Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: iya8tLHNXeeq6PxyLzmME1GcBuxGcCERed8FeR4kp0Y=
Subject key identifier: 78:E0:7D:B6:3A:7D:1A:AB:6A:47:6A:FE:BC:39:DA:93:BF:AF:9F:91
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 01958C61178D25B7EC23FC59FF075F794824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 1497
Signing time: Wed 12 Mar 2025 22:02:07 +0000
Manifest this update: Wed 12 Mar 2025 22:02:07 +0000
Manifest next update: Thu 13 Mar 2025 22:02:07 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: AaXSRPgQL6lNH8MvL6cV0FlxwXm6ojz6mUuaHx4oKY8=)
2: PJ_-iRXGR5kveJvnaBWIwG-ft74.roa (hash: lpKsBNInX/l4lejvtga0/MnEJsq53AADQslEJzx9StQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:61:17:8d:25:b7:ec:23:fc:59:ff:07:5f:79:48:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Mar 12 22:02:07 2025 GMT
Not After : Mar 13 22:02:07 2025 GMT
Subject: CN=78e07db63a7d1aab6a476afebc39da93bfaf9f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:c9:bf:0f:0d:e6:b7:6b:4d:16:62:fd:53:
1c:e5:1e:f2:d4:6a:d2:78:fc:7d:61:3a:c6:30:20:
c3:49:7d:ee:b0:f5:dd:07:be:70:2e:6c:3d:fa:34:
43:e2:aa:0c:13:55:4c:3b:1a:c6:1f:84:3e:1b:17:
96:53:09:11:9e:aa:8e:91:56:f1:51:ff:f5:cf:0b:
69:1f:83:ff:2d:40:bf:c9:51:fa:56:e2:68:6e:ef:
a7:ee:3f:05:fb:5f:92:7b:3b:be:66:69:ae:15:bc:
b9:fd:af:92:78:86:08:74:3b:17:0a:f4:01:07:46:
23:28:bb:e8:58:95:72:bb:ea:a7:0a:8b:76:16:1b:
3f:25:fe:fc:e9:7c:0f:80:8a:3c:83:59:94:33:e2:
0b:f0:ae:5d:68:66:7e:21:b3:7e:72:30:ce:92:86:
66:ea:16:6a:15:43:eb:ab:5c:af:0a:3e:14:0d:f3:
61:31:44:33:96:c2:91:e6:b2:70:79:c0:80:bb:cb:
2e:aa:c0:ea:55:99:ca:af:08:81:64:5c:92:79:8c:
b5:48:2d:5f:fd:25:2b:ab:00:68:2c:5b:6f:72:37:
92:74:7d:5f:a2:0b:e7:a9:69:8c:17:ce:4a:13:32:
b2:4e:ca:c4:ad:d4:e1:52:ed:1e:11:89:3e:f6:26:
13:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E0:7D:B6:3A:7D:1A:AB:6A:47:6A:FE:BC:39:DA:93:BF:AF:9F:91
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:32:b0:a6:47:32:d2:69:59:38:e0:f2:eb:db:3b:df:c1:a4:
c0:da:59:af:a3:b8:a2:4d:52:81:33:a9:46:5e:97:ec:dc:65:
be:f7:c5:4c:c1:5e:71:79:06:d0:45:ee:63:b7:23:50:34:70:
27:3f:74:e8:dd:41:af:58:70:68:09:25:99:f3:7b:6e:e6:91:
87:4e:3c:8b:bf:e8:5c:5f:fd:7c:52:47:92:12:77:ad:fe:94:
62:56:6f:ae:5c:28:21:55:2c:7a:d3:2a:26:3a:98:41:a9:3b:
e5:ec:df:eb:b4:c6:2f:b9:be:6a:1a:42:57:ff:42:ae:4b:c8:
07:4d:c0:9b:16:b6:6f:7c:65:65:e8:db:6e:c7:0b:bb:51:95:
54:f6:ad:2a:9d:b7:0f:eb:b8:01:6d:38:17:07:c5:23:47:65:
d3:0d:dc:e6:07:01:71:ab:71:0a:51:6a:53:a5:ad:52:49:18:
bf:fd:7d:8c:8b:b3:f9:ac:3c:c6:70:5b:f3:55:4f:02:7b:6d:
c0:32:36:83:39:96:fc:e4:20:53:30:28:3e:d4:ae:2b:4a:5a:
76:82:40:b8:6c:8a:5e:d2:b0:5c:1a:ca:76:87:3c:cd:ce:d5:
c7:31:b2:ce:c4:84:12:c6:59:41:b8:a8:c6:76:e7:46:ea:27:
87:f7:13:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:52 2025 by rpki-client