Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
File: JKX0o6fsZAySNFB5lMDGXyji_Fk.mft (raw, json)
Hash identifier: k/EOWaXuzb/1oF+P0iWulvTx9i7h383htW9/Wx6XEPg=
Subject key identifier: 44:53:A4:3E:B7:93:D0:36:EC:73:2C:C3:49:80:C2:07:97:A4:7D:36
Authority key identifier: 24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
Certificate issuer: /CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Certificate serial: 01964B8FBC7A201A3C6E55593AE849BCD4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
Manifest number: 1277
Signing time: Sat 19 Apr 2025 01:00:33 +0000
Manifest this update: Sat 19 Apr 2025 01:00:33 +0000
Manifest next update: Sun 20 Apr 2025 01:00:33 +0000
Files and hashes: 1: JKX0o6fsZAySNFB5lMDGXyji_Fk.crl (hash: SYmT5vupabxNwiGXVc9CGcjbJu+BnEgMCysNDF6dEKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:8f:bc:7a:20:1a:3c:6e:55:59:3a:e8:49:bc:d4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Validity
Not Before: Apr 19 01:00:33 2025 GMT
Not After : Apr 20 01:00:33 2025 GMT
Subject: CN=4453a43eb793d036ec732cc34980c20797a47d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:98:21:33:53:4a:26:2b:ab:a5:f2:7c:3f:24:
b2:51:8d:a1:a9:fd:fb:8f:fd:58:94:c7:7b:66:e8:
9c:93:8d:a4:97:e0:92:bb:99:25:e7:12:61:23:bc:
05:39:9b:39:5c:5b:2b:44:2c:45:6b:e4:8c:6b:d1:
72:a6:1d:ed:07:56:d6:30:63:14:f7:80:08:c2:57:
32:5f:fc:c1:20:21:e5:ef:04:77:ea:74:14:1c:53:
2c:23:76:0d:a0:ff:75:e2:85:b8:60:bc:fa:a4:7d:
e6:ee:6a:97:cd:08:9a:3a:f0:e3:93:d7:a8:e9:19:
06:d8:6b:1b:b3:c0:a5:b9:24:93:65:a0:f1:5f:d1:
21:74:d3:82:2a:b5:43:45:61:11:71:ea:b1:61:63:
1b:ff:1d:d8:84:5f:fe:17:6e:31:23:a9:d0:a7:33:
dd:0f:f4:b3:bb:fe:3e:2f:2c:9d:6b:82:2e:91:c3:
d6:05:05:31:22:c1:2f:73:f4:2c:af:fc:ab:98:03:
e2:82:d3:bb:1f:dd:03:65:3d:2a:70:a9:e6:2b:d7:
16:a3:93:cd:2e:88:9a:5d:9f:31:1a:47:3f:f1:d3:
e4:71:60:5a:65:b3:3e:e2:c6:34:37:36:ce:0d:90:
6e:90:57:73:d3:bb:99:88:20:ca:ef:80:c1:58:5f:
e6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:53:A4:3E:B7:93:D0:36:EC:73:2C:C3:49:80:C2:07:97:A4:7D:36
X509v3 Authority Key Identifier:
keyid:24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ad:43:09:d2:32:01:47:a9:ab:56:8f:9a:e8:bc:75:d9:8f:
da:19:50:0f:d5:79:13:b3:89:10:6a:3c:06:a7:76:28:ba:f2:
cd:fe:c2:a7:6f:d2:4f:87:70:a8:75:9a:bb:f6:23:ca:13:e4:
11:8e:1c:2b:6b:5e:21:fe:c3:08:b2:b0:09:88:b0:75:20:d5:
0d:ed:49:3f:bd:d4:cc:77:ee:9f:dc:ed:6d:f1:06:87:5d:45:
92:7c:57:e5:46:51:84:81:e2:62:b4:dd:4f:6c:90:ae:21:71:
04:dd:d8:bc:3e:2e:18:60:b4:17:b5:a4:91:95:cb:26:a7:14:
91:4b:0a:42:5e:8b:60:fd:05:14:27:43:7d:69:10:3b:29:a5:
10:e1:3a:5d:5a:91:b6:03:0b:5f:d4:18:a7:10:cb:c8:cd:a4:
03:8a:af:e0:11:d1:dd:ea:ad:eb:96:1c:14:96:85:d3:ad:2a:
69:8e:0a:4d:2b:2c:d2:9f:38:26:bf:e2:46:13:58:ce:da:78:
5a:b6:8c:37:d4:47:3f:f9:8a:55:60:6a:a3:3b:1f:7d:9c:a0:
ae:47:69:a0:24:b3:a8:a2:59:59:c2:84:59:85:30:1e:95:06:
cf:0f:23:ab:75:9b:d6:89:75:0f:db:c1:76:99:99:cb:ce:c3:
14:c6:8b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:20:02 2025 by rpki-client