Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: /YqbCUvujOSu+P09Ayf5gx3NsQOanWBm7zEfETgsFRg=
Subject key identifier: 3D:F5:5D:82:27:AA:9B:55:E5:9B:01:BB:BF:64:1C:0F:27:53:EF:C3
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 0196B47D6F3C476C6CE315B5DD5D055DF4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 1531
Signing time: Fri 09 May 2025 10:00:41 +0000
Manifest this update: Fri 09 May 2025 10:00:41 +0000
Manifest next update: Sat 10 May 2025 10:00:41 +0000
Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: TAGrvMihzN6BQHKbC9K9uQb4/hQxCs80N5Xp4sIJb3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7d:6f:3c:47:6c:6c:e3:15:b5:dd:5d:05:5d:f4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: May 9 10:00:41 2025 GMT
Not After : May 10 10:00:41 2025 GMT
Subject: CN=3df55d8227aa9b55e59b01bbbf641c0f2753efc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9c:90:c4:5a:81:66:e2:9e:08:71:8c:3a:04:
65:73:2c:7d:33:a0:66:c6:ea:a7:73:7f:6f:14:e1:
48:47:7d:08:3c:48:0d:c0:23:a9:25:ce:f9:96:0d:
b6:80:41:0d:19:18:00:55:16:a6:43:73:53:4a:ab:
49:1d:19:6b:3c:81:dc:12:8c:c9:db:f5:2d:d9:fd:
4b:96:94:a6:b3:c7:67:fe:2c:ec:cb:5c:01:71:4b:
04:01:69:24:cc:84:03:48:31:6b:de:35:9b:4d:c9:
07:60:52:7a:28:b2:83:32:dc:7f:3c:f0:9d:3b:0d:
0d:de:d6:32:6b:43:4c:1d:a9:4a:ff:ee:d0:42:49:
0b:af:72:32:54:c4:f7:4f:8c:63:58:b8:df:b5:5c:
ff:5b:e4:53:53:0a:ae:9d:4a:0d:f6:4f:61:01:29:
49:45:65:dd:8b:72:c6:c9:ec:6b:fd:ce:10:f6:52:
c0:ab:87:cf:c9:37:48:78:30:1e:57:d1:60:7a:16:
20:e0:95:b9:44:5b:d3:ab:aa:b1:8a:61:30:23:90:
46:90:48:3f:b2:9a:67:2a:3b:a4:94:2a:b3:ab:18:
0d:92:77:fe:77:e1:84:c7:88:08:ac:a8:3a:f5:9b:
0d:8c:83:ea:82:f4:d7:cb:f1:b4:89:3b:26:e7:e1:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F5:5D:82:27:AA:9B:55:E5:9B:01:BB:BF:64:1C:0F:27:53:EF:C3
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6f:b2:d3:cb:73:59:d6:c1:e4:a3:75:08:a6:ec:de:e8:7e:
25:8c:4a:68:1c:2b:ae:0d:1e:3f:bf:2f:69:e6:d6:f7:40:5c:
51:e5:0c:d0:ae:b4:3c:7d:42:f9:3a:94:a6:8a:a9:bf:4c:26:
68:21:6a:8c:7b:00:4c:d4:7b:73:34:25:cd:2d:af:fc:8b:a6:
7a:cd:02:d8:88:53:ee:70:74:df:be:5e:35:8f:e2:fa:ca:5f:
c1:cd:d5:5a:9c:6e:15:b3:f8:2d:b1:2b:b4:8b:e5:ab:b4:f5:
58:8d:e8:67:bf:e5:df:98:a0:5e:fc:d4:96:28:33:eb:42:3e:
a2:12:70:71:85:ff:51:75:79:99:8a:26:71:2b:63:f4:a5:d0:
b1:d9:4c:ca:72:7c:70:0e:ee:4f:3c:e5:af:49:65:55:d5:e0:
ea:a7:7c:8f:a8:e6:92:db:c7:88:08:ba:4e:71:d7:2e:6e:31:
38:7b:70:27:18:60:28:dc:27:b7:c5:8d:db:2f:8e:62:85:4a:
cb:08:43:3e:1c:7e:3a:e9:67:ce:ac:6f:1c:40:7e:e9:d5:5d:
b2:0d:84:1a:8f:b3:e8:49:1e:3f:07:76:f2:78:f1:ee:f7:b7:
cc:29:3c:6c:2e:3f:00:b3:6d:12:3f:0e:5a:da:8e:9a:5c:a7:
7c:09:02:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:47:39 2025 by rpki-client