Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
File: Jo0Q0QndkSVchN1iMHZBACN0_Do.mft (raw, json)
Hash identifier: m32SnSZYxVaJ89lVVy+2V/k2HH6kanHR7enD05pvHtg=
Subject key identifier: D9:93:E5:62:83:3E:54:AD:EB:C3:0C:6D:E8:81:D1:60:36:58:22:84
Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
Certificate issuer: /CN=268d10d109dd91255c84dd62307641002374fc3a
Certificate serial: 019511D9C3FBBCDF4C25B85A6AB57F7BB522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
Manifest number: 0B4C
Signing time: Mon 17 Feb 2025 03:00:38 +0000
Manifest this update: Mon 17 Feb 2025 03:00:38 +0000
Manifest next update: Tue 18 Feb 2025 03:00:38 +0000
Files and hashes: 1: Jo0Q0QndkSVchN1iMHZBACN0_Do.crl (hash: WHctF+MnUVF8f7DORXNlyKMnRpxSdPtwG7a2KWIWz7w=)
2: vRZENosVd-UpUXAI72NxZZVntJk.roa (hash: 3gCkbj38/RbRsH9RtMq+iOGtDMN5uG57O65jx7at2bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:c3:fb:bc:df:4c:25:b8:5a:6a:b5:7f:7b:b5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a
Validity
Not Before: Feb 17 03:00:38 2025 GMT
Not After : Feb 18 03:00:38 2025 GMT
Subject: CN=d993e562833e54adebc30c6de881d16036582284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:b6:bb:6e:56:6f:55:a6:ac:7d:72:45:27:
f3:d8:4e:f4:45:48:e6:36:c7:0f:b3:f3:31:c4:fd:
47:01:a9:12:37:2d:6a:ed:91:a6:ae:27:c9:7f:bf:
00:62:2b:b8:2c:33:92:6a:e5:2f:ae:50:4f:61:52:
1e:6a:fb:a3:2e:a5:69:f8:34:32:94:48:da:54:5d:
23:26:ef:92:7e:ba:cd:c9:03:e2:48:20:e4:61:e5:
76:08:6a:8a:34:7b:40:e1:b4:79:74:7d:bc:66:2d:
4d:59:bf:dd:8c:8b:e6:23:54:82:32:cc:44:b9:3f:
60:b6:5d:5b:8b:b4:70:c9:60:ce:de:40:84:3c:14:
3f:a3:45:0f:8c:e9:fb:7e:29:bd:69:f7:be:4b:5b:
0b:ac:3b:15:26:2f:4f:0a:9b:eb:60:e9:98:25:21:
b7:54:63:42:f8:df:4a:97:32:8b:22:3b:a4:45:87:
2a:7d:f6:43:c2:c8:19:0d:ab:58:ab:7e:2f:78:d6:
17:20:70:9b:88:3d:d2:50:5f:69:b8:29:a9:5d:5f:
5e:f4:f2:6b:47:b9:41:9f:8d:18:98:16:b7:3d:6b:
bd:04:62:63:8e:91:56:33:16:e1:42:1d:eb:f0:67:
1a:9c:59:a0:07:3f:28:29:3e:32:29:e9:5f:0e:77:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:93:E5:62:83:3E:54:AD:EB:C3:0C:6D:E8:81:D1:60:36:58:22:84
X509v3 Authority Key Identifier:
keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:be:2e:2c:ea:63:63:5f:19:b8:a6:67:73:54:a5:3a:e4:97:
b0:d8:bb:95:88:47:47:05:29:0e:c3:6c:69:db:be:e9:b5:1c:
f7:e4:26:03:22:c1:7b:a1:5e:54:25:b8:e2:7b:04:b4:65:52:
64:81:f8:d9:ce:69:05:f7:58:ee:02:37:a2:15:3a:87:d2:ab:
a6:06:f1:8c:fb:8e:77:30:71:01:ff:4c:06:32:9f:83:7c:73:
7e:1c:0b:f6:62:c7:bc:1d:e6:04:88:6b:3e:1c:b1:0c:31:fe:
57:ba:3a:32:6f:bf:7f:3a:29:bd:e6:a8:fd:44:90:2a:9b:69:
0a:44:af:43:09:1d:dd:2c:fc:32:2e:6d:0a:02:9c:03:e1:dc:
41:90:9b:c0:36:57:8a:32:67:db:82:c6:8e:64:44:33:e4:e9:
9b:f9:9f:ce:a4:04:b4:dc:15:f9:92:48:bd:5f:8f:c5:7c:34:
df:30:40:13:7d:0f:07:aa:cf:aa:a5:3a:7f:8a:1d:bd:7e:64:
0f:89:bb:92:a0:d6:41:6d:5c:46:8c:70:91:c2:8e:31:fa:48:
d6:65:7c:96:7c:2b:f0:e9:3b:06:8a:8a:af:c5:6f:d1:cc:96:
f7:90:ff:26:19:61:1f:a3:2f:97:4b:6c:80:cc:29:2e:af:f8:
23:8b:ba:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:57 2025 by rpki-client