Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json)
Hash identifier: yzM3rsNb/tuG0oQ4pY9o6Nz/o321j3a9xziPyPpblOU=
Subject key identifier: 49:49:F1:6E:C6:82:FE:36:4E:3D:5D:59:6A:52:07:98:B6:13:60:F3
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial: 019511A268F51245BAF61EE033187292CED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 02:00:11 +0000
Manifest this update: Mon 17 Feb 2025 02:00:11 +0000
Manifest next update: Tue 18 Feb 2025 02:00:11 +0000
Files and hashes: 1: 4Thjoi2cuu2R-Wt66Xk0RcDdsq8.roa (hash: FfWHL/WqJtibXS4FBAVnGxUAgnegdwlyA934MIbOlIo=)
2: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: Nach5sJauIqdnVvOl7As6j6D/UujcyzoIObiLrcz72I=)
3: yXpvc9uWZKZFHCmkmSmpej0f37c.roa (hash: 3v8/4eMJO7NotNddn4SD4NaC1CnMnbkwXQwSszwWBcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:68:f5:12:45:ba:f6:1e:e0:33:18:72:92:ce:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Validity
Not Before: Feb 17 02:00:11 2025 GMT
Not After : Feb 18 02:00:11 2025 GMT
Subject: CN=4949f16ec682fe364e3d5d596a520798b61360f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:73:de:3b:2e:96:47:69:8e:93:3d:22:bc:7b:
f3:43:84:70:a7:7b:8f:0e:85:ac:48:a0:db:3a:68:
2e:2a:d2:92:65:9e:7d:37:37:38:6c:f4:78:6b:9e:
87:ef:f5:7b:0f:91:b3:12:84:a4:78:ef:3c:a1:cc:
18:1e:de:c6:c7:f6:20:00:36:b1:e6:84:61:52:0f:
3f:90:90:5b:f6:26:64:90:f4:8a:9f:37:83:c6:a8:
7d:30:69:bc:eb:a5:5a:ca:c4:51:d1:c5:f7:33:77:
9e:fa:40:e1:4d:1a:e0:67:df:3e:36:87:72:05:bc:
64:96:7b:fb:55:86:43:ee:56:66:e1:c1:c6:ff:71:
8b:a5:22:4b:f5:36:8c:57:fd:e0:b8:c6:bd:59:14:
ce:8d:6e:80:49:3a:b2:06:be:55:c7:24:4a:27:8f:
c5:80:76:b4:02:2c:f1:92:4c:1c:24:34:08:bb:57:
96:e4:0b:b6:be:d4:fa:3f:06:7e:e2:40:2d:21:45:
69:d0:cc:fc:86:12:d5:54:a3:a4:5e:d6:26:28:fb:
17:2b:90:35:1d:d4:14:a0:86:33:7c:46:8b:82:4e:
b5:22:98:96:c9:36:b8:90:00:2a:0b:bc:77:3c:0f:
05:61:4a:0f:a4:58:7f:88:b6:4c:8c:8d:9a:68:fc:
02:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:49:F1:6E:C6:82:FE:36:4E:3D:5D:59:6A:52:07:98:B6:13:60:F3
X509v3 Authority Key Identifier:
keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bf:b5:03:f6:24:3c:34:36:9d:8d:65:d4:82:1b:68:25:09:
8b:aa:29:ff:5c:7e:36:6b:66:e2:0f:e5:f4:ef:7c:db:82:b3:
6f:2b:54:9a:8f:44:1a:3b:c9:50:38:a6:e7:0d:7a:5a:e2:0f:
25:db:a7:44:5b:a0:f8:e0:9f:5f:85:3f:4e:6e:c8:79:ef:3b:
01:d1:c9:a7:52:24:54:4d:16:07:3e:6e:ab:a9:c6:ee:7d:38:
86:0e:a3:0b:e6:fe:ca:ef:09:76:4d:c5:19:63:56:4f:9b:43:
5b:56:03:a3:9a:c7:d3:f6:71:7c:04:95:39:d8:4c:8c:25:26:
0e:8e:19:11:ae:8e:3d:8c:a3:22:b4:2e:8a:d2:b1:04:ac:e3:
3d:9e:c9:fe:e4:9d:f8:30:52:07:56:0e:52:e8:b7:53:af:ad:
dd:d8:b2:26:dc:03:b6:3b:33:17:35:4c:3a:40:5f:85:a8:67:
bd:b3:94:29:72:89:7d:71:24:04:da:e8:73:00:fe:4d:ab:b0:
03:ed:9e:d5:bf:2e:9c:0d:fc:5d:7f:e2:65:89:35:22:38:4d:
ea:e2:2a:34:ed:20:ed:0d:09:4f:88:4e:a2:8a:f4:61:31:f2:
c6:ad:23:f6:1a:72:8b:8d:99:b3:60:39:4b:b6:a0:ee:e0:bd:
e6:04:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:38 2025 by rpki-client