Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json)
Hash identifier: GQlP8qSDng3gVZL/6Clvp952b5JY4+Qfns41/l/m0+4=
Subject key identifier: 05:5C:06:63:55:97:7A:BB:D4:9D:FE:8A:CF:01:D4:F8:41:55:92:FF
Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Certificate serial: 01964E5A103F470019ED727BC13ACA18E642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
Manifest number: 0664
Signing time: Sat 19 Apr 2025 14:00:47 +0000
Manifest this update: Sat 19 Apr 2025 14:00:47 +0000
Manifest next update: Sun 20 Apr 2025 14:00:47 +0000
Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: 6otRwIYQaFdiU5JvMpAvm10qUnhfG78v7ur6Njip6mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:5a:10:3f:47:00:19:ed:72:7b:c1:3a:ca:18:e6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Validity
Not Before: Apr 19 14:00:47 2025 GMT
Not After : Apr 20 14:00:47 2025 GMT
Subject: CN=055c066355977abbd49dfe8acf01d4f8415592ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:13:57:53:34:4e:d4:1a:8f:f0:65:20:6f:
b3:de:6a:26:b7:0d:79:ec:c8:12:8a:9f:cb:3d:e3:
08:67:bd:e0:15:f5:eb:31:8d:7e:72:04:0b:39:2e:
31:99:a4:4b:ce:92:e7:26:25:1b:36:6c:98:81:35:
cc:79:3b:a0:cd:9a:17:1c:12:00:dd:61:98:da:81:
6f:03:f9:fe:5c:aa:a2:e9:a5:82:aa:2a:96:2f:e6:
6c:ca:f5:d3:dd:f7:bc:c4:b7:ae:7e:ca:8a:26:d5:
f0:cc:90:a7:a0:b6:ee:23:7c:3c:ed:94:32:29:c0:
29:70:03:cc:9b:89:ca:28:97:ee:2c:a7:aa:4d:33:
1f:36:c9:00:c5:b6:d2:e1:26:74:ef:82:8c:0c:a6:
db:41:95:cd:ce:bd:14:c8:ae:c0:5c:29:bf:fe:f7:
ac:4a:6e:9a:9a:6c:d6:76:0f:f2:00:70:54:f0:2c:
a9:71:23:74:c5:98:2e:5a:1f:43:2f:07:c3:d9:6b:
a7:2e:e2:cd:46:a8:9c:66:d7:c7:4a:57:9d:32:4e:
3a:94:b7:d6:d7:bb:63:61:00:14:91:ce:e7:d0:58:
d9:4a:fb:9a:44:1d:f7:5b:11:5c:dd:68:a1:8f:be:
23:26:77:d7:05:04:76:b3:8a:4d:af:97:5a:9c:ea:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5C:06:63:55:97:7A:BB:D4:9D:FE:8A:CF:01:D4:F8:41:55:92:FF
X509v3 Authority Key Identifier:
keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f0:91:b0:a4:4a:43:4a:6a:e7:f6:a7:77:cd:a5:19:62:c6:
43:1d:65:00:6b:6f:d5:e1:e8:b5:b4:60:cb:79:5e:3f:0b:3b:
61:be:ff:ac:d4:3c:a0:7a:5f:cc:3a:05:b8:8c:ce:de:4f:7d:
1f:da:1c:c1:d2:92:0b:9b:75:96:a8:24:28:11:79:fc:0d:7e:
23:ce:c9:05:f1:5c:c5:71:a5:f8:ec:ea:8f:c7:6e:22:ed:f3:
1e:aa:d4:b2:b6:26:e8:d6:59:99:20:89:1e:51:a3:a7:e8:75:
91:39:2e:48:61:38:bf:e0:98:0e:34:3e:7f:76:35:b3:23:7b:
04:b6:b8:d5:78:63:3f:f0:bf:c1:75:59:6f:10:3b:b1:72:bc:
2d:8a:a2:49:33:9d:59:b7:a9:d7:e0:8b:52:94:b8:34:28:55:
bc:4f:0c:42:78:fe:99:c9:51:08:b2:9a:b1:c8:5c:0d:1c:2c:
2a:b4:6f:71:88:a7:b6:d8:d5:06:d8:00:8a:43:0b:b0:b5:c5:
06:61:c2:46:ba:db:fc:2b:ae:51:86:05:78:25:e9:0a:ff:f9:
6b:c7:e2:6a:d6:dc:39:38:49:78:c4:e5:90:0f:15:13:0c:be:
66:f1:8a:46:2a:8e:f5:2e:5c:38:4b:4a:cf:23:0b:53:cf:29:
1b:e3:5f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:26 2025 by rpki-client