Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.mft
File: jNFQ_x-81CqT603fQ8pxx748cog.mft (raw, json)
Hash identifier: 4gUL3JDcajBJi2yxlPC4gMrgIZ4oFFWNRl2Kj9kswKU=
Subject key identifier: 20:10:01:76:F9:8C:F6:95:11:8D:C6:EE:28:03:35:A4:34:04:6D:57
Authority key identifier: 8C:D1:50:FF:1F:BC:D4:2A:93:EB:4D:DF:43:CA:71:C7:BE:3C:72:88
Certificate issuer: /CN=8cd150ff1fbcd42a93eb4ddf43ca71c7be3c7288
Certificate serial: 019512476D8E43A2A3B8093B3AA8795E5A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNFQ_x-81CqT603fQ8pxx748cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.mft
Manifest number: 0460
Signing time: Mon 17 Feb 2025 05:00:25 +0000
Manifest this update: Mon 17 Feb 2025 05:00:25 +0000
Manifest next update: Tue 18 Feb 2025 05:00:25 +0000
Files and hashes: 1: 7z0XvIoMLRkvX8RxCyA_VWiqjmE.roa (hash: TxbKQ6YqJPrLysV+NWU+TpSYoKbOqzVVz5RnT6KXSRE=)
2: jNFQ_x-81CqT603fQ8pxx748cog.crl (hash: k+8Ej2cUiYvkjPat3NAYnpMvG1jaVowCFWhOdnBCnZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNFQ_x-81CqT603fQ8pxx748cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:6d:8e:43:a2:a3:b8:09:3b:3a:a8:79:5e:5a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd150ff1fbcd42a93eb4ddf43ca71c7be3c7288
Validity
Not Before: Feb 17 05:00:25 2025 GMT
Not After : Feb 18 05:00:25 2025 GMT
Subject: CN=20100176f98cf695118dc6ee280335a434046d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a5:f2:f5:da:2d:8b:53:69:ab:69:c4:c8:98:
2c:05:d8:ad:cd:ac:ad:23:c2:6c:6d:b7:2f:99:ac:
96:75:c2:b4:4f:36:dd:06:a6:96:bb:3f:57:56:49:
b3:bd:25:e7:21:bc:53:19:fb:2c:9d:5c:cd:9b:36:
b5:0d:b3:90:44:0e:55:5a:5a:83:da:98:b7:5e:d5:
f0:ca:bd:10:74:08:78:c7:ad:13:9f:c6:bf:0b:c6:
46:5a:6b:ca:d1:24:2d:e4:27:b2:5c:6f:d2:5e:ea:
b3:2e:bb:a6:ad:d0:4b:93:a8:5b:1b:49:2f:73:f8:
84:6b:2d:cf:d7:f7:b8:94:f9:03:13:23:02:de:54:
2b:d9:37:a6:1c:7a:5a:9b:05:a3:e6:1b:da:b9:9d:
8d:80:c8:84:98:5a:f9:ef:f2:ee:f0:f7:c1:6f:2f:
52:ae:49:65:35:89:98:ec:dc:1b:51:c6:ad:ac:cf:
9f:6f:b9:dc:94:d7:07:00:3d:64:35:e4:7a:f4:a3:
22:9b:9f:5c:e9:19:84:40:fc:ea:fd:71:ae:91:1e:
ef:e1:3e:42:16:6a:f2:d8:db:53:0b:02:c9:df:f0:
a2:81:41:58:4a:96:17:6c:94:8d:be:10:06:b2:03:
ce:b6:02:40:b7:0d:07:42:9c:f5:fb:5a:56:f6:15:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:10:01:76:F9:8C:F6:95:11:8D:C6:EE:28:03:35:A4:34:04:6D:57
X509v3 Authority Key Identifier:
keyid:8C:D1:50:FF:1F:BC:D4:2A:93:EB:4D:DF:43:CA:71:C7:BE:3C:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNFQ_x-81CqT603fQ8pxx748cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:14:bd:0e:91:18:98:2e:82:9a:78:ec:bc:b8:6d:96:63:f6:
56:f0:d3:0f:0d:af:90:32:cf:6d:c6:06:02:ce:38:3e:db:1f:
57:4e:05:9a:40:a0:58:48:f4:69:cf:f1:c2:18:62:1e:11:d8:
6b:4b:0e:60:d3:1a:7e:b5:08:ed:1a:3e:c2:30:0c:49:a7:54:
6a:92:8e:8f:74:29:7f:de:13:cc:b9:b2:b8:22:d1:b7:79:6a:
79:7d:3a:f9:d7:2d:53:f1:b8:3b:f7:91:66:61:45:c0:fb:2c:
8e:65:75:db:1e:87:f7:79:04:4b:0e:89:a5:6b:7f:f5:b7:df:
ba:2a:75:74:ba:f9:d9:5d:f0:c9:71:06:20:3e:7c:72:85:5c:
2b:82:fb:46:58:82:16:7f:8b:5c:4c:cf:cc:75:02:06:09:de:
fa:62:4b:99:73:ef:2c:38:dd:3f:dc:6f:20:69:cf:3e:d7:5c:
66:02:a9:0d:29:45:5f:5d:ed:97:af:a7:bc:de:7c:9f:00:03:
58:06:e4:41:ca:bf:2a:4a:d1:40:62:0a:39:e4:d1:e1:56:d4:
5a:fa:7a:68:65:90:2e:19:a1:34:91:48:47:d4:3f:23:ad:e1:
75:e9:2a:cb:c3:69:11:01:5a:38:26:70:7a:5f:99:c1:5f:7e:
05:dc:40:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:07 2025 by rpki-client