Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
File: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft (raw, json)
Hash identifier: EAfjMz97qr4H/VdKgp//dqCAxYH+7PZnyWLVCoxBj1c=
Subject key identifier: 5D:B4:AB:39:F2:6C:5D:FE:4A:31:05:DD:3B:0B:33:40:F0:1D:5D:87
Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
Certificate issuer: /CN=8fe692658aef093d9e3603132b965bf1be075d37
Certificate serial: 0194C49A48DD6CD5F28AA7D8F8B6FCF3AC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
Manifest number: 0117
Signing time: Sun 02 Feb 2025 03:00:32 +0000
Manifest this update: Sun 02 Feb 2025 03:00:32 +0000
Manifest next update: Mon 03 Feb 2025 03:00:32 +0000
Files and hashes: 1: j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl (hash: Il4pK4uFdMtHbKKU+L1ssoXGXRPjd2u4JvGVARFESM0=)
2: m_DyVhepA8h1XGWM-orUdoIVf7o.roa (hash: saVyyQ5v2TSsmPKMina7v4SF//mHS3btHrahjrjyKxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:48:dd:6c:d5:f2:8a:a7:d8:f8:b6:fc:f3:ac:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37
Validity
Not Before: Feb 2 03:00:32 2025 GMT
Not After : Feb 3 03:00:32 2025 GMT
Subject: CN=5db4ab39f26c5dfe4a3105dd3b0b3340f01d5d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:63:84:11:8c:11:d6:38:b5:be:10:94:ac:6c:
37:b5:43:70:7b:c9:ae:36:fe:12:46:12:b8:48:7e:
1e:8b:f8:5f:2a:5e:2e:64:7a:f9:94:ac:3e:d8:90:
1b:b1:bf:74:ec:ea:c2:d4:1b:ea:0a:14:81:4d:f3:
59:08:9f:92:70:8d:26:bb:d3:56:7f:10:20:ef:c8:
b7:0f:9d:94:d9:9d:cd:9c:78:d6:a9:17:11:10:fd:
10:ae:70:14:d9:2e:28:ad:c1:41:e5:5e:17:84:4b:
ce:9e:12:4f:e2:f7:2a:0f:74:cf:ff:9f:6c:04:26:
d5:d3:b5:b0:53:64:c9:af:39:02:80:61:70:93:7f:
86:8d:7e:ca:86:c6:d8:e9:a5:03:14:b8:12:80:c2:
38:2f:82:ad:50:a5:55:5c:d8:00:bf:1f:04:f0:bf:
0f:cf:1d:1c:c7:50:1b:10:62:a8:20:3b:5a:a4:e2:
9a:ef:99:d6:fd:b6:4c:ef:78:57:8a:a9:a9:d7:50:
b6:cd:4d:29:bb:31:ff:1c:9d:7d:5b:a1:67:1b:a2:
78:64:0b:40:8a:99:e9:bd:a2:d2:02:0e:e0:48:f3:
3b:8f:2b:d9:ab:eb:d3:c9:42:a1:97:7f:10:14:fa:
ad:06:77:79:d4:17:12:a8:87:ee:f8:b3:52:da:0d:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B4:AB:39:F2:6C:5D:FE:4A:31:05:DD:3B:0B:33:40:F0:1D:5D:87
X509v3 Authority Key Identifier:
keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:31:88:66:92:d1:07:fc:ce:1e:86:ab:71:80:db:f3:91:dc:
18:b0:37:00:eb:b2:6f:ba:64:8d:7a:98:b7:cc:67:98:23:cb:
bc:d2:ab:90:ff:c0:2e:c1:bf:e0:31:aa:09:30:bf:c9:61:1a:
e1:40:e5:53:6f:34:19:5e:65:48:f0:0c:bc:11:d3:c5:aa:ab:
d5:45:94:99:ae:b9:11:7a:d4:90:ec:15:a2:cf:4e:1e:d8:f2:
3c:de:94:70:b2:d0:c0:3b:02:3f:20:02:9d:5a:a6:1f:2a:3f:
9f:11:9a:b6:e1:db:06:75:d4:d2:db:36:b1:92:94:73:1f:1f:
75:7a:80:1a:1f:87:57:c2:77:82:4d:72:62:7b:2b:d9:6b:b2:
d4:23:c4:ec:13:01:99:b8:00:d7:f4:89:7d:d2:34:09:88:03:
31:08:a8:c5:a0:b7:52:0f:2b:2e:75:e3:1b:5e:4b:b3:cc:be:
78:7b:f5:1d:a8:35:08:60:7f:8a:0c:9b:9f:26:af:18:7e:65:
92:f9:d3:fa:dc:e6:0f:b5:12:16:5e:e7:86:84:33:9e:57:59:
b8:2d:6b:67:f7:57:86:22:4a:14:3d:55:7f:65:2e:04:e0:a3:
4f:fe:37:92:2f:85:d1:98:fe:3c:90:63:85:0f:f7:27:6d:a4:
45:4f:f5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:53:43 2025 by rpki-client