Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json)
Hash identifier: UWq3QbStjKiOFz6Mas0uWjxZBK9iPH1eSCS522YNfVI=
Subject key identifier: 85:3C:80:B8:DC:CC:FA:B9:7A:D8:EE:97:EA:08:64:96:20:4A:63:C4
Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
Certificate issuer: /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Certificate serial: 019511A25DB93D35D94E97974E1C964F245E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
Manifest number: 07C7
Signing time: Mon 17 Feb 2025 02:00:08 +0000
Manifest this update: Mon 17 Feb 2025 02:00:08 +0000
Manifest next update: Tue 18 Feb 2025 02:00:08 +0000
Files and hashes: 1: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: saskz7N3nbO5Bfo+y2HkhV6k0d2jOeT0/xszw1h/vXQ=)
2: y1KtkhbJcf8xMKGegKszt0QDaOo.roa (hash: MP5sL9q4mE2nj3U5Tn7LLkafXsvaYmUnSKWAsDGsqZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:5d:b9:3d:35:d9:4e:97:97:4e:1c:96:4f:24:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Validity
Not Before: Feb 17 02:00:08 2025 GMT
Not After : Feb 18 02:00:08 2025 GMT
Subject: CN=853c80b8dcccfab97ad8ee97ea086496204a63c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:88:b0:82:1c:1e:27:99:be:93:2c:c7:d0:
33:3d:94:25:6d:3d:3b:de:45:c4:e8:fe:7b:10:5a:
22:e5:39:be:8f:78:8f:16:01:3f:a1:53:48:83:f8:
29:46:99:32:3a:3d:72:df:e8:67:00:c6:a4:88:39:
ac:22:c2:7e:9b:2c:85:e1:f9:54:79:10:a3:72:ac:
8f:c5:06:1e:51:c8:5a:e6:49:cf:e7:f4:21:79:8c:
08:81:f3:57:ea:d2:3e:bf:fb:52:a1:db:a0:2e:08:
f1:0a:d4:31:90:c8:cc:a4:f5:5d:1a:ff:a4:5b:5d:
1b:0c:37:99:64:af:46:94:12:a2:dc:f6:72:59:49:
d5:7e:13:5c:61:c9:80:ca:0a:81:89:bd:7b:b5:b2:
a3:6a:4c:20:d1:e1:ea:ed:34:e7:18:15:b6:c8:ef:
5a:87:b1:2e:50:f7:ca:8d:60:bc:b9:0e:b7:1b:ff:
ce:ae:b5:8a:cf:cb:0d:49:b7:6c:38:4d:cd:8d:05:
64:0f:40:89:e4:a2:b2:57:03:21:6d:30:89:00:1b:
26:7f:0e:e0:4c:2d:65:26:d7:a3:17:8c:73:64:cf:
dc:f5:9a:04:78:a0:17:21:49:4c:9b:f4:47:3f:7f:
f4:72:44:de:66:39:d0:fe:ae:fc:94:e5:c5:e9:2c:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3C:80:B8:DC:CC:FA:B9:7A:D8:EE:97:EA:08:64:96:20:4A:63:C4
X509v3 Authority Key Identifier:
keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2f:95:9e:df:be:7c:de:71:ab:14:de:e1:e4:ec:f0:43:21:
5a:ae:0f:a1:7a:09:09:f5:18:bf:f0:6d:a5:cd:34:27:7d:50:
0f:24:a1:4a:47:54:82:19:ca:05:d0:51:32:83:1e:a3:6f:c6:
44:d3:62:c0:f6:6a:75:6a:ae:c1:e8:f9:8c:c7:f2:11:b0:20:
68:fd:7d:54:df:f3:b8:c2:a4:66:43:1b:dc:7e:a0:e8:49:69:
dc:df:03:ce:c1:8b:20:3e:b7:84:b3:56:28:8f:ba:b8:29:de:
ba:2d:b5:d2:c4:ee:b1:22:b4:b4:fc:fe:52:6d:a7:92:e4:3e:
b6:67:61:fd:b3:5b:cd:5f:ed:e1:31:d7:b0:9b:b6:f4:7f:70:
54:66:6e:96:01:21:a7:cb:d1:3e:66:22:13:f1:83:38:a3:a6:
59:62:2d:77:08:a0:b6:8f:2d:38:ec:bb:3e:33:a0:26:33:45:
72:e5:d3:58:fe:2f:4a:8d:2a:43:e3:91:7f:b2:9f:3d:0f:af:
8c:cd:99:b3:84:9a:cb:d4:31:7e:ec:86:8a:8b:49:b9:8c:dc:
bc:e9:ed:b4:ad:d5:24:72:63:d5:c2:2f:f8:a5:62:d7:fc:58:
df:c4:2d:52:c9:63:54:71:d7:5a:b5:90:a2:b1:36:18:21:8c:
d3:67:73:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:05 2025 by rpki-client