Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: 24l1umYFqfvlBEaeY6u2Eq642RkUgtZmJkAK1Wxoz0w=
Subject key identifier: E9:34:DD:3B:53:CB:EB:E4:9F:5E:A5:B1:BC:49:BC:60:CD:B6:16:32
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 019510FDFA3F79545068BC62CF1A6A156199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0953
Signing time: Sun 16 Feb 2025 23:00:34 +0000
Manifest this update: Sun 16 Feb 2025 23:00:34 +0000
Manifest next update: Mon 17 Feb 2025 23:00:34 +0000
Files and hashes: 1: 1-wj9KbOyvPovdcQ24AKqmBV9kwI.roa (hash: A1jBMdG8oJ+zW7emB0AaCdyXMT8pXNRo6ZTMw78BX48=)
2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: RkRObcAAAkosscfxva6DEKJqW4qoTf7Nhg4itkkjBww=)
3: xX18f0QhZJoiEow8nw2LUDhmqQM.roa (hash: k5giKs19OfeOUjTUdyDT60F99ypulvNFJ0A81IYMscQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:fa:3f:79:54:50:68:bc:62:cf:1a:6a:15:61:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Feb 16 23:00:34 2025 GMT
Not After : Feb 17 23:00:34 2025 GMT
Subject: CN=e934dd3b53cbebe49f5ea5b1bc49bc60cdb61632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:55:47:92:de:57:41:98:c5:78:0e:19:88:
6d:7d:8e:43:89:69:9e:cd:1e:7c:76:18:fb:32:c0:
aa:f0:7a:fe:0c:44:e0:85:fe:15:67:a7:ff:59:b9:
5c:d9:dd:32:ec:69:b4:78:df:28:5d:61:23:46:cb:
f0:45:6f:e1:59:78:a9:1e:13:63:f0:72:33:38:06:
88:c6:4b:c2:a4:ed:18:e6:2f:d7:1f:98:94:12:b4:
42:18:8e:f6:e3:2b:87:fe:75:7d:86:e0:5b:4d:11:
38:78:ea:91:a7:f3:4e:9c:74:19:10:97:e9:02:0d:
32:00:6d:e7:72:1a:f5:02:6a:d1:d4:73:19:4d:71:
60:17:cd:24:50:04:df:70:98:d7:78:80:aa:e5:54:
b3:cc:fd:cf:33:a7:84:51:57:bb:f3:2c:df:f5:80:
d2:37:db:f5:0e:82:c2:14:bf:c9:16:5d:f1:7d:cf:
04:c9:4d:5a:bf:2a:4b:37:fe:16:c7:47:1f:18:f3:
18:fb:ae:85:41:98:cd:f3:53:26:6b:33:1b:2d:e8:
45:ea:41:7a:7f:2b:56:f7:34:c4:37:14:3d:ee:d7:
6a:0c:58:93:25:6c:4e:f5:76:1e:f8:4b:14:95:58:
0f:c5:43:aa:9c:6b:dc:79:d3:97:70:32:b2:31:8e:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:34:DD:3B:53:CB:EB:E4:9F:5E:A5:B1:BC:49:BC:60:CD:B6:16:32
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:65:1c:5e:70:36:70:b9:1f:75:4a:cd:1c:26:0a:67:15:62:
7c:5a:22:11:b8:69:b7:10:8d:96:02:58:17:f0:ce:f3:ad:ef:
34:f5:48:43:ec:c5:a7:87:87:39:15:1f:3e:89:3e:28:5b:cc:
cd:21:b3:7c:c8:d3:fd:1b:27:70:07:fe:d8:52:3c:d3:75:e9:
ca:79:4c:7a:f9:bd:42:74:ad:b9:5c:7c:1b:38:36:5c:3c:8b:
d4:85:5a:f5:6d:96:a5:9a:56:e4:80:d6:3d:de:b2:a5:5c:bf:
e4:d5:39:ff:bf:8d:dc:17:0a:2c:b0:4b:ae:09:4f:38:ae:f6:
91:2e:e3:a8:58:1e:ab:88:09:8d:de:7e:33:7a:d8:fb:a4:6c:
44:a6:98:8a:ec:a4:ef:11:6f:2d:23:11:2d:a9:1a:b2:2a:47:
d0:0b:87:ef:f1:fc:ac:2d:e0:19:44:7d:86:12:e1:ae:2d:5b:
1b:3b:0e:47:20:b7:37:08:54:32:22:bd:e3:98:33:49:c4:bd:
d9:58:ef:80:42:f0:2f:24:53:47:82:1e:18:9b:8c:c9:43:02:
b2:8e:20:19:c7:37:f3:11:6c:e7:22:82:0f:12:e5:2d:66:d4:
d0:15:d3:96:85:a2:b3:15:89:ba:69:2d:fd:20:25:fe:dc:19:
a7:aa:71:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/fo/eVRQaLxizxpqFWGZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZjg5M2VkZjMzMjA4ZDdhMmNmNjIyNjg2MTM3NjlmYjQ5
NjdjNjYwHhcNMjUwMjE2MjMwMDM0WhcNMjUwMjE3MjMwMDM0WjAzMTEwLwYDVQQD
EyhlOTM0ZGQzYjUzY2JlYmU0OWY1ZWE1YjFiYzQ5YmM2MGNkYjYxNjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTNVR5LeV0GYxXgOGYhtfY5DiWme
zR58dhj7MsCq8Hr+DETghf4VZ6f/Wblc2d0y7Gm0eN8oXWEjRsvwRW/hWXipHhNj
8HIzOAaIxkvCpO0Y5i/XH5iUErRCGI724yuH/nV9huBbTRE4eOqRp/NOnHQZEJfp
Ag0yAG3nchr1AmrR1HMZTXFgF80kUATfcJjXeICq5VSzzP3PM6eEUVe78yzf9YDS
N9v1DoLCFL/JFl3xfc8EyU1avypLN/4Wx0cfGPMY+66FQZjN81MmazMbLehF6kF6
fytW9zTENxQ97tdqDFiTJWxO9XYe+EsUlVgPxUOqnGvcedOXcDKyMY5VGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOk03TtTy+vkn16lsbxJvGDNthYyMB8GA1UdIwQY
MBaAFI34k+3zMgjXos9iJoYTdp+0lnxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYt
Zjg3Nzg3YjFkMDNjLzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYtZjg3Nzg3YjFkMDNj
LzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmUcXnA2
cLkfdUrNHCYKZxVifFoiEbhptxCNlgJYF/DO863vNPVIQ+zFp4eHORUfPok+KFvM
zSGzfMjT/RsncAf+2FI803XpynlMevm9QnStuVx8Gzg2XDyL1IVa9W2WpZpW5IDW
Pd6ypVy/5NU5/7+N3BcKLLBLrglPOK72kS7jqFgeq4gJjd5+M3rY+6RsRKaYiuyk
7xFvLSMRLakasipH0AuH7/H8rC3gGUR9hhLhri1bGzsORyC3NwhUMiK945gzScS9
2VjvgELwLyRTR4IeGJuMyUMCso4gGcc38xFs5yKCDxLlLWbU0BXTloWisxWJumkt
/SAl/twZp6px9g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:18 2025 by rpki-client