Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
File: jNtFdj7woZYpOzOAyIj4Oox803c.mft (raw, json)
Hash identifier: kwGNDRrS3XnxlDbwaDezaswaYtCWymSIT8MaLXMQQjw=
Subject key identifier: 8B:60:64:CF:D1:07:7C:B2:3C:C9:4B:F3:9E:EF:70:E9:8D:9D:18:2E
Authority key identifier: 8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
Certificate issuer: /CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Certificate serial: 0194C3F5DE918697A2D6628FFE931D0CFE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
Manifest number: 0301
Signing time: Sun 02 Feb 2025 00:00:57 +0000
Manifest this update: Sun 02 Feb 2025 00:00:57 +0000
Manifest next update: Mon 03 Feb 2025 00:00:57 +0000
Files and hashes: 1: jNtFdj7woZYpOzOAyIj4Oox803c.crl (hash: fIiqjmrpR6Dwt3keR9Zjcld3zkzM9AQ9Lvo61ul1Dz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:de:91:86:97:a2:d6:62:8f:fe:93:1d:0c:fe:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Validity
Not Before: Feb 2 00:00:57 2025 GMT
Not After : Feb 3 00:00:57 2025 GMT
Subject: CN=8b6064cfd1077cb23cc94bf39eef70e98d9d182e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:ce:e2:a1:69:07:c7:13:ef:8d:66:fd:e9:
a7:95:3e:7a:0b:cb:e2:1d:20:d0:01:3b:68:bc:c4:
5a:1d:1e:a6:22:f5:ed:fa:7b:36:7a:b6:b0:f5:8c:
c9:b2:63:ba:c8:b0:c8:15:08:99:64:2e:90:b7:1d:
49:86:de:00:71:47:43:e6:02:a5:9c:a1:77:1b:1d:
66:12:77:7b:9d:b9:92:0b:05:06:15:2d:b2:cd:94:
11:ca:d3:5f:ee:cc:86:f6:93:bb:2e:19:1f:e5:d2:
de:9b:37:76:2a:85:59:46:91:ea:98:fa:1f:73:35:
fc:4f:a7:4d:54:14:0c:76:eb:5e:20:52:e4:ba:7a:
5f:bc:04:37:9c:88:f3:9c:d8:9a:92:da:c3:27:e0:
d6:d0:aa:77:66:0f:6f:ac:7b:df:ad:81:cd:8e:26:
28:8d:3b:2d:0d:c9:63:4e:2f:d0:d4:7b:86:35:63:
c9:d1:5e:af:77:f2:b6:a0:57:0d:69:64:f2:69:93:
fd:3f:c4:55:dd:ea:02:33:8e:26:79:3a:05:f4:70:
9e:55:d3:41:30:be:38:0d:42:36:8b:29:1c:8f:7a:
43:f8:c0:f0:e9:d2:ac:7b:a7:3f:3e:48:4f:be:18:
bd:ca:6d:8f:2d:d4:ff:d1:c9:d9:25:32:ad:01:1e:
f6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:60:64:CF:D1:07:7C:B2:3C:C9:4B:F3:9E:EF:70:E9:8D:9D:18:2E
X509v3 Authority Key Identifier:
keyid:8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cf:1d:3b:11:e2:e7:c0:6a:3f:c0:16:10:8c:c1:c0:a8:5e:
4f:53:50:b4:6c:25:9b:3b:b0:a4:13:a3:b8:8f:dc:98:f9:9d:
74:85:64:e3:f3:fe:90:35:a9:b8:16:58:f7:8c:4b:bd:7a:76:
08:ff:3e:b1:8a:96:6b:c0:7d:6f:f5:d1:5e:08:e2:77:c0:98:
bf:4c:aa:17:0f:d7:ec:4e:21:77:6b:36:a5:54:c9:2f:8d:19:
b6:ec:f0:a2:50:9b:34:0e:b8:1b:8e:a7:8c:4e:1c:8c:62:d2:
07:16:9d:4a:4e:4a:91:2c:2a:51:e1:10:fb:72:7b:9c:8a:9d:
0e:2a:6c:52:30:41:48:e7:9b:33:31:4a:3c:bb:ed:32:d3:eb:
bf:93:6d:1f:9b:e3:89:6f:02:19:5d:04:2d:90:e6:6f:52:3d:
7c:17:ee:13:bd:d7:37:cd:e5:7a:46:e1:d1:52:ba:4c:73:60:
13:de:35:29:6e:46:f0:fd:70:60:90:83:f3:d0:a5:e4:c4:e2:
a3:72:9d:a1:34:9f:1c:6f:a5:01:5f:aa:5a:12:44:79:f0:30:
06:b6:2c:a1:80:04:3f:8a:7c:2b:5b:f3:01:27:c8:98:87:ed:
4a:c9:4b:3c:95:5a:ea:a3:55:bd:30:08:2a:37:0a:fa:54:df:
a6:02:94:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:59 2025 by rpki-client