Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
File: jmNwTVUB7XWm4glm6_B6NlVbGrY.mft (raw, json)
Hash identifier: CgWrEXtCnGDHsGEmMB1CWV/fr5rR5Zk3xfoVQhdHXeY=
Subject key identifier: 82:04:40:6F:FC:3D:CF:C4:EE:2D:CF:0B:B6:99:53:E9:DD:52:17:E0
Authority key identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6
Certificate issuer: /CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
Certificate serial: 0195127E2C458B6DA9D194FF071CB8A8205A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
Manifest number: 0B38
Signing time: Mon 17 Feb 2025 06:00:13 +0000
Manifest this update: Mon 17 Feb 2025 06:00:13 +0000
Manifest next update: Tue 18 Feb 2025 06:00:13 +0000
Files and hashes: 1: IzJAsPZQ1UGxFANdsG3oY69uKXA.roa (hash: CcyMr2iMEV8JAHDDzlmMrcymUQDZ/T8pHrLiuemKNGk=)
2: jmNwTVUB7XWm4glm6_B6NlVbGrY.crl (hash: uxvkspkWcNaQAlAaFY0ADIIi98Xdvnv68v0w6XLOPwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:2c:45:8b:6d:a9:d1:94:ff:07:1c:b8:a8:20:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
Validity
Not Before: Feb 17 06:00:13 2025 GMT
Not After : Feb 18 06:00:13 2025 GMT
Subject: CN=8204406ffc3dcfc4ee2dcf0bb69953e9dd5217e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:23:91:21:fc:5b:59:b2:77:95:f7:a8:42:
24:30:e1:b1:61:d6:f3:65:02:e1:30:18:7c:3e:bc:
56:81:0f:b0:16:b3:40:7f:dd:d2:3b:39:9c:44:23:
a5:62:bf:72:19:9e:1b:92:15:27:eb:0e:55:a1:33:
5f:fa:2c:72:fd:dc:0c:46:03:23:ad:ac:3e:a5:7d:
68:5e:2b:7d:b2:55:37:71:8c:b8:41:e8:e8:b0:07:
ef:ad:5d:2d:31:0a:be:8a:32:3d:3a:91:12:ae:5f:
83:96:04:1a:3e:f7:a5:d9:4d:1f:ba:e5:34:73:d6:
c3:d6:e4:db:73:16:66:ba:4c:51:ac:a9:3e:87:06:
e4:f8:02:92:28:a6:61:71:3e:73:45:20:db:64:37:
9d:c3:e1:47:23:29:1e:a4:4c:cf:4c:8c:df:ac:ae:
c5:69:7d:ed:b0:0d:13:d3:83:60:0d:06:25:47:84:
7a:d7:b3:70:0f:4f:9a:43:a4:0d:f6:e8:9e:6a:6e:
4c:1e:ff:70:f1:16:c4:aa:72:6b:54:a6:b9:86:64:
72:a2:ee:30:d5:80:bf:bd:b3:e8:e0:3a:ab:99:21:
87:34:d6:1d:f0:6f:de:f7:90:c8:85:16:96:98:64:
bc:be:48:c5:5f:23:5c:a9:cd:d0:c9:fe:87:1c:2d:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:04:40:6F:FC:3D:CF:C4:EE:2D:CF:0B:B6:99:53:E9:DD:52:17:E0
X509v3 Authority Key Identifier:
keyid:8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:62:ce:82:c1:4f:97:99:8b:4e:e6:1d:9a:b8:c8:b0:cc:de:
8e:07:bf:7a:50:7a:99:b4:79:35:1a:5f:05:d8:3b:12:db:bf:
08:7d:bd:07:fc:cd:79:ee:93:fc:3b:2f:78:78:28:ec:25:62:
06:31:39:24:d1:78:05:c7:99:12:1f:9c:d1:cf:3c:3d:79:9e:
4b:b1:52:27:f1:80:32:06:2e:ff:a8:5e:f4:a6:1a:6e:18:a0:
aa:c2:67:03:6c:36:34:61:c0:c1:f0:59:47:5a:a3:c1:cc:43:
5f:97:bd:ca:02:9b:ef:86:db:a2:94:91:5f:e8:f0:0c:6a:d6:
fd:5a:67:d8:10:ab:8f:32:48:c9:4c:b7:de:88:49:25:c1:36:
08:40:52:2e:44:b2:92:75:d0:39:ce:a4:2f:7c:72:cb:8b:3b:
b6:73:58:fe:2b:08:fb:9a:e6:ec:e0:c0:c3:51:9f:c8:df:ec:
79:90:df:3f:e4:86:93:03:83:32:c0:37:10:a2:2c:d3:9e:52:
17:d8:c6:cb:38:27:90:cc:68:d0:75:92:90:d4:a5:0d:d4:97:
3f:0c:15:c0:08:75:04:6e:10:d8:c1:5d:34:a1:38:2a:be:7a:
ee:c4:1a:2c:a0:72:35:51:05:4f:be:6b:8a:ff:3c:c0:63:88:
75:c6:e2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:06 2025 by rpki-client