Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
File: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft (raw, json)
Hash identifier: IgUCvS8WLRp82X/ZQdK952cZkxD4HCqUmQYcYPUc2Ds=
Subject key identifier: FA:62:1E:E1:7F:40:57:2B:D2:AE:A7:91:89:4D:96:93:32:FE:A9:83
Authority key identifier: 26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
Certificate issuer: /CN=267d0cc5bd86d568366657aef0310d493a7176e4
Certificate serial: 0196556E62285BEF6561F55A2B084367EF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 23:00:19 +0000
Manifest this update: Sun 20 Apr 2025 23:00:19 +0000
Manifest next update: Mon 21 Apr 2025 23:00:19 +0000
Files and hashes: 1: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl (hash: 31baHZlMxXEn1fJHbFmCBY8mtTgSepgkOtAqipoCGlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:62:28:5b:ef:65:61:f5:5a:2b:08:43:67:ef:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d0cc5bd86d568366657aef0310d493a7176e4
Validity
Not Before: Apr 20 23:00:19 2025 GMT
Not After : Apr 21 23:00:19 2025 GMT
Subject: CN=fa621ee17f40572bd2aea791894d969332fea983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:b2:4e:c6:d1:46:07:52:21:39:e6:82:36:
b5:e8:57:dc:5f:4c:74:dc:03:0c:57:5e:44:95:74:
a9:d9:20:59:58:f4:83:ce:2b:0b:0c:8b:c6:81:c5:
04:e8:ee:bd:20:54:19:b2:ba:69:df:66:85:f4:9c:
1f:01:dd:51:49:d6:45:54:f5:7a:26:2c:17:4d:57:
db:cf:cb:99:0d:a5:7b:b0:f9:da:2c:34:2b:61:07:
56:aa:a9:4b:ed:a0:7f:77:65:0b:b6:f5:9a:dc:52:
2b:be:2c:9e:8b:7b:97:31:c7:5a:2e:04:90:eb:f9:
f2:65:c3:06:3e:e9:1a:98:8f:ed:d6:74:6e:04:0e:
0e:b3:0e:9c:e0:8d:a0:65:e7:9a:cf:b3:24:ef:37:
42:99:0e:e3:72:b1:f2:2b:94:44:82:71:1c:58:9d:
3e:ff:71:88:d0:0a:ea:45:e3:b3:c6:54:c5:d4:e5:
bc:7a:3b:53:d9:e1:05:de:ef:41:1e:a2:b1:b4:9e:
3e:4b:96:1e:08:db:55:a9:8a:2d:4f:c7:4c:f7:96:
1c:d8:49:23:f1:2e:82:77:25:98:89:86:86:50:34:
68:1a:ff:73:a5:79:91:1b:25:4a:0f:df:d5:6c:96:
3a:b8:a6:02:4f:6b:7e:91:e9:e8:7c:60:f2:71:d6:
77:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:62:1E:E1:7F:40:57:2B:D2:AE:A7:91:89:4D:96:93:32:FE:A9:83
X509v3 Authority Key Identifier:
keyid:26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8b:9f:dc:48:1d:4d:36:8b:ca:98:c8:de:c0:2c:c8:f1:c8:
a2:05:da:48:c5:9b:68:98:a9:02:d1:44:bf:cc:00:1d:4b:c4:
ff:0d:f4:b1:fe:39:5e:38:11:09:37:85:66:6f:e2:0d:e8:3e:
71:56:1b:cb:0f:80:97:dd:18:18:a1:7a:f9:25:e3:24:3a:97:
7a:db:9c:8b:92:3b:40:50:e9:e9:05:be:8f:79:80:c4:ee:65:
67:0f:ec:c5:f5:ae:cb:6c:88:24:0e:a0:e6:ad:20:63:9e:2d:
a6:2f:a3:15:df:43:ea:e0:16:63:e1:a6:2c:1e:21:36:6e:8f:
15:0b:c4:2d:74:10:ab:f7:ea:de:16:7f:ee:f8:5e:5e:7e:9f:
40:90:cc:44:96:86:73:57:f0:e8:9a:a4:90:64:a4:9a:eb:05:
a4:6d:d9:48:1f:b3:0b:31:24:2f:f1:f1:4f:e4:3e:66:61:de:
c1:2b:d1:97:cc:d8:27:37:7a:41:dc:3b:2a:51:06:8b:fd:71:
ae:7f:d1:f5:5d:49:bb:48:cf:24:95:5a:b1:43:63:21:99:e1:
0a:8d:f4:60:ef:a5:8f:60:5d:15:db:1f:f7:5f:91:8f:0a:77:
31:76:40:95:37:6e:fe:a2:28:d0:11:0f:2f:a9:5b:be:f1:fd:
6a:73:e1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:33 2025 by rpki-client