Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
File: CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft (raw, json)
Hash identifier: mi3egl6Fwu69nQZ1DMn02gvNbiu0H5L3dhS8/epqKPI=
Subject key identifier: A1:B1:A0:85:F3:CC:3B:86:56:37:98:39:E6:6D:70:27:2B:37:75:C8
Authority key identifier: 08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
Certificate issuer: /CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Certificate serial: 0196857FDF063BF70BD91F6A478388BC6FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
Manifest number: 09B0
Signing time: Wed 30 Apr 2025 07:01:11 +0000
Manifest this update: Wed 30 Apr 2025 07:01:11 +0000
Manifest next update: Thu 01 May 2025 07:01:11 +0000
Files and hashes: 1: CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl (hash: d+Gipny26M+c+n1XYQo9ekqnNqxpHqxOtYggPcCuTQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:df:06:3b:f7:0b:d9:1f:6a:47:83:88:bc:6f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Validity
Not Before: Apr 30 07:01:11 2025 GMT
Not After : May 1 07:01:11 2025 GMT
Subject: CN=a1b1a085f3cc3b8656379839e66d70272b3775c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:20:c3:ec:20:99:cf:08:2d:7a:e1:dc:db:
b4:14:48:b1:96:e8:e2:a8:70:5e:cb:9e:f4:69:b2:
df:e3:e8:c9:99:cb:50:5d:eb:2f:39:c7:ec:4a:7b:
cb:7d:26:c4:0b:7f:71:8b:81:31:f4:80:2d:44:de:
42:d9:50:a5:74:17:9b:66:85:da:5f:84:65:aa:56:
19:6d:bc:a9:cd:a9:f7:d3:ec:f3:12:3f:62:ee:a6:
7b:ae:b4:29:63:2e:88:4c:e2:a3:f1:aa:8e:e1:6a:
9e:24:e2:25:6b:b3:16:51:f2:14:1d:cd:7f:ce:e3:
49:94:bd:94:57:f2:da:29:42:48:33:60:c3:ff:bb:
15:d3:95:8e:c8:18:56:f9:f6:31:79:6a:c3:68:8f:
41:b2:f0:31:e4:47:5d:1b:fa:a1:5e:ab:28:6e:cb:
10:ce:76:12:b4:64:88:79:27:be:27:93:8b:18:e3:
a3:78:6e:34:81:f9:a4:22:5c:53:85:10:23:e8:27:
47:1a:3d:a4:5d:8c:d7:4e:54:48:5e:6b:a4:f0:f8:
2e:63:a3:ff:71:86:8c:70:9e:b6:67:3b:b5:e4:42:
af:99:85:43:a7:1a:69:f2:9e:52:75:60:73:0d:13:
db:4e:ab:30:37:25:26:22:9e:6b:4d:d4:a3:06:76:
28:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B1:A0:85:F3:CC:3B:86:56:37:98:39:E6:6D:70:27:2B:37:75:C8
X509v3 Authority Key Identifier:
keyid:08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6f:a0:3a:52:39:84:0a:26:fe:25:ae:f1:8f:d0:30:b7:94:
5d:f5:f9:46:06:6b:35:17:1d:a0:06:79:9c:4e:33:3c:08:8d:
89:a0:7d:a0:6c:1a:ae:81:af:86:1c:e8:c0:ba:36:22:d8:60:
2a:20:53:3f:01:7b:17:ab:b1:b5:75:ac:75:cd:e7:47:e3:09:
da:8e:e9:2e:f9:4a:d9:24:65:21:c1:03:69:0e:7c:42:78:26:
2c:5a:6d:71:29:8f:5c:2a:ed:07:e0:53:71:c5:cd:56:b7:bb:
7e:9a:33:be:46:41:73:6d:6f:3d:c5:d6:70:53:bd:82:5a:ab:
0e:2f:18:62:87:f4:d3:cd:28:d8:91:b3:5a:47:ef:50:8f:dc:
8f:58:c7:99:0b:fe:23:9e:01:2c:da:b6:a2:48:ad:a9:53:e9:
51:1c:48:d9:d4:15:25:0a:e2:42:f8:a0:84:4e:10:80:72:6e:
11:1f:ca:5b:66:e5:3e:bb:4f:60:aa:16:72:1d:74:66:b9:fa:
a1:a4:06:0a:67:1c:7a:03:bb:cb:9a:6a:f9:13:8d:a8:0f:9b:
65:68:00:31:8b:87:fb:c1:58:89:d3:72:7e:57:43:ac:2f:0c:
b5:7c:c9:28:df:cc:b9:8b:20:fa:b1:13:7b:46:b4:5f:9f:cc:
e3:d8:90:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:04:59 2025 by rpki-client