Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
File: JCSASgJ3cDnEz9jADcKfqR2KOQw.mft (raw, json)
Hash identifier: UfLZP5CySSM+JGF15ZRNGT+HxmJuI3buaWKmzGJNwb4=
Subject key identifier: 3D:47:4C:ED:48:49:77:1E:8D:D0:0A:90:59:7A:8B:E9:21:BC:79:57
Authority key identifier: 24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
Certificate issuer: /CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Certificate serial: 0194C42C5CDDBCF1F876CF112174643C6163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
Manifest number: 6B
Signing time: Sun 02 Feb 2025 01:00:29 +0000
Manifest this update: Sun 02 Feb 2025 01:00:29 +0000
Manifest next update: Mon 03 Feb 2025 01:00:29 +0000
Files and hashes: 1: JCSASgJ3cDnEz9jADcKfqR2KOQw.crl (hash: P5DeV5NV8Y/R8UJmYGM08bKt4eZYooEF7O4kioQHu/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:5c:dd:bc:f1:f8:76:cf:11:21:74:64:3c:61:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Validity
Not Before: Feb 2 01:00:29 2025 GMT
Not After : Feb 3 01:00:29 2025 GMT
Subject: CN=3d474ced4849771e8dd00a90597a8be921bc7957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:43:46:e8:7b:d9:c1:78:91:17:ed:a4:61:
d6:de:04:a9:5b:48:e5:68:b7:17:21:56:d3:ee:d2:
72:97:29:ad:8d:5f:23:41:a9:d1:35:6f:6c:5a:f5:
f1:ba:e9:ef:c1:39:02:03:6b:43:e3:e6:03:0e:4d:
34:d1:04:e1:28:04:40:05:36:b8:fb:30:0f:9e:90:
54:90:b0:86:b6:3a:89:7f:89:a4:4b:bf:57:f0:a4:
24:9c:66:9c:02:50:2f:3e:ad:37:6f:76:85:36:4d:
72:fb:c2:a0:bd:70:37:75:71:cd:20:44:a8:84:d9:
cb:ab:f7:1d:4a:d3:f3:15:5d:96:51:1a:85:ad:dd:
05:13:13:2d:8c:04:b2:5d:9c:d5:24:c3:fa:d4:e3:
46:8a:9e:70:e2:92:d6:ff:64:75:76:23:c1:4b:2b:
a0:de:da:55:ee:03:fc:d2:d7:01:b8:91:d4:8c:60:
03:c3:e8:8b:db:1e:02:0a:f1:8b:c0:30:39:4c:75:
a8:9d:d1:b6:65:4c:7b:0b:01:47:9e:05:f0:ae:0c:
af:22:5d:22:1b:de:dc:a0:21:ed:6d:d1:ea:98:2f:
55:60:df:72:68:c6:3d:35:4b:5d:64:1a:31:82:d8:
99:09:fc:7d:08:c0:eb:0f:ce:57:f4:35:2e:e8:a1:
3f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:47:4C:ED:48:49:77:1E:8D:D0:0A:90:59:7A:8B:E9:21:BC:79:57
X509v3 Authority Key Identifier:
keyid:24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:5a:08:af:cf:fb:77:aa:8e:37:7d:06:5e:f4:2f:be:b9:87:
3b:32:fe:22:e3:00:1d:43:ed:8f:47:eb:f0:03:5b:c2:c0:ae:
72:2a:f6:46:e4:9f:ae:c9:b3:dd:5a:24:c3:70:32:fd:6c:84:
7c:be:e5:64:9b:09:77:b5:90:c1:5f:74:59:e0:10:7d:a9:30:
6d:93:85:0d:0b:a2:99:e7:1f:29:97:97:76:76:26:78:b0:a9:
d7:ad:f3:8c:2b:d1:b5:1e:06:17:1d:a1:2f:7e:86:49:5a:fe:
aa:7a:0d:06:35:88:48:3a:8c:e0:f5:c8:df:1c:ae:8a:c3:18:
37:82:89:21:4c:02:d5:17:78:2b:19:84:4c:c9:a8:7b:02:f4:
e6:72:ab:1c:09:8b:6e:d4:5e:76:0a:2e:1e:09:0d:12:21:87:
00:4a:cf:06:a2:8d:e8:03:e9:15:1b:d1:2d:fd:f8:b9:c4:4b:
4c:78:32:8b:8c:88:8d:35:51:c1:40:a2:a4:4a:bf:42:40:37:
df:be:20:8b:ce:17:5d:26:da:7f:7b:74:7e:14:42:f9:34:fc:
e1:2b:af:f4:46:c5:ea:e1:57:ad:5e:87:7c:b7:95:69:0b:44:
25:2d:3c:8b:4e:51:93:bd:c2:07:83:34:ac:ba:15:01:7e:af:
a1:b6:8f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:02:04 2025 by rpki-client