Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.mft
File: JsmI8h_x7X30KmJjcjImaG08GNY.mft (raw, json)
Hash identifier: LLM4zy0xZTC7LNxR2gypa0lvBeFi8x0va2A1BF8wJ9c=
Subject key identifier: B6:21:14:58:2A:C3:25:22:BD:BA:84:8E:E3:B0:7C:37:89:F2:5D:11
Authority key identifier: 26:C9:88:F2:1F:F1:ED:7D:F4:2A:62:63:72:32:26:68:6D:3C:18:D6
Certificate issuer: /CN=26c988f21ff1ed7df42a6263723226686d3c18d6
Certificate serial: 019511A2F396EE3C8CF268972BC454688F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsmI8h_x7X30KmJjcjImaG08GNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.mft
Manifest number: 054A
Signing time: Mon 17 Feb 2025 02:00:46 +0000
Manifest this update: Mon 17 Feb 2025 02:00:46 +0000
Manifest next update: Tue 18 Feb 2025 02:00:46 +0000
Files and hashes: 1: 1-807yUmPHz4IsK5x-j_MUOfei3Y.roa (hash: ld615U7g1fyntUuZJsJkyBsfvHeO3Vnx7/PuZx0Y6J0=)
2: JsmI8h_x7X30KmJjcjImaG08GNY.crl (hash: W09Od5719WsWA8eYbd0zU5+sO0HxBY91BgcW6G7XTgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsmI8h_x7X30KmJjcjImaG08GNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:f3:96:ee:3c:8c:f2:68:97:2b:c4:54:68:8f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c988f21ff1ed7df42a6263723226686d3c18d6
Validity
Not Before: Feb 17 02:00:46 2025 GMT
Not After : Feb 18 02:00:46 2025 GMT
Subject: CN=b62114582ac32522bdba848ee3b07c3789f25d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:da:b8:d3:03:42:97:35:19:b7:46:9d:b6:ce:
d6:5f:de:94:74:eb:64:5d:42:78:31:07:f5:56:97:
43:7b:c3:f0:87:d6:dc:d5:54:4f:60:31:55:2f:33:
30:80:32:ab:16:cd:ae:9c:97:d0:67:0d:73:56:33:
80:b3:d5:bf:af:ae:2a:e0:45:b3:0e:a1:9b:50:28:
ce:2c:29:c5:4b:d8:84:99:cd:2e:3b:4f:4c:d1:b6:
a7:cb:71:36:b5:eb:43:7c:5e:eb:8f:15:9e:30:9d:
db:5d:e4:09:e9:54:bc:c5:09:05:57:f0:c1:4f:40:
97:fa:ad:3d:75:ae:b9:5b:3f:fb:33:dd:a4:a0:04:
c7:5f:8f:99:06:26:2c:28:a1:21:95:73:99:1d:05:
4a:d8:9c:4b:7f:62:2c:b9:42:26:f8:ec:8d:92:ca:
74:2f:ae:8a:7f:24:dd:51:9e:ce:3b:0b:5a:3d:8c:
2a:03:16:32:d5:fd:87:ff:8b:75:5b:ac:b8:f1:dd:
a2:8f:e3:ad:9f:5f:7d:46:23:48:fa:1a:b3:89:f6:
d5:ef:7d:e2:1e:ca:c6:50:71:25:b7:7b:8f:e4:20:
b4:e2:b8:80:87:0e:c3:88:7e:cf:95:ed:ae:7f:c6:
2c:b9:b1:e0:c5:3a:be:cb:e9:a1:01:2d:0d:fd:d7:
cb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:21:14:58:2A:C3:25:22:BD:BA:84:8E:E3:B0:7C:37:89:F2:5D:11
X509v3 Authority Key Identifier:
keyid:26:C9:88:F2:1F:F1:ED:7D:F4:2A:62:63:72:32:26:68:6D:3C:18:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsmI8h_x7X30KmJjcjImaG08GNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:29:b5:f0:27:e0:da:73:4c:d6:b9:ed:1d:9c:00:f1:39:a7:
95:8d:47:66:2d:aa:72:8a:67:17:1f:bc:af:37:37:2f:5e:0d:
82:8f:48:74:ef:f1:11:77:d7:cb:28:2d:78:c9:5b:00:86:1a:
6d:5a:05:0f:a0:c0:6f:46:c5:55:79:26:5c:c0:cb:e8:0a:5f:
a6:f2:c4:9e:0b:b5:15:fd:e0:37:3c:56:f1:e3:72:48:30:f5:
cd:20:c1:51:c6:02:84:89:6f:ae:89:8b:83:a1:9e:97:cc:13:
84:5e:4a:30:64:f8:56:d8:00:60:1b:f4:04:4c:2a:af:53:76:
6f:9e:ea:1e:80:83:64:71:3e:e6:6a:5d:98:7a:e9:49:f9:dd:
a3:59:1f:db:9b:16:3c:16:b9:08:48:ec:73:c9:79:65:22:6b:
09:4d:65:b1:f6:b2:8b:58:cf:74:e3:7f:2e:d3:2a:9c:9e:c6:
ee:b9:eb:98:a1:0c:16:12:43:5e:5f:84:33:8e:f4:63:2f:e0:
e1:46:49:43:f0:8d:f8:cc:fa:26:8d:fc:85:e3:01:52:c3:43:
6b:6a:c1:45:f5:24:52:af:cb:69:c3:15:d2:9e:f3:89:dc:7b:
33:01:c5:59:65:65:13:c7:7e:74:0d:b0:90:06:29:55:86:c0:
63:d0:90:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:32 2025 by rpki-client