Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
File: j8LtpUeIeltFA9kFkupQVljabno.mft (raw, json)
Hash identifier: EgylvF5wnvEdVRRXi4THT50YT9myp67Qo1NNGGMKxSQ=
Subject key identifier: 57:38:A4:AC:41:DB:6F:75:3E:5B:10:19:BC:02:86:A2:CD:BC:52:D3
Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
Certificate issuer: /CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Certificate serial: 0194C5083C9A22A13B353B11D0C33399C300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
Manifest number: 1340
Signing time: Sun 02 Feb 2025 05:00:38 +0000
Manifest this update: Sun 02 Feb 2025 05:00:38 +0000
Manifest next update: Mon 03 Feb 2025 05:00:38 +0000
Files and hashes: 1: j8LtpUeIeltFA9kFkupQVljabno.crl (hash: 8hakLo/Nu2xJrS2tiaYSdstrMUjWkKf4SLeADaUYfV4=)
2: vo41TJmt3C6QujdoChHPsobf9wU.roa (hash: D6T9SlEvHKEsLXEPPq633IxaLopzaLfHyAO1ibmxPX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:3c:9a:22:a1:3b:35:3b:11:d0:c3:33:99:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Validity
Not Before: Feb 2 05:00:38 2025 GMT
Not After : Feb 3 05:00:38 2025 GMT
Subject: CN=5738a4ac41db6f753e5b1019bc0286a2cdbc52d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:34:78:70:07:de:80:c8:d0:65:98:6f:9e:21:
e7:06:4a:12:d7:a2:41:e4:75:60:9a:b4:d6:bd:ad:
64:92:8c:f5:6e:83:95:a6:11:ac:47:9f:6e:11:d8:
1c:63:58:e8:a1:06:04:b9:4d:3d:a6:68:09:5f:38:
a5:6d:7f:b0:c9:db:26:f6:83:f2:05:a8:b9:63:0b:
89:a4:7b:08:2c:8a:4b:05:4a:8b:42:2e:53:73:ca:
59:87:65:24:f4:62:01:f4:f4:47:1b:59:21:e5:c7:
77:03:83:45:09:ed:34:5d:97:df:a9:7b:97:b1:4e:
c9:b1:f3:a3:0d:6d:18:91:08:03:08:cc:ba:0b:d4:
85:8f:a5:44:d4:14:b0:9b:5a:44:90:6c:af:e7:7e:
e3:9c:f2:4f:40:18:f4:8d:e2:76:4b:27:83:6e:df:
fb:7f:cf:b9:55:2f:f7:ee:15:6b:36:1b:49:75:03:
89:9a:61:cd:bd:08:c0:ae:a1:8a:2b:48:1a:42:58:
f8:f0:84:b8:a3:76:46:d2:21:34:3a:d2:f6:2a:67:
20:c6:a2:bf:e1:fd:70:90:fd:37:f3:a3:6d:a4:1c:
9b:5b:0a:a6:cb:b2:84:2e:48:6a:56:85:10:80:b1:
c9:56:66:12:ca:26:c0:df:85:47:d2:fc:38:e3:5f:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:38:A4:AC:41:DB:6F:75:3E:5B:10:19:BC:02:86:A2:CD:BC:52:D3
X509v3 Authority Key Identifier:
keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:86:24:68:13:5a:ec:8d:6d:89:cf:3b:08:59:34:f9:93:6f:
19:4f:98:b0:9f:6b:e7:0f:3d:ff:f5:58:0a:b8:5c:90:33:38:
d8:33:6f:26:ba:26:7e:6d:2a:41:73:d4:15:1e:f4:80:14:61:
9d:8f:fa:a4:b9:d1:8f:4d:30:d4:fe:a3:25:a8:15:5e:c6:0e:
f7:9a:25:8e:59:bf:d0:fc:14:39:0d:79:c9:de:2a:2e:01:e6:
28:b1:9e:c9:d6:1b:b5:fa:30:d3:48:ab:24:fb:cd:fe:e8:9d:
cd:70:c2:68:ab:a9:1e:25:85:50:1c:8e:41:ae:5d:e4:99:5d:
c6:33:68:00:02:37:68:54:b5:af:a1:73:dd:48:b3:01:ba:22:
77:68:a2:6c:26:44:34:4f:75:1e:4a:19:e6:1b:4a:76:22:68:
b2:ca:0e:96:ae:52:13:c1:3f:d3:4c:90:99:a5:93:8a:8f:9c:
f3:8d:b5:71:a3:b3:15:e9:1e:13:f7:07:33:f4:87:bf:72:12:
4e:07:0d:0c:df:8c:41:5e:70:4a:28:da:3e:87:65:64:15:9e:
46:8e:e1:04:b9:d3:b0:46:6e:9b:5e:58:87:db:8d:a9:3f:4c:
1b:a8:20:c7:af:c9:fd:4e:63:27:c0:c5:8f:8b:87:76:29:0a:
7b:9e:66:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:51 2025 by rpki-client