Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json)
Hash identifier: hHxYcw4TrZaWBQqAVhZWldj6EcOCzhSygUJDYBuVFIY=
Subject key identifier: 88:AD:A2:9F:23:D7:13:27:0F:66:EC:63:0D:15:72:AC:B0:5E:C1:B5
Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Certificate serial: 019678D6CA7D143ED5937D6A7A8C016B5042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
Manifest number: 067A
Signing time: Sun 27 Apr 2025 20:01:04 +0000
Manifest this update: Sun 27 Apr 2025 20:01:04 +0000
Manifest next update: Mon 28 Apr 2025 20:01:04 +0000
Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: i1zifVarjMZu0tVLcnp84Si7FLM4cY6lqksoPVi/nzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:ca:7d:14:3e:d5:93:7d:6a:7a:8c:01:6b:50:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Validity
Not Before: Apr 27 20:01:04 2025 GMT
Not After : Apr 28 20:01:04 2025 GMT
Subject: CN=88ada29f23d713270f66ec630d1572acb05ec1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:e2:f3:01:4f:8f:06:d1:e9:d4:41:c8:11:
e6:3f:d9:05:0b:68:f5:31:db:d2:c1:f4:4f:63:50:
7a:e9:03:d6:af:7a:c6:50:44:c2:de:27:4a:f3:3e:
a5:21:41:7f:ac:b4:57:5d:98:30:45:12:78:83:14:
43:cd:5f:ee:cb:42:e0:75:b6:aa:1e:7a:c5:7a:e2:
1c:f9:ca:65:72:88:19:2b:cb:f6:2f:ee:f2:d1:73:
28:91:81:68:59:89:0a:45:5c:d4:c4:97:a0:28:ec:
10:96:a2:54:ac:8e:60:5c:da:ba:75:89:24:75:6b:
2c:56:6c:9e:26:39:97:f7:6c:5f:a9:91:cf:d6:36:
1e:52:45:57:ae:f4:68:93:3b:db:d4:cc:7c:95:8c:
99:25:84:e4:5f:d3:23:aa:f1:6a:3a:98:de:e7:28:
15:4b:23:ad:63:7f:c4:47:93:96:86:7c:4b:7d:da:
31:ec:b1:c6:41:22:7b:fd:9a:df:78:f5:5a:ef:f1:
8d:41:9d:25:1d:9c:bc:3e:74:d1:09:ac:dd:62:3b:
e6:eb:20:3e:d0:9e:71:df:0a:f0:bf:99:be:54:dc:
61:43:f1:e9:6f:01:04:ce:40:b2:49:f0:0b:65:cd:
9d:c9:ab:c3:e5:d2:53:43:76:3a:70:cc:fd:8a:42:
b9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AD:A2:9F:23:D7:13:27:0F:66:EC:63:0D:15:72:AC:B0:5E:C1:B5
X509v3 Authority Key Identifier:
keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:df:b6:7d:6b:be:51:6f:9c:23:33:fa:59:9c:4b:04:a2:8d:
11:19:8f:e8:63:bb:e1:6e:3a:95:e5:49:4e:62:1d:be:64:fa:
b8:bb:2a:bd:a4:cb:73:87:e1:eb:88:c3:0e:8a:1b:a9:3c:5c:
10:f7:0e:d1:c7:b8:06:0d:3e:b1:72:18:4f:59:22:01:10:f5:
59:f3:40:99:fe:f5:c1:1e:a0:1e:3c:35:9f:cb:17:4a:54:eb:
09:43:9e:5e:bc:6b:e4:27:9e:cf:99:fd:41:ee:b8:f1:d7:6f:
31:15:a8:db:4b:4d:f4:ee:31:79:2f:af:a1:17:83:fb:3b:d7:
eb:62:6f:ee:3f:d4:21:72:5c:e4:03:de:53:c3:4a:56:7c:76:
92:09:6f:60:2b:fa:55:5c:11:2d:02:8b:41:43:bf:73:99:c4:
2d:4a:39:2a:4e:e5:18:aa:7d:93:5c:08:c5:30:b4:60:56:19:
92:9c:5e:58:6b:fe:70:79:1e:fb:69:b1:56:02:de:b0:c0:5d:
19:1f:eb:ab:fe:a3:fc:e2:7b:41:7c:e0:99:ba:a8:49:51:dc:
13:c9:89:28:5f:aa:83:f9:21:c5:07:d2:07:56:6c:1b:d4:bf:
30:5a:56:81:aa:cd:10:f4:79:73:54:23:0f:1e:bd:3d:d5:e5:
42:b3:9c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:10:51 2025 by rpki-client