Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
File: CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft (raw, json)
Hash identifier: 6lY4IN0JiXOF55nmU0fbLATcD7NrEhpGTLt9j3DneAQ=
Subject key identifier: E3:75:A4:9A:50:10:03:24:4D:B7:5C:78:09:2B:09:3C:AB:53:C0:10
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 0194BABBB9E43676FB3CC4957120B782DDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 05:00:52 +0000
Manifest this update: Fri 31 Jan 2025 05:00:52 +0000
Manifest next update: Sat 01 Feb 2025 05:00:52 +0000
Files and hashes: 1: 42O1iZoBGp1jOHPAyMXxvPvoDeU.roa (hash: ILpdVDwxdnANxNv1MRsqh9OtUODOvMq2wiyDKUplG4U=)
2: CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl (hash: xyuwQ28DegFB5ODfyzJhbEPudz8QDzUZUJNFNC04kAI=)
3: wvbzAT4QZZepRUfQ4T7Iln3TOeA.roa (hash: CXPLC9jAIGl4uvFvse6iFeGoldePjaK1avRNgTMwS+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:b9:e4:36:76:fb:3c:c4:95:71:20:b7:82:dd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Jan 31 05:00:52 2025 GMT
Not After : Feb 1 05:00:52 2025 GMT
Subject: CN=e375a49a501003244db75c78092b093cab53c010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:3a:c2:45:da:f0:b2:b6:50:f5:5a:6f:cf:
5d:87:f3:2e:11:2f:18:24:ec:6f:c8:8b:36:0a:59:
2f:8b:a3:a1:6d:31:15:77:3c:54:c4:73:73:c0:8b:
e1:43:55:d5:46:62:6c:57:76:ac:51:42:05:c3:bf:
2d:b8:ed:d2:15:3d:34:20:10:76:5e:59:81:2d:df:
b4:b8:e3:77:be:33:ac:97:26:42:df:8a:a9:e0:c8:
da:a7:94:1d:2f:c4:ec:16:a9:19:0e:7b:46:d9:5e:
c9:25:23:39:6f:98:0f:8e:10:26:13:c3:37:f3:e4:
05:da:44:2e:cf:d5:ef:03:37:bd:af:c3:92:d0:6e:
fc:24:e4:29:73:14:4a:66:54:e1:a2:e8:c9:1e:ff:
11:6a:70:95:05:f6:3e:01:1b:70:a5:5d:70:ca:e0:
26:1b:e8:49:23:52:df:5a:d6:00:04:02:05:e1:1b:
42:90:04:d0:c8:80:fc:d1:9c:17:cd:00:29:d7:d2:
4d:44:4d:8c:08:80:78:c9:ef:2f:bf:17:7c:08:fc:
12:53:4c:52:de:83:2b:5e:08:35:be:e1:fa:ef:00:
a9:e7:73:d0:0a:5f:24:bc:d5:ce:5d:f7:f0:d9:42:
50:94:97:0c:4a:d8:6a:26:e3:68:ea:0c:75:90:ed:
42:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:75:A4:9A:50:10:03:24:4D:B7:5C:78:09:2B:09:3C:AB:53:C0:10
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:eb:38:2a:3b:1d:29:4b:ff:87:b8:6e:ca:c3:40:26:b3:71:
0d:64:be:f0:e7:92:db:10:bc:ea:80:70:08:1c:5c:da:23:9e:
a6:04:d9:da:a8:ed:92:62:3b:0a:fb:96:f8:b4:ff:1d:c0:53:
3d:1a:77:8d:af:59:93:f6:b9:b4:6b:e7:05:0d:03:35:f9:53:
b0:59:ac:31:e9:04:72:aa:5a:cf:41:a8:95:e9:24:7b:27:c4:
97:3a:ed:98:cc:16:4c:67:64:a1:e0:28:c1:96:e8:a0:9b:ff:
0a:06:7a:5e:98:ae:de:eb:01:ad:19:7b:a7:0f:5b:bc:0a:29:
21:6b:8b:ec:bc:15:a7:ec:65:54:a9:c1:ea:1d:e7:72:3b:89:
70:b4:20:4c:c0:fa:2f:80:13:78:c0:fb:00:a5:cd:3f:1b:43:
96:31:b3:42:dc:60:63:3d:6a:c4:6e:03:ec:a6:5d:f0:e8:f8:
83:fb:a9:90:8a:c2:1e:07:e1:c8:37:05:4f:c7:36:9e:38:f0:
29:af:08:85:94:cc:cd:49:4a:eb:15:a6:f1:17:0a:15:05:38:
aa:7b:f2:6d:03:1a:25:c9:ca:1a:4d:88:81:a3:eb:c0:ad:f9:
62:82:75:a5:38:3c:df:28:2a:fd:f0:c2:54:41:10:c6:66:ef:
fa:a3:ae:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:54 2025 by rpki-client on console-fra.rpki-client.org