca:41:51:20:66:83:
35:75:32:6d:3b:19:d4:70:4a:56:3f:8c:eb:f0:fb:77:0d:7b:
70:57:4e:70:70:25:1e:32:dd:6a:f4:84:43:25:85:1c:d6:d0:
a7:69:9d:e1:40:cf:3a:70:d6:a3:da:f6:1e:dc:06:66:cb:27:
8c:f9:e5:c3:8c:19:cf:0b:58:42:7f:f2:ca:e8:a1:43:71:b8:
4b:56:86:af:ba:5d:d2:20:2b:a5:f1:fd:e8:e4:22:da:b4:6b:
00:5b:2c:d1:6a:5d:7b:4f:e3:38:84:aa:bb:c0:0e:8b:bc:d9:
a1:ad:b6:b5:8e:d3:85:2f:cb:e1:fc:0f:2e:6d:92:a6:50:95:
94:e5:3a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:29 2025 by rpki-client