Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
File: jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft (raw, json)
Hash identifier: J2ludUiSORuNz6oxGD8clTW5bAtFV9nyectYu6JfjHc=
Subject key identifier: 67:AF:DE:D5:B8:EA:AA:1B:33:3B:C0:E1:74:43:7C:66:D7:0D:7D:90
Authority key identifier: 8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF
Certificate issuer: /CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
Certificate serial: 01967FB48A3C899FB0CE5B56E0B75A567D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
Manifest number: 121D
Signing time: Tue 29 Apr 2025 04:01:00 +0000
Manifest this update: Tue 29 Apr 2025 04:01:00 +0000
Manifest next update: Wed 30 Apr 2025 04:01:00 +0000
Files and hashes: 1: jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl (hash: +4XHqspkI/2+8G7HeO/nEQ6kTc+TWXTRpjqL7jwmtWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:8a:3c:89:9f:b0:ce:5b:56:e0:b7:5a:56:7d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
Validity
Not Before: Apr 29 04:01:00 2025 GMT
Not After : Apr 30 04:01:00 2025 GMT
Subject: CN=67afded5b8eaaa1b333bc0e174437c66d70d7d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:d0:36:0f:74:bc:db:bc:92:1c:e0:72:5d:
30:bc:d2:ab:90:dd:b2:3b:dd:51:f6:70:0f:e8:ba:
fd:b8:8b:ef:04:28:b0:f8:9a:4f:82:70:31:df:54:
5f:57:0a:40:c8:4c:ad:8f:ab:59:ad:43:d8:60:28:
03:a9:fc:30:e8:cc:45:d8:bc:00:c2:c5:e4:1c:e9:
08:d8:a3:15:50:d6:71:b0:df:39:0c:35:a9:14:2f:
c5:45:70:29:5f:d7:de:f5:40:f2:bd:03:a6:d6:90:
50:52:96:6f:76:ed:db:c1:8e:93:b8:18:cc:7d:1e:
5e:44:5c:e4:a4:75:20:9a:9d:a5:93:af:a1:48:8e:
2e:90:7c:85:06:80:05:d9:4e:56:e9:ca:d3:81:f1:
1b:c4:e0:b0:b6:04:17:d2:cb:48:b6:2f:43:fb:ef:
6a:d1:0f:b7:34:1e:1b:09:73:82:00:08:a0:0a:e0:
58:2d:c1:5c:09:b5:76:c0:ac:ea:7f:06:74:67:fe:
d9:ca:b5:75:37:54:28:ea:ea:6f:01:bb:c0:c7:3e:
ac:35:7d:56:eb:fb:70:6f:f9:34:e4:ea:52:31:d4:
da:15:d0:c3:d9:6b:62:84:52:54:f5:e4:5d:dd:72:
2b:33:9e:f7:6d:40:10:d0:70:64:a6:5e:6c:da:c0:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AF:DE:D5:B8:EA:AA:1B:33:3B:C0:E1:74:43:7C:66:D7:0D:7D:90
X509v3 Authority Key Identifier:
keyid:8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:16:a1:ca:bb:08:2c:1e:4c:e0:0a:22:8d:7c:b5:30:b0:ac:
1d:05:3c:ec:be:33:76:5e:1e:50:ca:dd:5c:a3:86:b8:4c:5f:
fe:5c:d5:03:d0:c5:5c:85:a3:01:e8:15:4b:20:46:73:53:ac:
b9:24:18:8c:f0:98:89:8e:be:24:87:db:c2:14:11:07:e6:8a:
bb:8a:2d:01:46:77:91:8b:55:52:fa:8c:d8:2a:22:53:e5:c6:
b7:48:11:01:17:38:06:07:66:7c:07:14:70:16:16:ca:3a:e9:
4e:72:6c:40:b6:f0:40:bc:93:45:e0:6f:9f:22:8d:76:0d:de:
df:73:c2:29:b0:d0:5f:91:b4:cf:e4:c7:8d:72:c1:ac:c0:83:
bb:67:df:af:42:09:fd:86:5f:fc:47:b2:b3:30:d9:6b:d4:e0:
1b:9a:fd:8e:02:21:0d:ca:6d:2c:c9:b8:0d:e2:80:f3:bb:dc:
df:68:e9:85:b2:51:28:d5:96:79:95:ef:18:b0:78:d9:d3:ca:
91:25:c5:1c:0c:07:68:30:94:a2:76:e0:6e:41:70:ef:15:06:
42:36:dd:5e:71:90:70:36:ae:77:17:ec:99:26:a1:c8:e2:72:
c5:07:30:ab:03:10:78:b0:65:5a:af:53:4e:b3:23:09:68:fd:
b0:9b:14:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:32:55 2025 by rpki-client