Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
File: J_8gRAummKTcBDm8F5-zOj7hzJU.mft (raw, json)
Hash identifier: PeQ4eqeVf5iVzc+6KeecJdgI1p3PrfC8/joshu6a7k4=
Subject key identifier: 32:F5:37:45:26:C2:C4:6A:B0:09:BF:D3:45:CF:A9:36:0D:AE:FE:E8
Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
Certificate issuer: /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Certificate serial: 0194C3879338B60D6892F58298F06F8C2576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
Manifest number: 0B04
Signing time: Sat 01 Feb 2025 22:00:29 +0000
Manifest this update: Sat 01 Feb 2025 22:00:29 +0000
Manifest next update: Sun 02 Feb 2025 22:00:29 +0000
Files and hashes: 1: J_8gRAummKTcBDm8F5-zOj7hzJU.crl (hash: kPOyAA4iaT9Fys7DQKdsQGcX/mMYudPDWsO/ceB3Wrw=)
2: _tUXooY9b06bDKDjgo1P9zjilGI.roa (hash: eyE2Sp1NPUfSOv01mHhVH2OIahlIo+oZSctInWb+NT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:93:38:b6:0d:68:92:f5:82:98:f0:6f:8c:25:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Validity
Not Before: Feb 1 22:00:29 2025 GMT
Not After : Feb 2 22:00:29 2025 GMT
Subject: CN=32f5374526c2c46ab009bfd345cfa9360daefee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:19:92:1e:d1:c1:6c:c3:46:91:67:83:6d:
96:cd:f7:ae:15:c0:ee:51:18:88:b4:f3:ff:5c:10:
22:55:3e:12:03:6e:d4:59:d5:af:1f:3e:c3:fa:05:
e6:18:61:e8:3b:25:4c:39:12:1a:11:d7:b8:a1:e4:
cf:e4:c2:87:68:af:51:6b:d6:8c:cb:18:01:ba:fd:
ed:b3:cf:ed:b2:b2:62:86:f7:45:c6:b5:d4:3a:34:
ac:c9:01:ad:7c:7b:49:9a:e4:bf:17:ea:42:af:a0:
02:4f:7a:f5:99:52:42:db:bc:e7:03:48:df:b0:a9:
bd:1c:77:cc:f3:4a:d3:bd:54:3f:f9:bd:a6:0e:2c:
ec:25:07:16:af:fd:f5:6f:70:32:aa:12:bf:ba:eb:
0c:82:96:9f:6d:30:5c:4a:6c:97:7f:8b:97:6b:26:
4e:8b:ec:26:3b:38:50:aa:79:3c:ad:9f:e2:d6:a5:
82:90:69:99:50:54:b7:a4:57:13:41:3e:c1:53:7b:
7e:70:91:6e:c6:13:b2:eb:4d:52:99:25:bf:89:87:
af:3d:19:43:1d:76:e1:65:7c:82:7a:9b:0d:c4:62:
aa:5a:f6:17:85:9d:32:53:1e:83:d0:b3:6c:58:54:
b2:bb:78:7d:66:ae:dd:a5:af:6d:ce:ee:fe:25:f2:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F5:37:45:26:C2:C4:6A:B0:09:BF:D3:45:CF:A9:36:0D:AE:FE:E8
X509v3 Authority Key Identifier:
keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:44:f8:7a:31:66:6e:45:2b:3b:d3:68:f6:6f:04:de:a6:ef:
2b:a5:72:01:4f:cc:9c:60:32:40:04:31:23:7f:ca:82:8f:e9:
ed:90:6f:26:ee:cd:12:0d:53:bf:c2:1f:af:42:0b:c2:80:b9:
10:6f:41:f5:cb:88:5d:8e:ce:71:4e:a0:1a:82:ef:d0:81:6b:
af:53:1a:bf:db:4c:b4:8d:b0:d6:7c:9e:81:17:e4:08:a5:08:
80:ca:e9:25:62:51:7c:c2:ec:ca:2c:9a:8c:6a:58:1b:d4:d3:
e5:c2:71:54:0f:1b:8a:e4:89:01:1f:4c:a1:01:da:2f:6d:51:
ac:43:26:e2:3f:07:45:76:bf:82:d4:32:e2:70:0a:1e:b8:45:
a5:4b:e8:49:90:07:65:eb:28:5d:d6:a4:cf:cd:55:da:8c:13:
95:c2:3d:04:a6:81:7e:12:6b:c6:cc:e6:3c:57:92:57:3a:09:
39:5a:1f:f4:94:a2:31:21:78:3a:d9:05:ff:7a:94:79:0a:56:
1b:fc:17:e3:55:95:4d:43:ac:8c:40:a5:74:e6:c0:c5:2b:be:
32:37:55:cd:19:96:55:b2:9c:0d:4a:b3:ca:80:4c:26:ea:63:
c7:52:9f:dd:db:70:31:63:40:48:87:0e:04:8d:1d:f4:9d:f7:
b4:f2:3a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:52:44 2025 by rpki-client