Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
File: JGv0aYcy2l-8fCAC9jlnxo9W22w.mft (raw, json)
Hash identifier: GweTVncymOXiuBYZ5ARzMtjmwPS/XQPl9+P/AuMFprA=
Subject key identifier: 40:9E:FB:7B:F8:D2:9B:DA:FA:F0:E0:C6:3A:F6:74:CA:88:27:CC:55
Authority key identifier: 24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C
Certificate issuer: /CN=246bf4698732da5fbc7c2002f63967c68f56db6c
Certificate serial: 01968134B300B8F8477F1F5CC43344678D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
Manifest number: 73
Signing time: Tue 29 Apr 2025 11:00:36 +0000
Manifest this update: Tue 29 Apr 2025 11:00:36 +0000
Manifest next update: Wed 30 Apr 2025 11:00:36 +0000
Files and hashes: 1: JGv0aYcy2l-8fCAC9jlnxo9W22w.crl (hash: NFwq0SGduTdYJCVT8x+W1OMN0y5gX0zx6Tx99N1Sv8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:b3:00:b8:f8:47:7f:1f:5c:c4:33:44:67:8d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246bf4698732da5fbc7c2002f63967c68f56db6c
Validity
Not Before: Apr 29 11:00:36 2025 GMT
Not After : Apr 30 11:00:36 2025 GMT
Subject: CN=409efb7bf8d29bdafaf0e0c63af674ca8827cc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:ed:d3:d9:2a:47:3e:54:ea:3f:b8:ee:81:
8a:13:ae:6d:74:fd:f4:45:37:11:2c:e0:1c:2f:ac:
ec:df:a5:74:d1:96:64:92:b2:1f:3e:10:24:3b:9a:
9d:50:70:ef:92:ba:a4:3e:5f:f6:f3:de:97:a0:e0:
d4:29:7c:07:a5:8d:43:48:c2:e0:ef:e3:d6:e1:18:
d5:42:97:72:5b:60:c4:ad:57:1e:e0:f6:48:9f:31:
69:18:1a:5c:77:91:61:00:11:13:a3:97:08:89:32:
6b:ec:1c:b3:dc:cf:5b:00:96:f3:63:07:9f:46:77:
11:3e:2c:8c:9e:68:9e:56:b0:8b:35:f2:86:3a:29:
e2:6b:45:06:5f:85:b8:02:55:d9:26:02:ab:6b:6b:
04:c3:13:50:f6:3c:58:a5:70:63:74:56:d9:72:69:
7a:a5:25:51:61:54:61:3c:ea:6b:8f:f0:80:74:94:
75:13:f0:81:94:b3:b7:c5:85:65:c1:cf:02:4d:f6:
e9:48:3e:67:7c:67:0d:e1:6b:1c:ba:e6:2e:98:bf:
b9:f5:55:31:99:ce:3d:d2:8d:45:05:81:43:c7:77:
6e:26:3c:f4:fd:a7:4b:7a:d9:22:97:9f:c8:b8:08:
85:90:04:e4:55:78:74:2a:55:f7:c3:58:e0:c7:7e:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9E:FB:7B:F8:D2:9B:DA:FA:F0:E0:C6:3A:F6:74:CA:88:27:CC:55
X509v3 Authority Key Identifier:
keyid:24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d0:ae:64:d4:3a:14:10:eb:4b:53:70:23:ee:7d:94:4b:82:
07:8b:5a:7e:38:0f:de:88:7e:37:d7:62:ba:9f:a5:c1:27:5a:
5f:5b:9c:9c:b6:ad:16:04:91:60:8b:73:f2:c1:bb:54:3f:de:
eb:6a:9d:7a:66:4e:67:0a:43:eb:79:6b:04:38:a5:89:a5:82:
51:1f:cb:85:a1:d1:3c:af:e4:d4:c5:15:1b:05:f3:87:07:c3:
d6:4e:0d:e0:ed:75:ef:47:7d:7f:f5:b4:f6:38:74:bc:95:29:
ee:b0:d6:35:21:08:68:c5:ca:b2:d4:26:33:c2:c6:23:ac:19:
61:95:d2:cd:19:13:68:5b:47:f1:3e:5f:d8:3d:bd:ad:6a:ac:
45:9f:a3:f3:31:45:2d:85:de:da:c4:83:c2:e2:55:f9:44:37:
15:74:a0:b0:9a:29:d8:ee:88:9b:3e:fb:7c:bc:fd:ea:da:3f:
7c:7d:a1:b0:f1:05:03:1d:76:d2:dd:db:68:91:15:29:07:ee:
42:2e:1e:c3:31:0a:41:0f:cc:cd:f5:da:d7:46:51:79:69:51:
d5:ec:37:ea:48:e5:d1:d6:67:37:39:78:cd:22:0b:bb:9c:90:
90:b5:57:13:e2:f6:bd:c4:fc:bd:fd:16:29:fd:1e:32:b3:f9:
d5:2c:31:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:00:45 2025 by rpki-client