Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: S3eCTnO5oQGl0Jm6EZCDH46oYUoSaCoTX0ycVu2LqJ0=
Subject key identifier: 8D:08:1F:D7:0D:4A:02:EA:14:EE:FF:30:CA:CB:14:80:B3:9D:0C:7B
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 019510C6D77F571852C67CC52AD8012B15FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 1453
Signing time: Sun 16 Feb 2025 22:00:21 +0000
Manifest this update: Sun 16 Feb 2025 22:00:21 +0000
Manifest next update: Mon 17 Feb 2025 22:00:21 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: shMokSfItqK2er2KlZ8Pkrb4OjS+SXPSHHYr0URsvfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:d7:7f:57:18:52:c6:7c:c5:2a:d8:01:2b:15:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: Feb 16 22:00:21 2025 GMT
Not After : Feb 17 22:00:21 2025 GMT
Subject: CN=8d081fd70d4a02ea14eeff30cacb1480b39d0c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:b7:e0:3c:82:2a:5c:70:f2:15:28:92:9b:
64:ae:7b:31:bc:bc:54:90:86:ee:6d:1f:88:c3:7a:
74:85:76:fe:00:b1:24:df:0a:30:69:62:56:4f:17:
0d:4e:99:e3:81:a9:89:f2:dc:16:26:7a:f2:c9:f5:
4d:15:8a:2c:23:e3:c3:37:91:4d:35:d8:00:77:a7:
0c:11:34:9d:45:05:3e:51:53:6e:1c:d4:0d:dd:98:
d3:1f:bf:64:c0:ef:4c:43:91:14:98:f5:70:c6:2d:
90:17:d5:c1:c3:81:a5:f3:54:f1:39:f6:0c:81:6e:
a8:dd:ca:65:15:7a:37:c5:3a:f3:ad:c6:d6:36:36:
f8:f7:38:c6:ca:e7:a5:3f:1d:15:c6:83:bc:b2:ea:
3c:fd:0c:de:58:37:b4:05:a6:3d:c2:53:9b:f8:7a:
63:36:5b:6a:b4:a7:3d:29:35:cd:aa:9c:80:35:a4:
09:4b:bf:ab:92:d8:6c:80:5a:e7:53:35:fa:c2:0a:
ba:02:72:08:9c:ea:5b:4c:35:ac:c9:bc:09:a1:06:
f5:56:c9:84:0e:84:21:38:44:47:aa:f1:c4:aa:b9:
f9:58:13:35:d2:67:24:4a:4c:8d:eb:ad:76:fd:ec:
6b:89:34:cc:e3:eb:38:d4:19:9c:a3:59:15:36:19:
ff:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:08:1F:D7:0D:4A:02:EA:14:EE:FF:30:CA:CB:14:80:B3:9D:0C:7B
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9c:27:c8:00:a1:1b:cc:85:e6:c4:41:03:2f:a8:43:e2:a8:
76:7c:a1:99:a4:99:87:ad:1f:12:01:fd:11:6d:f6:de:18:e4:
54:5f:35:ae:8b:c0:6d:89:a0:bc:a9:13:e2:45:07:0b:ac:35:
86:1e:d2:da:6a:b2:bf:be:c9:b0:4c:3e:0e:a5:0e:b1:44:3e:
ac:a0:62:1e:2f:64:18:4e:ba:d2:7e:e4:e3:95:41:1e:c7:2f:
99:30:6c:bc:31:32:d8:a8:77:3e:10:06:3c:e7:d6:4a:b8:2a:
09:30:11:f5:84:18:e6:d3:62:a6:24:55:3e:00:a2:29:87:b3:
1e:78:0f:4f:ee:43:97:d4:52:ee:d4:56:b0:c9:f8:bd:d7:b6:
6c:a8:8f:5f:ca:48:28:a1:d9:67:3e:5c:7a:9c:db:24:35:58:
3f:4e:39:ed:28:c1:75:f9:93:05:30:c0:35:28:ca:c8:7b:39:
58:80:b3:5c:b8:16:ad:b1:10:ca:bf:e3:d3:b8:f8:69:1a:c8:
67:ab:43:aa:a7:a4:12:60:e9:7c:59:80:33:65:3d:f1:9e:76:
d3:df:6d:e0:4b:76:26:20:ff:6c:32:34:14:a8:94:2c:82:8c:
32:be:16:e9:9e:d7:60:fc:45:32:d1:df:f8:1d:4b:c1:61:13:
c5:e9:2d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:09 2025 by rpki-client