Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
File: JOmh8SqE1TJSY3_4XW646xY2OT4.mft (raw, json)
Hash identifier: 7MSfG6lY5xaUd/ur13KSv/1I02sptRpSvvT2lvZb3uc=
Subject key identifier: 46:70:A6:FA:36:0B:C8:F0:AD:6C:CE:3A:4C:78:3F:7B:14:D7:76:E0
Authority key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
Certificate issuer: /CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Certificate serial: 019683FF41260A78C79DDC747C16E43F61B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
Manifest number: 1513
Signing time: Wed 30 Apr 2025 00:01:05 +0000
Manifest this update: Wed 30 Apr 2025 00:01:05 +0000
Manifest next update: Thu 01 May 2025 00:01:05 +0000
Files and hashes: 1: JOmh8SqE1TJSY3_4XW646xY2OT4.crl (hash: 0FtO94wIumjYJPUUyelAiG20PJzlWhodvGT2pdvni8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:41:26:0a:78:c7:9d:dc:74:7c:16:e4:3f:61:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Validity
Not Before: Apr 30 00:01:05 2025 GMT
Not After : May 1 00:01:05 2025 GMT
Subject: CN=4670a6fa360bc8f0ad6cce3a4c783f7b14d776e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:eb:a9:10:b7:c9:6d:19:14:a7:b3:38:6e:
79:8f:98:42:2a:4f:2e:fd:f7:0c:0e:e7:cc:e0:a6:
1d:8c:a4:ce:4d:8d:e1:9a:98:a4:ae:34:70:a5:4a:
d8:57:c0:fc:ee:70:ab:52:bd:ec:0a:83:b1:e0:fc:
2a:ca:cd:09:74:29:e2:de:47:99:c1:3d:5c:03:00:
f8:6a:c6:ed:c8:d5:0c:5b:4e:68:9c:c4:5a:b5:8c:
6e:a1:a6:85:b6:e8:7c:21:62:e6:51:30:7e:b9:37:
f4:f8:ef:68:93:45:ba:8c:88:35:cc:91:93:b0:61:
d9:2c:7c:bb:9f:ae:3b:d1:f6:75:22:fe:3c:2b:71:
ba:a8:c2:a8:2b:a5:e5:9c:89:cd:ca:57:78:05:91:
b9:c3:51:29:48:91:a4:1e:0e:26:36:81:f9:21:10:
29:c5:d8:fd:d5:8e:9d:7f:2f:b9:87:75:ca:7d:5e:
04:ce:64:0c:c2:30:cc:44:53:13:23:e5:c6:83:0b:
19:ed:0f:f2:43:5d:05:85:2c:e8:9f:0f:58:12:3b:
fc:6a:07:90:c6:fb:ef:76:56:de:35:87:bd:22:61:
80:df:1f:ee:12:db:25:37:1c:59:41:16:14:33:6c:
b5:d3:6a:54:42:57:39:e2:49:94:01:ff:ac:51:4b:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:70:A6:FA:36:0B:C8:F0:AD:6C:CE:3A:4C:78:3F:7B:14:D7:76:E0
X509v3 Authority Key Identifier:
keyid:24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cc:22:44:79:c1:b4:47:70:11:c4:be:df:c0:88:f0:4c:75:
84:20:e2:02:82:c3:36:57:fb:d3:1b:4d:d4:d9:ab:58:97:17:
d0:ee:1f:b1:d7:33:5c:1a:51:5e:bf:5b:4b:1e:69:a5:d8:28:
ec:aa:f7:65:bf:3a:f7:b9:3c:85:c0:8b:92:12:ae:2c:76:e8:
3e:6d:92:cb:39:b5:e5:37:25:62:26:4d:87:e2:1f:57:93:c6:
b5:e6:69:af:fc:23:c3:ff:02:bb:af:8b:bc:26:08:31:89:e9:
ba:7d:4a:cd:60:e3:4c:f3:0a:eb:49:28:10:5c:5f:06:87:c1:
a1:84:32:c3:39:3f:40:18:25:db:29:4c:ef:76:20:11:fb:c6:
87:29:7a:14:b6:19:c8:c5:73:28:e6:17:3b:8d:90:69:7d:54:
21:ee:44:22:b2:cc:ec:d9:01:4f:2b:34:76:af:ff:b9:ce:ab:
0c:14:4b:14:9d:37:3b:b9:1f:27:51:79:05:09:80:20:26:73:
e1:b2:db:26:55:e8:5c:95:c3:a1:15:d9:33:db:c7:e2:48:28:
ff:06:3f:6a:e1:8a:02:30:79:bb:37:87:59:0d:79:f2:81:8d:
55:a6:38:00:75:aa:9c:ee:7d:f0:49:a7:65:9f:51:89:5e:54:
52:04:41:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:41:57 2025 by rpki-client