Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
File: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft (raw, json)
Hash identifier: yTqSsTvi0KD6fFbvhu4/xrWlC9LpfHHEjmZe78ZJqSU=
Subject key identifier: 40:83:19:9D:4C:4A:27:2A:3B:20:E9:3D:37:9E:04:6C:54:FE:28:CF
Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d
Certificate serial: 0194C38878F77ED757BF27DDD6A486779170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
Manifest number: 0F8A
Signing time: Sat 01 Feb 2025 22:01:28 +0000
Manifest this update: Sat 01 Feb 2025 22:01:28 +0000
Manifest next update: Sun 02 Feb 2025 22:01:28 +0000
Files and hashes: 1: 1JuBh8lEOH4Gv_TiAGmh3QPTdd8.roa (hash: 9L83yVwb1Uhqks9DMbgSsnxXYkHLF9CsQEa0PBHMdEI=)
2: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl (hash: IYUiZrREP6ZU7sV0zk6zXSI9x6V8BGWvkZa0FCvi0WU=)
3: uLY7R20m1_heAxActPUiDlUOF_k.roa (hash: VJ9ob+iUB471t51KlgloGG8TLFxOURW4UvaYAdbWSCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:78:f7:7e:d7:57:bf:27:dd:d6:a4:86:77:91:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d
Validity
Not Before: Feb 1 22:01:28 2025 GMT
Not After : Feb 2 22:01:28 2025 GMT
Subject: CN=4083199d4c4a272a3b20e93d379e046c54fe28cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:b2:8e:7a:94:50:31:a9:40:72:ad:76:a6:
2c:e2:a5:9d:e4:e4:02:ab:19:92:ba:66:3d:d7:70:
52:6c:17:4f:1d:84:4d:72:84:a1:27:82:69:11:11:
d0:03:39:27:7c:5a:03:e0:95:fa:99:42:7c:79:01:
1c:63:da:d9:0a:0e:03:0e:c8:1d:2d:9f:0a:f8:f7:
7e:18:7f:37:f6:ff:8b:76:31:c8:ec:62:ba:df:b4:
74:a6:7a:ef:39:24:6a:b9:84:4e:54:d1:a3:e7:eb:
19:91:73:5c:c3:cf:cf:48:81:84:0b:0c:b3:0f:d8:
5e:70:15:8f:c8:e3:59:4d:4c:69:24:1f:bb:16:8d:
fd:12:30:21:2d:c4:b7:bc:b9:f6:ac:c1:38:4a:9d:
93:4c:3a:9f:de:31:4c:a6:72:1e:a7:0b:a5:bf:66:
d9:a7:df:49:13:03:c6:6f:f0:24:be:94:cf:49:f0:
33:d5:48:1f:1b:03:c2:46:bd:7d:7b:0d:ff:ad:6c:
34:92:17:f1:21:e8:4a:91:17:09:81:e7:26:a7:f5:
c6:60:8d:ff:63:9f:15:10:79:c7:3a:9f:b9:02:b4:
8d:55:f0:27:12:9f:83:75:31:df:06:13:c9:c4:46:
72:9f:bb:f0:26:dd:07:aa:a2:d9:94:e4:eb:27:1c:
61:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:83:19:9D:4C:4A:27:2A:3B:20:E9:3D:37:9E:04:6C:54:FE:28:CF
X509v3 Authority Key Identifier:
keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f6:17:9d:c6:8a:c3:fc:38:17:aa:84:73:e5:84:38:c3:3a:
86:b6:df:ac:8f:d1:a4:35:19:a2:ca:dc:d9:7c:f8:03:5e:39:
92:68:8a:46:46:69:c3:7d:c3:6b:67:9e:9b:1f:7f:53:3f:8c:
3f:33:4d:6a:a5:ea:d8:8a:9f:2f:33:3a:89:eb:6b:ee:29:bd:
25:8b:1d:d8:27:1b:4a:2a:89:60:e2:75:78:ae:ce:56:8b:74:
88:a2:08:fc:7c:05:9e:6b:e8:a2:bb:28:a2:48:9d:57:25:c9:
74:74:85:e3:37:12:3b:6b:5d:02:3d:8e:92:45:54:35:71:27:
c1:6b:dd:25:1b:32:34:5e:3a:eb:1e:26:0c:ee:65:c8:bb:a3:
17:81:46:b6:17:b9:7f:d0:6a:59:f9:db:61:38:02:92:ad:9e:
d5:41:c3:9c:80:f2:86:89:40:33:36:de:f1:96:0d:ee:63:d7:
d8:d8:39:ad:9f:4c:ad:fb:b2:73:7d:aa:e8:0d:b9:37:6b:02:
c2:45:1c:f0:ab:6e:b5:67:ce:2b:00:dc:1f:4d:0e:9b:af:e7:
72:60:44:9d:64:42:34:60:6f:e9:d7:25:bf:27:ad:a9:e5:c4:
9e:fd:4f:0c:e9:c0:ea:1a:6d:45:72:af:a8:5c:2f:13:08:1a:
14:9e:41:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:26 2025 by rpki-client