Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
File: JKtnE2v5kKqL6IV6aNLDmezWKZo.mft (raw, json)
Hash identifier: sKvyLma5g+8uHtpf8ynsl1v+E0g2bUjQ+VFWJBH1q9k=
Subject key identifier: 8B:2F:46:50:BB:77:14:84:14:83:0D:2C:9C:11:6D:3E:9F:5C:9F:77
Authority key identifier: 24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
Certificate issuer: /CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Certificate serial: 019678688EC5D1C75002B0174C7599F8D375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
Manifest number: 149F
Signing time: Sun 27 Apr 2025 18:00:40 +0000
Manifest this update: Sun 27 Apr 2025 18:00:40 +0000
Manifest next update: Mon 28 Apr 2025 18:00:40 +0000
Files and hashes: 1: JKtnE2v5kKqL6IV6aNLDmezWKZo.crl (hash: aZB4+i8kBYqDG3I6neIeeXVHPdzCgTbXreEaDhzYsEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:8e:c5:d1:c7:50:02:b0:17:4c:75:99:f8:d3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Validity
Not Before: Apr 27 18:00:40 2025 GMT
Not After : Apr 28 18:00:40 2025 GMT
Subject: CN=8b2f4650bb77148414830d2c9c116d3e9f5c9f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bf:3b:54:9f:f4:0b:36:bb:04:f9:e4:72:0f:
7b:d7:64:20:2f:fb:d5:f5:81:98:36:de:70:7b:0c:
81:3f:40:ff:c6:9a:e1:81:a4:11:9b:a2:28:6d:1f:
32:3d:36:00:db:db:4f:e0:32:90:ba:8e:35:de:46:
37:85:d1:ef:f4:b0:1f:7c:e8:97:55:a5:8b:87:4b:
d8:c7:d1:59:31:6c:c1:09:b1:bf:6e:af:2f:d8:74:
4f:c6:1e:dd:44:b9:ec:63:5e:48:cf:0b:fc:98:b3:
0b:1c:df:19:27:d8:42:c0:e9:a2:eb:f1:b7:7b:e1:
25:0f:90:2a:fc:d6:83:af:4c:f6:a4:b3:73:49:17:
d4:d2:e2:cf:2a:49:ef:ad:a4:3d:74:62:fd:72:a3:
d1:32:9b:ff:f7:66:6d:86:f5:95:2a:88:57:cd:33:
5b:cf:ea:42:69:9a:6d:1d:5b:87:a6:1b:af:4f:d7:
8b:00:62:eb:d3:85:d1:8f:69:25:2a:fc:ee:08:3f:
ff:bd:b0:76:05:d1:84:54:b2:c4:0a:ea:d1:9a:81:
99:bc:90:b7:51:f0:14:bb:5c:a9:f7:e2:2e:15:fb:
84:57:71:08:6a:13:ef:58:96:95:a0:64:d6:58:99:
f2:27:2b:2c:6a:50:cb:00:0f:1a:9e:21:ee:c0:e4:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2F:46:50:BB:77:14:84:14:83:0D:2C:9C:11:6D:3E:9F:5C:9F:77
X509v3 Authority Key Identifier:
keyid:24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ee:ef:87:4a:fc:0a:dc:9f:15:69:62:2c:59:95:15:a1:d6:
2e:e9:28:e3:11:3e:cc:60:b1:8d:0a:14:35:0c:cf:aa:26:8c:
e8:41:f4:5a:08:81:21:0e:c0:61:12:9b:29:91:12:43:3a:de:
6c:51:32:e9:79:d4:86:44:6a:26:27:e0:e3:0f:44:1f:25:ed:
9e:98:93:58:7b:53:7e:08:b9:bc:d5:18:57:6c:f3:ab:36:68:
c1:c8:67:83:88:21:2f:32:9c:74:ff:c3:1d:17:92:0e:ee:ea:
f5:12:5c:4f:c9:7c:33:99:dc:f8:29:8f:9e:6a:0c:21:b3:c7:
a5:7a:f2:1e:49:98:e8:15:75:11:85:4b:c0:d7:1e:03:f7:f3:
74:a4:50:f1:8a:be:3b:de:4a:3a:52:a4:27:0c:64:98:17:28:
f0:5a:a3:bf:76:0a:6c:8f:b9:7f:7a:cd:83:cf:54:6f:72:d7:
7c:a8:73:03:89:a3:de:a8:9a:55:98:f7:84:da:11:b8:33:7a:
ae:aa:dd:3e:72:a7:c4:02:92:85:eb:65:bd:73:3e:00:42:9f:
c9:4e:dc:18:21:d4:e6:9b:8f:6e:08:0d:a2:9f:7a:45:82:08:
a7:fc:42:f3:19:10:73:d1:b6:83:f2:d0:7b:20:b1:e7:30:26:
67:42:5c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:23 2025 by rpki-client