Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
File: jQtYT2A1_loofFZ_HjhUuPvCoMI.mft (raw, json)
Hash identifier: OMONFHfWKZTQKkVfcx+MMLuQ8hEHGhPSRTxB1AZfaQQ=
Subject key identifier: 07:DD:0C:A6:37:59:70:FC:1C:1D:0F:D5:74:4F:63:C9:49:C5:F0:CC
Authority key identifier: 8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
Certificate issuer: /CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Certificate serial: 0195113538F98696291F0321A6B650212356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
Manifest number: 1453
Signing time: Mon 17 Feb 2025 00:00:55 +0000
Manifest this update: Mon 17 Feb 2025 00:00:55 +0000
Manifest next update: Tue 18 Feb 2025 00:00:55 +0000
Files and hashes: 1: 4QNIL4c6Gz_sxHoIV5bmO3J-yRY.roa (hash: hUEgN9PKhux4KaNWV6X/MwNUuCaPOczFnXagh0lAR1c=)
2: jQtYT2A1_loofFZ_HjhUuPvCoMI.crl (hash: iiixsKHEsx72//L6SM/Qgc0i7N9gFVazRzeKok+d3Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:38:f9:86:96:29:1f:03:21:a6:b6:50:21:23:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Validity
Not Before: Feb 17 00:00:55 2025 GMT
Not After : Feb 18 00:00:55 2025 GMT
Subject: CN=07dd0ca6375970fc1c1d0fd5744f63c949c5f0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9c:3d:c6:bb:df:ec:fe:10:89:8f:ec:d6:44:
c4:ae:c0:e5:e8:93:f7:59:f8:3b:65:3e:67:29:9f:
98:9d:73:d0:bb:20:d5:11:e0:a0:0c:62:62:11:e3:
ea:60:b7:b7:a8:e7:e8:23:ed:f6:cc:d7:88:b3:aa:
22:d9:a1:98:b3:94:9a:d3:ea:c8:f5:08:7e:24:d9:
54:36:61:b0:32:f9:9c:b8:58:9e:c7:3a:9d:b6:15:
e3:d3:e7:a7:93:91:12:56:1a:dc:d5:fd:e4:d3:d4:
fa:15:bc:8e:7a:61:20:41:77:9a:8c:c9:44:d6:e8:
44:97:b9:af:aa:5e:19:0c:37:84:12:9f:c8:5a:64:
8b:04:42:c7:42:98:b8:54:11:1d:ab:69:85:a1:55:
5c:60:cd:41:d1:8b:1a:a6:e6:1b:7b:94:77:12:3e:
a5:3e:8c:7d:86:e2:2a:5e:52:a2:68:5b:82:d7:5e:
9f:dc:1c:0f:f9:be:3b:cf:de:3e:b5:af:65:1f:3d:
0f:ad:f1:2e:75:13:6f:87:c1:45:c4:49:27:74:fb:
2e:c2:57:5b:34:a1:51:23:cb:cf:68:c0:d8:c0:07:
e5:4b:6b:66:bb:58:2d:bd:1a:53:be:26:3e:fc:e2:
b5:5b:a5:1e:bb:9e:e7:f4:35:9b:ce:39:79:74:d5:
d1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DD:0C:A6:37:59:70:FC:1C:1D:0F:D5:74:4F:63:C9:49:C5:F0:CC
X509v3 Authority Key Identifier:
keyid:8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d2:ec:a9:e1:ae:8c:89:77:f9:9b:4e:f0:ab:2e:34:60:a3:
9d:93:3a:11:59:a1:09:94:68:44:c6:4e:1d:79:78:d7:b0:08:
90:58:95:bc:bd:0f:04:25:1e:ca:83:75:43:ec:51:a5:20:28:
93:fb:77:70:93:22:af:99:d5:e0:b2:46:af:12:05:7d:e9:19:
86:ad:5c:cc:0e:a2:f3:af:ff:89:87:3f:03:2a:ba:d9:d4:14:
10:94:6d:f0:99:88:97:ff:2e:a6:0d:c1:4f:3e:ad:71:6f:ed:
3d:ba:8e:51:a6:6b:0c:80:54:51:0b:1e:a0:69:22:6d:b0:25:
9c:34:8e:5c:29:ef:0c:79:8f:5f:0a:f1:d2:fa:c0:00:f8:af:
57:81:2e:0b:dd:38:7c:51:ea:08:2d:db:4e:12:79:e5:f0:6b:
ce:e9:aa:09:79:23:ea:1d:02:91:a7:10:9e:e5:c8:2f:ce:d0:
31:13:3b:eb:b9:a4:d5:02:70:34:c2:a9:dc:9c:dc:22:4f:f0:
f9:63:5e:c1:ed:8c:e4:60:d0:e2:68:ff:f2:6e:83:d3:e6:f2:
6c:b0:d3:01:f4:e8:aa:4f:c4:6e:07:51:39:fe:33:a1:7b:cc:
06:c3:cb:69:db:73:6b:c0:e5:f4:c0:54:9f:32:91:0c:98:75:
08:4e:f0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:27 2025 by rpki-client