Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
File: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft (raw, json)
Hash identifier: Yu1FPFEEe7af9yjlW6nPWbUZyF9HmkxrlqE8k9ku7ac=
Subject key identifier: 09:F7:1A:53:B7:CE:E2:D4:CF:10:D4:EE:34:ED:AD:4D:61:0C:56:02
Authority key identifier: 8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
Certificate issuer: /CN=8fe502397dd6439c068bd053f28187dd77574578
Certificate serial: 0194C3196D023181367E8C2C742E516F4F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
Manifest number: 059A
Signing time: Sat 01 Feb 2025 20:00:10 +0000
Manifest this update: Sat 01 Feb 2025 20:00:10 +0000
Manifest next update: Sun 02 Feb 2025 20:00:10 +0000
Files and hashes: 1: gMULOubFLE1zJi0rMg32uHnZqCc.roa (hash: /wj2BLXMxaW2bHG7pTwC6aLckJJ+DGWw6dwVOt+QePs=)
2: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl (hash: 6Wo9YNoijD9N0SyxF3NIMPoa5WPhl+Q5CrE7AzJySR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:19:6d:02:31:81:36:7e:8c:2c:74:2e:51:6f:4f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe502397dd6439c068bd053f28187dd77574578
Validity
Not Before: Feb 1 20:00:10 2025 GMT
Not After : Feb 2 20:00:10 2025 GMT
Subject: CN=09f71a53b7cee2d4cf10d4ee34edad4d610c5602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:8c:1f:2e:b2:88:a2:b5:3c:a6:44:85:b1:
31:e3:9b:fa:e8:d8:e0:80:2a:21:91:12:0a:8b:3a:
91:23:bd:a9:0d:7a:49:23:df:0b:53:52:db:b1:78:
d9:86:4c:17:af:a1:4d:31:98:44:0f:97:63:0b:22:
98:45:b5:e0:2a:d5:69:e1:25:c7:42:55:d6:50:e9:
c5:ce:e8:e7:d5:af:40:d6:75:47:60:12:f8:54:ab:
cb:a0:0a:9f:8c:84:bf:75:c5:bc:e6:a7:b2:f8:fb:
d4:b2:3d:2e:70:ec:b4:98:c2:34:c7:35:c8:da:de:
ac:0a:10:16:82:4e:0c:4e:15:a4:9f:1d:2a:fc:e7:
9a:f4:15:a8:bb:78:98:e6:aa:ff:b3:06:e4:76:56:
8f:1c:e0:bf:0f:9a:58:e4:b4:cd:33:68:15:6d:f8:
66:d2:48:c0:07:2f:87:8b:cf:66:eb:d2:fe:53:ac:
45:0a:39:00:37:3e:d5:46:26:83:63:41:15:8f:20:
17:f1:55:69:9f:ab:b5:1f:f6:eb:21:f3:6a:be:1c:
3a:00:6e:c6:d2:08:cd:f2:f5:ae:97:09:4f:60:a4:
0a:80:df:6e:ee:45:2c:38:f4:2e:a5:21:80:68:99:
83:01:0b:9a:14:18:11:07:7d:91:e2:6c:3e:ad:23:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F7:1A:53:B7:CE:E2:D4:CF:10:D4:EE:34:ED:AD:4D:61:0C:56:02
X509v3 Authority Key Identifier:
keyid:8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:7b:7e:5a:da:c5:06:98:fa:d7:fe:25:4d:1f:a7:e2:91:32:
4c:71:55:97:7f:c7:41:63:10:9e:27:ed:6e:f3:dd:57:bc:47:
ad:8d:51:61:ec:32:54:b6:0e:16:0e:6a:27:ec:5c:2b:89:8f:
6b:73:f7:88:a2:ed:ef:08:88:4c:d0:f0:ff:bf:29:46:96:61:
21:50:b4:d6:33:c2:44:7e:bc:ae:f6:7c:ae:53:7d:cf:31:ff:
bc:5c:e8:d4:1c:ff:f6:5a:bf:a7:fd:8c:3e:9e:5f:49:dd:83:
c0:28:2d:97:27:a1:92:ad:3a:ea:6e:32:ab:c4:fe:a0:c3:ec:
7b:b9:a8:4b:73:08:b9:81:2a:b9:3d:1e:f7:9e:98:3b:46:fa:
ff:5d:89:99:fa:ba:c4:70:ed:59:14:c6:2d:b6:9f:0d:34:cc:
9a:04:01:d8:4e:dc:68:aa:56:27:66:4b:cb:1e:8e:30:24:17:
db:93:a4:1a:76:f9:c2:b9:a1:d0:bd:c5:b2:7f:d4:fb:f2:52:
1d:5c:8d:b7:26:6e:c9:1d:f9:77:58:bf:a3:e5:53:78:9d:ed:
41:af:59:87:c3:f7:26:fa:0b:62:34:06:65:b9:88:8b:86:44:
51:93:3a:0b:a8:f3:9a:b7:f1:96:cc:91:35:56:d7:ed:16:71:
d1:d9:07:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:57:57 2025 by rpki-client