Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
File: jzZAFzNC-uiz0sjMH5td3RSUiT8.mft (raw, json)
Hash identifier: 3N+OgCOlnuKRLrom53ZN+gW3Tu8tachyBJQT50c9lFY=
Subject key identifier: DB:DA:13:2D:BF:9C:DC:EA:30:AB:03:5B:35:33:51:E9:AC:27:89:09
Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
Certificate issuer: /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Certificate serial: 0194BB600FBCD1422804DE08C14708C33AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
Manifest number: 11F2
Signing time: Fri 31 Jan 2025 08:00:22 +0000
Manifest this update: Fri 31 Jan 2025 08:00:22 +0000
Manifest next update: Sat 01 Feb 2025 08:00:22 +0000
Files and hashes: 1: NS4aUYlRSBiLTkLyyg7u-X42X1Q.roa (hash: r06qcWYpFC8YgZh35Sp5HzeJjcmGRBfHKZK7KBnJFGA=)
2: jzZAFzNC-uiz0sjMH5td3RSUiT8.crl (hash: 08ecW0aRLfp4ZdRQJMcLY7hYr0ujc/Dal2S597qpH20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:0f:bc:d1:42:28:04:de:08:c1:47:08:c3:3a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Validity
Not Before: Jan 31 08:00:22 2025 GMT
Not After : Feb 1 08:00:22 2025 GMT
Subject: CN=dbda132dbf9cdcea30ab035b353351e9ac278909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:87:f9:77:68:ed:fd:dc:89:a6:49:69:e1:
ca:d4:c1:7b:9b:38:94:73:d3:55:6a:3e:1d:1a:e5:
9b:44:fc:84:c1:7a:89:c7:8c:0d:3a:a5:37:c4:70:
34:6e:a9:b2:b8:1e:8e:b1:da:36:48:ca:84:8e:ee:
4d:f4:38:68:dc:24:d3:cd:ad:80:27:ca:c0:23:63:
ed:a2:17:3b:2f:34:a8:4a:36:eb:79:03:12:f3:f3:
a7:95:db:a1:1c:8f:a1:a4:1e:90:9e:52:ef:4b:c3:
90:57:1f:a2:c8:55:c8:79:dc:f4:e8:a1:35:82:9d:
bf:d0:4e:8e:36:ac:9c:cd:d7:97:3e:77:93:5a:a9:
22:c8:df:2b:c7:9c:bb:b4:d4:87:fb:df:7a:9c:d5:
d4:99:51:7e:28:f6:a8:ad:84:14:e5:09:22:2a:a3:
9b:4c:4d:a6:bb:b3:04:eb:64:0e:f7:a6:05:fd:97:
47:07:e0:7a:da:00:75:23:0c:f0:bf:37:81:6d:52:
00:9a:30:be:6f:c5:08:3f:65:5d:d5:e1:02:ed:f1:
e2:c8:8c:a6:34:6b:60:6c:06:0d:24:27:67:a0:f2:
e2:9e:73:a1:d5:82:56:53:65:43:57:67:02:5b:fd:
e9:3c:92:75:a0:52:71:1c:95:e7:db:ce:29:0a:ea:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DA:13:2D:BF:9C:DC:EA:30:AB:03:5B:35:33:51:E9:AC:27:89:09
X509v3 Authority Key Identifier:
keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:dd:71:8c:50:9b:27:37:cb:7c:32:ae:cd:bc:b5:aa:72:91:
25:30:36:b9:59:0b:34:0a:d0:34:30:dd:a6:65:31:61:e5:0a:
4b:20:3f:af:67:42:02:77:99:31:41:af:df:48:1e:5d:6b:a6:
10:01:58:da:e3:c4:e1:de:16:60:d0:90:2a:b7:cc:60:18:6c:
79:fe:35:ad:0a:f0:0c:51:da:66:c0:e6:f7:83:da:ba:c3:2c:
6c:31:0e:33:2e:fd:da:d3:a0:4a:08:db:d0:5d:c4:13:5b:a8:
a9:aa:fc:dd:d1:a4:e0:21:17:2c:6e:fe:81:5e:ab:b0:d0:9b:
dc:d3:5f:0d:0f:f2:cf:27:bb:78:cb:de:1e:0d:2a:54:bc:49:
9d:ca:88:9e:9d:ec:ba:b4:73:8e:f3:17:8f:03:ce:97:eb:73:
b0:04:84:14:3f:8a:0c:63:a4:64:dd:ac:f6:d7:9e:82:8e:b5:
39:c5:92:b6:b0:71:ab:96:37:3c:1c:d4:c2:23:21:c1:27:f4:
aa:5c:8c:6b:f0:a3:fe:c7:02:1a:f4:7c:eb:24:c2:59:7b:51:
ab:a9:47:3f:8b:0e:e9:05:35:cb:4a:1c:41:27:2c:e5:25:66:
6f:86:08:37:92:3d:72:10:76:9d:9c:7b:1d:a4:ed:9e:f3:ae:
98:d4:37:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:33 2025 by rpki-client on console-fra.rpki-client.org