Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File: CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier: txa+qkWNYO7ns02O62hG1njYAtrIqzCdz3Rfs6lW0oc=
Subject key identifier: A1:B7:27:7F:3E:0B:1A:EE:51:07:50:D1:91:82:C3:61:5A:CF:3C:6C
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer: /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial: 01976D3E8D2AF0B1805C120F726B1D15EDEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 07:01:45 +0000
Manifest this update: Sat 14 Jun 2025 07:01:45 +0000
Manifest next update: Sun 15 Jun 2025 07:01:45 +0000
Files and hashes: 1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: zZPSMjY5uPJxBn9qFWh8+lvEYEz1u2jswHicV4wIqyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:8d:2a:f0:b1:80:5c:12:0f:72:6b:1d:15:ed:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
Validity
Not Before: Jun 14 07:01:45 2025 GMT
Not After : Jun 15 07:01:45 2025 GMT
Subject: CN=a1b7277f3e0b1aee510750d19182c3615acf3c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e2:e1:ee:ae:c4:87:eb:5d:63:b5:01:3d:e1:
14:6d:0c:7f:58:d6:6d:5c:63:d7:c2:c6:53:6b:d4:
9d:a6:cb:d0:3d:fa:cc:a8:34:0e:c5:69:ca:03:0f:
b6:db:fb:e1:d9:1a:51:52:68:5d:5c:cd:3b:96:a0:
33:c6:8a:c5:2b:db:44:b8:73:2b:c8:a3:cc:f6:25:
60:cb:3d:02:87:11:6f:66:21:a1:0a:94:d6:d4:db:
d7:1e:ab:6c:55:fe:81:6b:93:e8:0e:7a:90:e0:9c:
e3:02:1c:0b:f8:7a:b3:1f:85:9e:f8:0f:f5:21:82:
a2:c5:50:65:f5:fd:d8:74:36:1e:ed:64:92:0f:b2:
23:0b:61:c2:69:61:89:b1:9e:64:a4:2e:a3:23:87:
70:b6:ca:29:c9:ea:15:a2:47:fc:a2:65:d9:f9:1d:
90:8d:c0:04:99:cd:4c:b1:9d:5f:68:6f:eb:dc:f4:
f4:e6:ae:1b:0d:7d:a7:25:5b:2f:2e:20:62:4e:f1:
5f:59:e3:c8:a0:33:4c:be:22:b8:3a:3f:a1:e9:f2:
0f:94:99:05:9b:bc:8f:c4:42:b8:8a:a9:54:3d:68:
3d:34:b6:03:82:c8:70:3b:06:ae:a9:67:31:b0:fb:
f2:26:ac:9a:bc:76:da:8d:5b:ee:2f:e5:81:43:0b:
43:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B7:27:7F:3E:0B:1A:EE:51:07:50:D1:91:82:C3:61:5A:CF:3C:6C
X509v3 Authority Key Identifier:
keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:34:79:85:26:0d:4b:7e:3d:16:cf:47:06:25:3a:61:8e:85:
c5:cd:0a:11:c6:57:4e:7a:5e:9a:77:d2:29:1e:99:65:ec:a6:
1d:bf:51:60:00:81:d3:da:4c:48:d6:99:59:5a:fb:a8:18:b3:
54:49:a3:e9:2a:45:4c:ec:5e:fc:46:58:30:15:3f:5a:e8:59:
8a:46:06:91:f2:ba:4d:fe:84:3e:ea:0d:57:13:fd:ac:20:64:
40:42:0d:71:e2:5e:1e:65:59:6e:20:e0:de:ac:41:af:1a:f1:
6e:be:d0:72:f5:d4:d5:53:43:5c:9f:33:6c:30:82:d6:32:90:
1e:96:79:9d:e0:35:8d:46:09:f1:4d:d8:04:8a:6f:44:21:0b:
c3:87:a8:b6:f6:64:02:ee:88:cb:7a:14:b3:13:bb:3e:bc:c6:
4b:05:00:8b:d2:fd:6e:2e:e0:de:5a:2c:13:4c:68:2f:62:cf:
3b:4b:0e:5d:7f:ed:49:10:b4:58:0d:4f:1c:df:3e:75:ff:cb:
ba:85:99:3f:fd:c4:10:53:c0:74:18:1c:ea:33:08:1b:00:1b:
92:eb:50:b3:07:e8:01:28:78:70:26:e6:fe:38:6d:c4:34:d0:
5d:98:6a:ba:ea:fd:26:70:d9:e8:a5:a6:ce:e2:bf:42:62:1b:
d4:70:6c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:34:19 2025 by rpki-client