Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
File: JNClyizxvZEvQsyM9lH2_ojnJqQ.mft (raw, json)
Hash identifier: x1bk/YEWKONnQozumtkuDWGbxijuCQR1pHizeDqEpV0=
Subject key identifier: 91:63:14:4D:88:07:73:A0:35:2D:88:1C:52:2E:97:D0:28:5A:F2:AB
Authority key identifier: 24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
Certificate issuer: /CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Certificate serial: 0194C3878472345FB3D0D7F3CF80F081B443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
Manifest number: 42
Signing time: Sat 01 Feb 2025 22:00:25 +0000
Manifest this update: Sat 01 Feb 2025 22:00:25 +0000
Manifest next update: Sun 02 Feb 2025 22:00:25 +0000
Files and hashes: 1: 5mE6WJ9C1aVlmVoIkqUjqUKu6GA.roa (hash: iW1w4Z2DczRn4meCeEiq3QUgbwsTpwLpy6/um6q5LvU=)
2: JNClyizxvZEvQsyM9lH2_ojnJqQ.crl (hash: vooinz2wfHOGbhDdKU59izSOVW79nBUZHThPEndfXzw=)
3: UABXDisY7UIcuu729SEVeaTHi9g.roa (hash: OYLFe1eOiXjeIqPxbtFA6YEKDGNFPpOrX8ZmLcir4vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:84:72:34:5f:b3:d0:d7:f3:cf:80:f0:81:b4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Validity
Not Before: Feb 1 22:00:25 2025 GMT
Not After : Feb 2 22:00:25 2025 GMT
Subject: CN=9163144d880773a0352d881c522e97d0285af2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:53:46:da:38:ac:9e:f4:2b:55:14:ca:81:
67:d9:bd:de:ff:2d:41:e9:31:c5:9e:a5:31:16:33:
12:69:68:b8:ae:bc:31:8f:db:01:d4:e3:88:43:70:
80:4e:7b:c8:b1:e0:d0:23:d9:24:d3:f9:b2:0b:15:
c8:86:e2:97:5b:f4:c6:2e:36:7b:88:2d:7b:6d:fe:
a0:40:ca:9c:9b:54:22:d1:24:6f:c1:f6:a0:04:16:
d2:94:89:61:d2:12:0e:79:e3:84:ce:fe:ab:75:29:
5d:ad:33:9f:40:b5:95:43:1d:50:7c:f5:71:a8:eb:
a5:24:0a:a5:77:63:f3:97:af:1e:07:01:93:8b:d6:
67:d8:c0:6d:41:69:17:75:d5:5c:ca:b3:8d:db:68:
89:78:89:f8:46:1d:d3:a8:21:32:01:33:ca:96:db:
97:b0:e6:27:72:bc:bf:96:ff:41:61:23:3c:25:00:
a3:6d:14:18:7f:4e:41:8a:b4:ea:c8:07:92:52:56:
77:4c:5a:d0:26:f8:3e:45:d7:4e:5e:22:5f:a2:04:
ac:65:35:ea:6e:d4:17:36:33:5d:d1:5d:22:be:b4:
70:47:56:d8:b5:9c:85:1c:4e:7c:c8:1d:71:26:ee:
fe:f4:0a:76:96:61:83:58:8b:ee:3b:ac:4b:02:5f:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:63:14:4D:88:07:73:A0:35:2D:88:1C:52:2E:97:D0:28:5A:F2:AB
X509v3 Authority Key Identifier:
keyid:24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:52:11:97:d8:0f:9c:31:3a:cc:71:61:bc:d9:76:be:dc:6e:
40:7d:fb:b3:6e:47:a3:36:71:bc:9a:14:53:39:08:0f:5c:3d:
d7:f7:5b:58:cd:db:32:d4:56:b9:78:67:fc:f1:f2:c0:db:a5:
66:a9:c9:e2:58:03:48:47:4c:df:c3:16:ee:37:ff:67:50:c4:
c5:2f:22:a6:8f:f3:3b:6d:4d:77:24:9a:d1:ad:7d:a8:0d:0e:
1d:35:41:1e:2f:10:bb:49:4c:35:86:8c:17:3e:60:29:3c:86:
2a:37:40:92:98:4d:90:ce:34:87:0c:1e:46:fd:55:13:dc:82:
f5:0d:75:92:6f:7a:61:81:5c:f5:8f:e7:ea:62:d8:72:1d:c8:
6a:61:99:21:bf:09:85:7c:ea:89:c1:5e:f2:b0:11:8c:5b:9f:
08:77:e3:b4:c6:c0:cf:ab:00:3a:a5:53:fd:a1:06:87:aa:3e:
fa:76:01:5f:4c:73:0d:5b:a8:b3:23:f6:97:72:07:a6:54:e9:
d2:39:43:83:88:dd:76:cd:5f:50:f8:61:f5:e0:59:ac:23:da:
dc:a8:04:e8:01:a8:22:d3:81:d3:39:7a:d2:dc:6a:a3:7b:e4:
53:ef:ac:e9:1f:88:b3:27:ce:cb:00:63:57:d5:63:e9:85:8d:
16:1f:cf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:02 2025 by rpki-client