Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json)
Hash identifier: z3r7BsMKihu43SJ7OKmPVFnA8k1lUmG3rp8MjOQ6+xs=
Subject key identifier: E8:B1:B3:7C:A3:85:C0:F5:50:4D:45:AA:D0:DB:54:81:10:CA:40:56
Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Certificate serial: 0196E0441D50A2466D14BE00A65A52E89E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
Manifest number: 124A
Signing time: Sat 17 May 2025 22:01:22 +0000
Manifest this update: Sat 17 May 2025 22:01:22 +0000
Manifest next update: Sun 18 May 2025 22:01:22 +0000
Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: Ytw4eo0AO1tf+Jz9Uj15uLVSrzCr37ac419Anb2J5uY=)
2: b5Jj4qgundIuSAAGFCkt8JiFnho.roa (hash: 06WuFnYu9V9s1QGtR8S6F/K40CDV7ycfNQPEsDlVYUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e0:44:1d:50:a2:46:6d:14:be:00:a6:5a:52:e8:9e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Validity
Not Before: May 17 22:01:22 2025 GMT
Not After : May 18 22:01:22 2025 GMT
Subject: CN=e8b1b37ca385c0f5504d45aad0db548110ca4056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:dc:6c:e8:91:00:a3:10:3e:6a:a1:1c:67:
32:12:7f:0e:43:a4:c4:18:40:91:85:56:50:5b:44:
53:1d:57:f6:78:65:0b:4f:77:45:ee:bf:fb:b9:3a:
6e:0d:99:3f:fd:68:70:da:8e:d8:41:73:0b:0e:65:
71:ca:c1:55:0a:0a:f8:56:68:e7:ee:fb:69:75:c1:
58:70:3a:45:ad:51:0a:73:72:77:b2:02:28:0e:88:
10:78:99:52:18:91:22:d9:5e:f2:82:e1:1b:10:ee:
79:ba:ce:df:b4:59:fc:c8:b6:ab:7e:8f:29:71:ea:
2e:bf:0b:1a:5c:a1:f0:ca:c0:9a:ec:24:a1:4e:9f:
79:8a:65:07:ec:42:a2:77:20:07:99:ee:74:19:7a:
fb:5c:90:6e:7b:65:f5:c7:c7:64:51:8c:d1:7e:83:
ed:cf:a1:3c:05:c0:aa:d3:80:db:fb:f8:97:08:57:
d9:61:ee:16:19:d1:ba:34:c0:8d:f7:60:4a:e2:fd:
85:8b:8d:29:6b:c2:73:c6:08:42:58:00:2b:b6:08:
9f:1a:e0:c8:24:81:e5:a8:bc:86:1c:ea:95:1d:3f:
40:d3:34:44:77:3b:6e:ba:a3:b8:2b:2b:56:e4:b7:
dd:23:eb:69:e4:4f:40:fa:04:70:42:65:09:81:5b:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B1:B3:7C:A3:85:C0:F5:50:4D:45:AA:D0:DB:54:81:10:CA:40:56
X509v3 Authority Key Identifier:
keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9f:66:c4:56:57:5f:ef:09:9b:5e:13:d4:bc:ee:90:c6:f1:
76:67:ce:f6:7f:8f:f5:b8:6c:5f:87:61:b0:c2:5f:f2:50:eb:
18:78:d7:db:bf:72:9e:d9:d7:8c:13:a8:b8:5b:45:3a:5e:fc:
3a:27:d2:e9:ca:8f:76:e3:07:d3:30:9c:92:77:3f:21:26:e4:
0e:8e:e8:d2:f4:59:48:70:bc:ff:cf:d0:50:a7:12:07:45:c3:
16:48:a3:2c:76:6c:38:0a:cc:44:cc:01:c8:85:3c:f9:c6:ab:
d2:62:2a:70:9d:f5:d9:fd:c2:9a:ac:2e:ec:ff:24:9a:db:c6:
d8:c2:ab:59:06:47:c2:1e:c2:6d:25:04:6e:c0:3d:7b:0e:7e:
4d:a1:68:92:4e:de:b9:ca:16:44:d2:0e:09:69:75:ce:dd:07:
db:28:0e:8b:4a:05:3e:cd:c1:c9:76:d5:b1:49:cf:8b:01:f4:
52:4b:85:0b:56:02:d9:d4:84:37:7a:95:3c:03:42:03:89:76:
ce:62:a9:9c:a3:9e:e4:c0:5e:ca:83:79:78:14:42:e0:52:73:
7f:5e:a9:94:0a:dc:61:dd:d4:58:4c:c7:28:38:8b:53:d1:56:
9b:fa:f0:c8:f3:6e:5f:98:b9:fc:9c:a8:db:55:db:f9:61:f5:
69:97:33:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:41:04 2025 by rpki-client