Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: WWesak0Pb84xwkFinCdkSMoZja3Dk5Ri7hbLnyj9jB4=
Subject key identifier: 00:0A:34:25:EF:1B:C9:3F:08:26:C6:1B:14:F1:F7:CD:EB:3F:D9:B9
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 019510C6D5344BE3E1C378F8ED2E9EDEAD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 1356
Signing time: Sun 16 Feb 2025 22:00:20 +0000
Manifest this update: Sun 16 Feb 2025 22:00:20 +0000
Manifest next update: Mon 17 Feb 2025 22:00:20 +0000
Files and hashes: 1: LEgJcT1HJwyV1gNb8G6Nv4QQcdA.roa (hash: MrTCL4S0d15bcXIlwlUs8e8j+hHw3EZvbQGkeB92Lzs=)
2: c9lDVYQcRQdBCo43HauWZGFuClk.roa (hash: inruiVih5EBCVj6ZjI9SCWuJ/TuQ5KyFEPVY6V2Z9e0=)
3: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: yK//4UuShlcOP7FYna3GH3PVVJJxoGH73CwKqn+M8Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:d5:34:4b:e3:e1:c3:78:f8:ed:2e:9e:de:ad:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Feb 16 22:00:20 2025 GMT
Not After : Feb 17 22:00:20 2025 GMT
Subject: CN=000a3425ef1bc93f0826c61b14f1f7cdeb3fd9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:c2:56:40:48:35:21:49:5f:cc:4c:58:e4:
eb:8a:72:3e:39:60:f6:01:18:ac:f2:ea:fd:91:93:
36:04:27:48:1d:11:f5:34:ea:3f:ae:86:64:cd:73:
2e:64:77:5e:ee:b7:de:47:6e:51:c0:f4:38:76:ee:
69:1c:7c:fe:95:3a:9e:29:a9:f5:45:ef:7c:90:90:
36:73:54:9b:20:56:2c:c4:54:9c:1d:c2:f8:5c:d7:
ef:19:56:5b:15:8d:27:20:3e:e8:f8:9e:dc:80:2e:
ab:92:60:1e:11:59:d1:43:fb:6f:52:11:84:b0:f4:
84:73:f7:1b:24:35:e3:7c:ce:2a:5b:1e:94:ee:79:
3b:98:89:ab:7b:bc:86:62:45:28:91:8d:e7:a8:10:
e8:c0:6c:78:23:26:50:99:ce:93:b7:cf:72:04:28:
ba:26:3f:56:29:a9:ab:96:36:a0:f6:c8:8c:ca:58:
01:27:6a:15:3e:27:c1:d7:e0:d3:d4:6b:0a:3c:4c:
64:30:b6:20:7d:84:0f:74:c9:07:09:39:39:a3:ad:
54:12:f7:ee:a6:bb:9a:b9:8a:eb:b6:7a:6f:de:9e:
37:be:28:9b:89:31:5b:82:7c:a0:c4:c4:cd:db:59:
73:52:9b:80:9f:26:a2:8c:4a:f0:5e:19:b6:9a:be:
53:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0A:34:25:EF:1B:C9:3F:08:26:C6:1B:14:F1:F7:CD:EB:3F:D9:B9
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d4:f7:bc:5e:5f:c6:9d:2f:90:ff:a3:70:ca:a7:15:c7:4b:
de:ea:4e:33:4c:d2:f0:0d:50:12:07:6b:80:e9:44:bc:62:6b:
bc:91:d8:9c:37:b7:19:a4:0e:f5:97:39:e6:f5:1c:19:71:d0:
7b:e1:08:41:71:70:a0:0a:c9:24:cc:64:0d:e4:78:62:8f:78:
ae:0c:f4:2f:c0:b5:09:1c:b4:b9:36:15:df:fe:d2:fc:61:38:
57:62:9c:05:bf:3d:9a:cc:0d:40:59:bd:5b:a8:63:63:d2:50:
eb:bc:86:27:5c:7b:0d:52:68:0a:b4:39:62:c7:06:dc:2c:80:
88:6b:75:87:fc:f1:5c:8a:42:7d:3b:fd:59:82:bc:7b:8a:62:
16:35:b0:c4:18:07:41:fb:0b:b4:7e:c9:f1:c3:b5:6f:03:d7:
6d:99:c3:90:17:2d:48:cf:20:90:18:eb:cd:cf:08:79:a4:77:
c0:29:ce:e6:b2:06:f0:93:6e:f3:62:f4:89:ab:b2:a5:40:24:
6b:aa:cc:30:84:50:ba:49:1e:bf:bf:11:46:87:31:bd:7e:e2:
66:28:58:36:d4:9d:ff:7d:ba:5f:4f:97:4f:72:6b:49:62:10:
bb:ce:14:1f:4c:e4:df:12:b4:a0:ed:fd:04:a2:e9:cd:84:fd:
9a:d2:70:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:36 2025 by rpki-client