Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
File: JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json)
Hash identifier: uhsdW+kj1cve6Bzoe8zN7dLpK9tEiH0u60Xu2oHVieU=
Subject key identifier: BF:78:4C:A6:48:D1:7F:4A:12:16:3C:74:F9:EF:3D:DD:75:F1:1A:ED
Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Certificate issuer: /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Certificate serial: 0194C42C92A0E2E0E300D088730E390846FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
Manifest number: 48
Signing time: Sun 02 Feb 2025 01:00:42 +0000
Manifest this update: Sun 02 Feb 2025 01:00:42 +0000
Manifest next update: Mon 03 Feb 2025 01:00:42 +0000
Files and hashes: 1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: eN/bxmU0VGnmJtNvmzM+aBbxk8n15h5zeDgavGAkxWc=)
2: xCvl2MPRqLFevw92K1xWqEyP8xM.roa (hash: x5lJC5gSbKWJztGnWxiyT9yj/ffbvJ91buVaYTLqpME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:92:a0:e2:e0:e3:00:d0:88:73:0e:39:08:46:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Validity
Not Before: Feb 2 01:00:42 2025 GMT
Not After : Feb 3 01:00:42 2025 GMT
Subject: CN=bf784ca648d17f4a12163c74f9ef3ddd75f11aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:98:02:6c:e8:64:82:66:98:83:f9:42:e8:
81:2b:49:bf:6a:4c:52:c7:95:a8:82:6b:25:25:e9:
bb:3e:58:17:45:01:05:6c:b8:a6:ec:3b:af:33:93:
9c:30:ff:8c:94:1b:fa:e0:a9:fe:be:5f:53:8b:4a:
f2:54:7e:b7:bf:c7:09:c6:44:16:86:3c:12:8f:4e:
76:3b:f1:f7:56:e3:f4:0c:5e:ce:c0:22:35:f5:8c:
bd:dc:dc:12:b2:73:79:67:44:b7:38:7e:d8:9b:08:
47:66:6c:b1:50:ac:c6:35:57:cc:4a:ba:2f:8f:f9:
b8:39:f9:26:fb:02:a5:77:9c:fd:c6:88:2e:09:25:
93:8b:35:5b:c8:da:6d:d4:7c:0f:8b:17:3d:08:ae:
f4:4b:ad:20:d1:65:3e:27:cd:83:c6:9c:46:56:f6:
92:1a:1f:8a:6b:a0:d4:05:d5:f9:b9:d6:04:1a:5f:
57:2e:e0:01:ba:36:a7:ce:a4:44:18:65:fc:f3:75:
f8:99:1d:9b:22:96:d7:5f:06:5f:d5:f2:33:fe:ed:
3e:c6:57:9b:0e:9c:fc:13:3c:84:ec:91:00:cb:b2:
2e:9a:77:2e:f9:13:1c:99:d3:31:58:ad:28:0b:20:
2e:24:94:db:49:4b:89:93:2e:6c:5b:11:56:16:f6:
58:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:78:4C:A6:48:D1:7F:4A:12:16:3C:74:F9:EF:3D:DD:75:F1:1A:ED
X509v3 Authority Key Identifier:
keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1f:ae:3e:47:cf:94:6c:da:59:d4:55:b9:84:4d:c3:ee:e3:
31:b8:5c:35:88:5e:31:40:9c:83:96:80:d6:19:e0:98:c2:1a:
59:e6:d5:98:e7:21:6d:9e:71:c5:2f:a0:9e:d0:dc:52:4b:19:
fe:f7:0c:d6:dd:db:bf:b4:2e:79:50:2f:69:57:8f:7f:55:e2:
a3:13:cf:53:f1:9a:ef:9e:0f:de:fb:f9:e6:75:53:28:80:79:
1c:7a:48:c4:19:30:1e:74:92:79:54:2f:7a:c9:e5:cf:7b:3f:
2e:ee:ad:84:9b:b0:d1:26:e0:b4:a0:e1:08:24:c7:78:19:eb:
5b:c0:ae:46:16:95:5f:08:4f:a5:fa:2c:0f:56:7b:bd:92:a7:
6a:71:9c:df:ca:0a:92:04:d1:bf:81:52:6d:65:03:03:2c:41:
52:28:9e:de:a1:b8:c3:06:9f:80:d5:7e:89:9b:05:a7:70:8c:
3d:6f:47:63:74:57:37:cf:29:ac:c8:6f:30:e3:39:89:5b:a2:
1c:94:07:13:e9:55:cb:7d:fe:4d:73:59:3e:9c:f2:b9:d2:17:
9d:7a:97:44:31:7f:9a:2d:95:97:68:c8:0f:bc:43:dd:98:25:
2e:f3:1a:85:69:c6:1c:d6:07:0d:da:e9:fe:24:f4:0d:67:45:
0d:e7:d4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:03 2025 by rpki-client