Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
File: JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft (raw, json)
Hash identifier: V8vMlM4DQKyTBHqOfSkMFzL1U0qG/nfZWk7T1+IUJXg=
Subject key identifier: 1D:7D:FA:56:DD:78:76:99:D3:09:EF:FF:22:84:2C:CB:13:45:A0:54
Authority key identifier: 27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F
Certificate issuer: /CN=27032f79023052100c4393c9e690f97d7896926f
Certificate serial: 0194C3886AC0A5E0A9573138DB06A5D6ED77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
Manifest number: 1425
Signing time: Sat 01 Feb 2025 22:01:24 +0000
Manifest this update: Sat 01 Feb 2025 22:01:24 +0000
Manifest next update: Sun 02 Feb 2025 22:01:24 +0000
Files and hashes: 1: 0CjJkWjNBNTUeoDrNQPuYSnwMLQ.roa (hash: rMAMLQ6zW01Wu80wVa2CdSK+UNAIR1vD+Et52F6+MjE=)
2: JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl (hash: st/c0CdzVjHGZVubmP0eA6gtveZrADiBwgbgCuOZTNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:6a:c0:a5:e0:a9:57:31:38:db:06:a5:d6:ed:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27032f79023052100c4393c9e690f97d7896926f
Validity
Not Before: Feb 1 22:01:24 2025 GMT
Not After : Feb 2 22:01:24 2025 GMT
Subject: CN=1d7dfa56dd787699d309efff22842ccb1345a054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9e:4a:b3:78:95:15:21:a0:a2:d4:fc:5a:65:
0a:50:5b:26:63:30:9c:05:33:26:c5:c5:a6:d8:b4:
60:78:4e:d6:22:3e:16:6c:8b:05:bd:ea:da:ee:d2:
b0:59:b3:94:45:68:97:b9:cf:2c:d1:c9:78:0f:cd:
f4:d5:46:c4:bd:b7:35:4b:cb:f6:cc:01:d5:08:64:
15:c1:11:93:6a:33:2a:16:35:bc:bc:3b:cd:b5:c9:
47:f8:f9:00:77:39:b6:cc:5d:cf:68:2f:da:b2:07:
b0:06:67:3d:e9:34:b8:e2:26:76:89:e9:7c:ae:47:
b2:c3:f6:a3:fc:e0:e3:62:60:70:b5:49:03:a8:1e:
50:49:41:db:09:b9:6d:7e:ab:d3:b5:1b:cd:a2:80:
33:66:7e:12:7d:fc:17:0c:c5:de:99:26:57:bd:6d:
ba:b6:92:a2:ef:38:08:c0:57:a8:66:57:41:e3:8a:
92:91:b0:c5:26:f6:d6:53:f4:8e:5b:57:f4:8e:c1:
10:26:f2:ea:ad:80:10:7b:22:27:04:85:8e:31:65:
10:8b:12:c1:4a:20:9f:21:e5:48:46:c0:68:6f:be:
ee:2e:e6:51:cc:d3:20:56:d3:0a:e8:60:b0:67:b5:
bb:cd:35:dc:9d:3d:da:e5:96:29:70:e2:cb:1c:1e:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7D:FA:56:DD:78:76:99:D3:09:EF:FF:22:84:2C:CB:13:45:A0:54
X509v3 Authority Key Identifier:
keyid:27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1f:3d:a1:e9:c5:73:5b:fd:f7:d5:03:4a:10:98:fc:b3:7d:
f7:d5:91:af:5c:e7:03:0e:e4:94:74:e6:61:ba:d3:71:d6:07:
f8:ef:53:16:e5:b6:33:cc:58:24:3a:3e:f8:9a:75:ba:90:e2:
b7:7b:0a:ca:5e:90:ea:d1:ea:16:b2:3d:9b:0a:d3:06:e1:9d:
fc:ba:cc:6c:d4:9d:e3:61:66:1d:35:a2:cc:92:39:d9:7b:14:
41:aa:df:7c:49:26:b2:82:3f:d5:25:57:20:69:d1:f0:22:78:
2e:f9:09:61:60:27:b7:dd:ca:5f:26:fb:35:35:c8:56:da:da:
9e:e4:a1:a0:a4:ba:76:6b:6c:28:38:f3:93:b1:72:bd:d7:7c:
f9:95:2e:4b:d8:ec:af:36:42:66:0a:f9:cf:3a:b0:e5:6d:ef:
84:fb:56:a2:fe:39:bf:84:10:55:98:6e:2e:ce:a1:45:ab:ec:
6a:e2:44:85:c7:27:d9:4a:01:50:8f:08:29:89:23:de:b6:a9:
25:f6:9e:f1:10:c9:2e:85:a2:10:7b:59:77:e1:60:4f:44:a0:
5e:d3:9b:ca:b7:ae:6e:81:61:af:ec:a0:ff:71:61:1e:bf:f8:
7d:c5:34:b5:7e:51:ea:d8:ff:18:b6:b3:7e:bd:63:8d:fb:54:
60:66:49:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:22 2025 by rpki-client