Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
File: _Jvk7U5UtgHmtqQtC6BM-3qyw78.mft (raw, json)
Hash identifier: 39PQVclcAkZBTATlv7FpWu9oaKC5ywKpDRpR9tmro58=
Subject key identifier: B2:7F:AE:9D:E5:ED:7C:D5:3B:A4:B5:DE:38:BE:1C:0B:02:49:73:0D
Authority key identifier: FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
Certificate issuer: /CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Certificate serial: 01941EF3085E15B7CDAF9901C9FC94B19A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
Manifest number: 13DB
Signing time: Tue 31 Dec 2024 23:00:31 +0000
Manifest this update: Tue 31 Dec 2024 23:00:31 +0000
Manifest next update: Wed 01 Jan 2025 23:00:31 +0000
Files and hashes: 1: PAI40CCd6UyWX8OjbzWPrqbcDJI.roa (hash: nPd9Q6bp4ZvgThfsMTZtL4bwalHtVYeJ4It6271z6vA=)
2: RR3fTWvJHCWBjYcpH52DSJzX79Q.roa (hash: WHjv1Epe5YrBXX3mfjWky8gNBosjZNR+nI/5121gHXc=)
3: _Jvk7U5UtgHmtqQtC6BM-3qyw78.crl (hash: +EJczxntPb9QEIw/6PDclAZwZRC6MRd+O4w4u2rCvos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jan 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1e:f3:08:5e:15:b7:cd:af:99:01:c9:fc:94:b1:9a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Validity
Not Before: Dec 31 23:00:31 2024 GMT
Not After : Jan 1 23:00:31 2025 GMT
Subject: CN=b27fae9de5ed7cd53ba4b5de38be1c0b0249730d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a8:83:3f:b5:93:2b:d6:0e:62:b1:e5:84:e1:
a4:fe:43:c7:2b:ca:82:35:23:65:86:b3:f5:02:e7:
0c:b0:82:b8:16:f5:b9:86:bd:bb:e2:d5:40:b2:c8:
3e:4d:5f:21:df:f7:0f:03:1d:65:06:a4:bf:59:09:
2c:3c:2c:a2:23:47:40:fc:61:f4:fd:3f:3e:41:a9:
cd:16:37:7d:8f:49:aa:c5:5a:40:a5:5c:45:55:a3:
91:b4:fb:01:7a:b8:93:dc:bc:ba:53:74:ae:a3:39:
e6:c9:3b:29:fa:89:07:ac:2e:b2:64:95:91:2c:b7:
ca:6c:ac:3c:74:2e:f7:9b:e1:96:7e:ae:f0:d3:eb:
0e:f8:2f:03:70:ae:10:43:5d:f9:91:3a:7b:b2:78:
ed:ec:70:18:c9:3d:ba:db:07:c2:05:4f:1c:9d:a8:
ae:e9:fb:97:ca:24:f5:7a:eb:03:d5:fd:8c:48:83:
57:1b:47:29:70:c9:98:50:b5:23:e3:44:60:f2:c3:
32:df:f1:18:87:63:0c:ca:0f:2d:ad:e4:15:42:12:
2c:33:91:36:dc:05:8d:e1:f9:b2:a2:f3:56:b4:ad:
d9:bb:93:44:69:c7:45:45:30:25:31:a4:ce:78:e6:
95:4f:c4:f4:eb:69:38:8f:82:c9:bd:40:32:50:59:
8a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7F:AE:9D:E5:ED:7C:D5:3B:A4:B5:DE:38:BE:1C:0B:02:49:73:0D
X509v3 Authority Key Identifier:
keyid:FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:55:fa:51:30:da:04:7d:2c:02:8e:e1:9d:54:94:27:d2:a2:
24:00:8e:7b:bc:4f:f2:f1:70:49:b2:ad:13:35:cd:4d:4c:64:
af:61:e4:d4:5d:95:ea:06:cc:8d:0c:d9:40:b4:ea:95:56:6f:
eb:62:90:a0:8f:ee:0e:a4:29:01:a3:e7:24:ba:cc:96:78:15:
8f:b0:40:3e:7b:a2:40:c3:55:fe:b0:4f:02:1b:3c:98:26:85:
d2:5d:29:a9:fe:f8:ff:f9:5b:03:f2:a5:d6:ea:d8:aa:79:3c:
18:96:f8:f0:95:f1:8f:81:cc:07:13:29:87:1b:4e:6e:88:d5:
6c:76:78:3e:8c:16:e5:41:b8:81:38:5a:b8:87:c0:12:38:d1:
e1:a1:05:8c:27:09:9e:7c:75:ff:3e:0c:ef:bb:f9:46:16:fa:
fb:09:5b:38:5c:90:24:29:be:ae:78:62:6e:f5:70:49:5e:67:
7c:37:18:b6:24:4b:78:5b:2f:31:2a:84:d6:1e:f3:f1:11:43:
0b:c6:18:cb:21:03:65:b4:32:89:2c:ff:03:39:8d:32:8a:5b:
68:88:06:56:c3:80:d1:51:56:ec:d7:ec:6a:55:73:57:73:ac:
c9:6a:ce:d7:cc:4b:cb:e7:10:77:89:ff:f1:7c:bf:4f:09:0d:
96:60:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 1 06:54:46 2025 by rpki-client on console-fra.rpki-client.org