Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
File: pJMvpJVkpXamFD5F-BVmjyANdjc.mft (raw, json)
Hash identifier: SowHlT7Zo85rAAOa5Uybw6oHi+I3H3Q2c1hbkmK+8Z4=
Subject key identifier: 91:97:17:CC:17:48:7C:D1:AB:13:4F:BB:7A:DB:25:E7:00:50:74:29
Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
Certificate issuer: /CN=a4932fa49564a576a6143e45f815668f200d7637
Certificate serial: 0194C38839C28EFACF8C3DA1FD6958823AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
Manifest number: 04DA
Signing time: Sat 01 Feb 2025 22:01:12 +0000
Manifest this update: Sat 01 Feb 2025 22:01:12 +0000
Manifest next update: Sun 02 Feb 2025 22:01:12 +0000
Files and hashes: 1: nbFO3tETAKU90cGGwpaCKUOKTLY.roa (hash: cquJx46DtG8x6pISzm/UdeY5xz+jlo5riwT4Pb8N/jw=)
2: pJMvpJVkpXamFD5F-BVmjyANdjc.crl (hash: 1Xz/sFB4PxOtU7Q1NJc6dHKJaIMQtyDJ3SRAAF+FhTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:39:c2:8e:fa:cf:8c:3d:a1:fd:69:58:82:3a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637
Validity
Not Before: Feb 1 22:01:12 2025 GMT
Not After : Feb 2 22:01:12 2025 GMT
Subject: CN=919717cc17487cd1ab134fbb7adb25e700507429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:ce:a7:98:de:0d:fc:a3:6c:60:07:eb:e9:
63:a6:89:ee:55:75:d5:1c:0d:23:c4:d5:96:f2:39:
c5:80:77:08:b4:eb:b5:50:02:1d:be:9e:1c:f8:d4:
94:d7:4e:8c:75:0b:50:da:f5:f0:e2:5e:53:d7:03:
df:25:fd:22:df:c5:14:83:3d:74:f1:2b:26:a9:0d:
bd:e4:72:fe:d8:e3:d1:59:79:cf:23:29:aa:59:96:
b3:3b:00:25:bf:a4:35:69:20:16:a9:ab:18:e5:d6:
2c:4e:69:2b:40:1e:2d:b5:b3:1d:2a:04:8c:2b:ef:
7c:e8:80:c3:39:26:73:13:66:8e:6a:5e:8e:9d:67:
85:d9:9a:3e:54:7f:c9:02:6c:ba:c0:f0:2b:34:40:
d8:a3:59:50:c4:91:53:aa:2d:69:21:d7:34:6d:8e:
1e:f1:60:78:2d:59:98:32:91:ea:1d:d3:4e:e7:65:
7c:b4:83:fb:7d:73:03:9e:e8:3d:a1:cb:8f:e8:3c:
f8:da:12:95:38:7f:ef:85:bd:30:b8:b9:7a:2e:ea:
da:bc:9e:3c:00:9f:82:29:78:03:8d:48:3c:bc:49:
f5:c8:cb:2f:1d:41:3c:18:54:81:48:51:ad:33:5e:
60:c2:8f:95:94:35:1e:12:bd:bf:4b:d2:66:a0:3c:
1d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:97:17:CC:17:48:7C:D1:AB:13:4F:BB:7A:DB:25:E7:00:50:74:29
X509v3 Authority Key Identifier:
keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:52:09:d5:6e:17:9e:32:d4:55:a0:1f:1b:00:21:79:41:d4:
99:ef:d7:37:73:87:d1:cc:61:87:6c:60:7c:d8:b9:15:10:2e:
5c:54:83:30:78:40:ed:23:ee:ed:52:47:c0:23:9c:34:8b:9d:
60:e7:25:d1:f0:ab:ad:1b:e8:46:ac:6d:ff:a4:16:8f:82:f3:
47:82:a9:46:75:46:a0:50:ef:fe:be:d6:4e:cf:66:3c:9f:5c:
c4:ab:0e:0a:4f:99:6d:db:c7:33:2e:b4:28:70:59:9b:ce:ce:
e4:77:59:e0:24:f1:8c:8e:cf:30:a8:a4:f9:68:47:bc:9b:ed:
e9:96:42:0f:75:f8:f2:56:48:44:4b:4d:02:38:bd:92:15:34:
c2:d0:08:f5:81:91:b8:1d:db:8e:43:02:c6:41:4b:e4:a3:ff:
08:21:62:1b:cc:e4:cb:81:b6:d5:b5:76:82:7b:ba:ee:ff:4a:
58:b0:15:90:16:55:0a:91:65:96:99:a6:d0:e9:83:fb:23:a4:
34:08:ad:d1:76:3e:a2:d0:65:9c:ec:a5:27:f3:d4:13:4d:29:
cb:dc:9d:f8:ae:40:c4:f4:89:8d:4d:7e:49:d1:b0:28:46:3e:
6f:e2:d3:ad:a3:8b:5c:65:06:51:88:90:57:23:ee:27:5f:9b:
d4:db:f8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:46 2025 by rpki-client