Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: QnY01huQhDns87Irf8VZoDQ8hQJkbJ17A7b4e5+fJ8Y=
Subject key identifier: 3B:28:11:12:59:19:F6:F2:DA:FE:2D:FD:FC:E1:87:0A:7B:95:ED:6A
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 01965538BC12CD565956F3E781E4F5663458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 22:01:43 +0000
Manifest this update: Sun 20 Apr 2025 22:01:43 +0000
Manifest next update: Mon 21 Apr 2025 22:01:43 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: ncrbQh8QUUIpFkWdH63bfbQBQg2cKyJBkVqt71s3KJA=)
2: PJ_-iRXGR5kveJvnaBWIwG-ft74.roa (hash: lpKsBNInX/l4lejvtga0/MnEJsq53AADQslEJzx9StQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:bc:12:cd:56:59:56:f3:e7:81:e4:f5:66:34:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Apr 20 22:01:43 2025 GMT
Not After : Apr 21 22:01:43 2025 GMT
Subject: CN=3b2811125919f6f2dafe2dfdfce1870a7b95ed6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:1f:35:b4:d4:90:fa:9f:7c:0e:f5:13:b5:
e9:2d:60:35:4f:85:06:00:37:01:94:61:8f:a6:4d:
40:45:4e:87:54:d8:33:15:cc:70:d4:e3:d7:9d:85:
91:65:b2:91:9d:6c:1f:03:58:ff:aa:a1:b1:d1:bc:
bf:24:a0:cc:73:3f:a7:04:6a:92:b5:39:3a:27:d9:
60:9b:70:f6:6f:8e:b0:bb:a6:30:3b:2a:e0:17:a9:
d4:96:e6:12:09:cf:00:fe:6c:db:96:ba:8c:4e:30:
e1:6a:28:9b:5c:3e:e9:ca:e3:8e:b3:38:4c:7c:77:
99:63:76:1a:58:81:5f:60:06:fa:2c:db:4e:c8:65:
a8:05:de:d2:cb:f8:1b:91:1f:9e:1e:4a:cf:fe:46:
b1:93:3d:e4:cc:a5:60:ae:ac:8e:8e:1a:f5:01:cc:
e0:b5:50:d0:76:36:1c:43:78:bd:f8:dc:c7:0b:7c:
50:44:52:b6:3f:dd:95:ce:6e:f9:69:af:f7:0e:79:
98:b0:8f:6f:53:ba:fb:c6:85:9b:aa:6f:19:c5:91:
5d:65:dd:e7:5a:73:80:a2:ae:94:7d:de:27:b6:6a:
5e:85:a4:22:f4:e8:ec:27:a1:b7:18:65:5d:db:c3:
92:de:b8:7f:cb:0d:bf:4a:30:da:2f:6d:fe:dd:5f:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:28:11:12:59:19:F6:F2:DA:FE:2D:FD:FC:E1:87:0A:7B:95:ED:6A
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:36:2c:c2:1e:59:65:0c:b5:96:62:92:8c:98:bf:68:a3:2e:
0c:e3:2a:0e:9e:cc:d4:b2:1d:3f:53:64:b4:f0:e0:b0:11:a5:
a8:e9:4b:d0:ed:d6:b2:90:15:f6:8a:e9:63:66:1a:9f:d7:9f:
95:d3:3e:f7:52:2c:22:6a:5f:f0:6a:8f:d9:9a:10:9d:fc:c6:
d6:14:d2:6e:a1:8a:4e:c8:6c:86:64:17:b6:24:84:37:5f:45:
03:2a:c4:10:0f:36:a7:17:58:95:d5:e8:6d:8f:aa:90:93:e7:
d5:b1:f3:5e:c0:b7:a3:27:48:86:92:16:18:39:21:1e:03:60:
dd:e0:ee:38:24:0f:2c:ba:e8:1f:c4:d8:2a:2c:39:5b:98:dc:
45:c0:35:f9:48:08:3f:20:87:9a:13:20:49:eb:75:1a:6d:9d:
24:ee:ff:7b:70:62:01:e9:f5:b3:9f:2a:0d:b0:e9:b3:ce:39:
28:f4:08:07:6b:72:43:a1:e2:76:b9:11:67:d9:f3:86:1f:95:
3f:6d:72:f5:16:4a:d8:e9:cf:a9:d4:10:9e:62:80:5b:cb:34:
4e:9f:a3:36:46:33:fe:79:58:9e:dc:00:b7:e8:15:c7:b2:84:
91:06:de:29:45:98:ae:1f:57:4d:e4:33:76:51:90:9b:3e:71:
2c:6b:fa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:41:22 2025 by rpki-client