Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
File: jzZAFzNC-uiz0sjMH5td3RSUiT8.mft (raw, json)
Hash identifier: gx02tI4DQXgF/e32D5u1dWPbzDebWmOXH3deOyu+9jA=
Subject key identifier: F3:18:99:32:5C:1A:F2:02:9E:E4:38:C6:3E:4D:9F:83:C0:84:2F:3A
Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
Certificate issuer: /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Certificate serial: 0194C507F857B1C98B673457CB56410D78DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
Manifest number: 11F7
Signing time: Sun 02 Feb 2025 05:00:21 +0000
Manifest this update: Sun 02 Feb 2025 05:00:21 +0000
Manifest next update: Mon 03 Feb 2025 05:00:21 +0000
Files and hashes: 1: NS4aUYlRSBiLTkLyyg7u-X42X1Q.roa (hash: r06qcWYpFC8YgZh35Sp5HzeJjcmGRBfHKZK7KBnJFGA=)
2: jzZAFzNC-uiz0sjMH5td3RSUiT8.crl (hash: fTMILVzENPWSrpPiRTrHGJs7WnJSUcfRqOQmrjB9lX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:f8:57:b1:c9:8b:67:34:57:cb:56:41:0d:78:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Validity
Not Before: Feb 2 05:00:21 2025 GMT
Not After : Feb 3 05:00:21 2025 GMT
Subject: CN=f31899325c1af2029ee438c63e4d9f83c0842f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:04:79:c8:60:91:23:d5:80:aa:b1:b4:2d:
33:f3:e4:a4:24:d1:f2:89:76:3d:61:0c:8b:a1:d3:
2e:f1:a1:1f:ba:16:71:05:f6:25:3a:0d:08:a3:92:
0b:97:46:f8:18:fc:05:60:40:7a:89:60:30:22:12:
bb:ba:f5:9e:74:56:9b:3e:c4:3c:fe:08:2d:0a:57:
78:4b:b0:d0:e1:7d:d3:69:51:f2:70:23:68:6f:10:
1a:02:76:df:c5:f5:46:53:33:2c:70:14:56:89:28:
63:4c:06:9b:73:ac:90:d9:03:1e:f7:eb:63:0f:df:
ce:2c:de:cc:cc:af:f5:e9:b6:8c:3d:95:16:80:45:
41:4e:93:c9:df:8f:a3:99:1f:d7:08:14:a0:f9:3c:
39:c0:ba:3b:7f:fb:11:c8:64:d9:c6:a3:a7:08:4a:
c3:e1:0d:fc:89:ca:2f:6b:c7:99:a8:d1:6f:ed:72:
2c:24:6a:97:c6:ed:64:ce:0b:91:e9:37:8c:91:ec:
50:6c:d0:eb:cb:81:05:86:c8:15:1e:1f:e9:5d:28:
3d:b6:61:17:8e:ff:7e:db:2b:c0:41:a3:a0:b8:1d:
e7:d9:69:4d:f7:d4:57:7b:5c:0f:6f:7d:5e:46:b3:
af:ae:cf:80:97:7d:9d:7e:33:32:f5:2e:3c:c8:dd:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:18:99:32:5C:1A:F2:02:9E:E4:38:C6:3E:4D:9F:83:C0:84:2F:3A
X509v3 Authority Key Identifier:
keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:28:c9:35:85:53:4b:1b:3a:b1:bf:a4:87:85:1d:b7:36:ab:
49:46:ce:3f:02:55:1b:7e:a6:71:38:24:40:79:61:27:7d:84:
1b:12:d6:d2:4e:ac:eb:6f:3d:ca:12:a0:57:12:51:35:53:26:
2f:d6:b6:28:f8:50:1d:48:b5:0c:c9:a5:dc:5d:c0:ff:24:2e:
d4:ee:9a:36:0f:42:b9:a9:88:b1:9d:6d:e3:6d:a6:ac:fc:d4:
8e:72:d2:52:4d:54:a1:23:60:2d:ba:dc:46:d6:59:9b:47:df:
63:ae:ef:21:53:7f:3b:2b:ed:1c:fd:4d:8c:60:10:3f:c3:ad:
3b:f7:cf:23:57:1f:a4:ac:c0:c5:90:a8:26:67:1a:d7:70:8c:
64:22:35:f2:ef:33:06:1e:db:45:37:84:2a:c1:18:ef:ca:29:
8c:aa:40:f0:1e:e9:86:ac:ae:f2:47:bc:16:1b:84:68:eb:b6:
02:62:87:5a:63:ad:d1:2e:90:1c:42:ca:c3:66:a2:19:5a:b7:
c1:28:9f:be:fe:74:40:85:ed:e7:89:a7:d1:ac:e4:65:56:8e:
b2:7e:d3:f0:eb:ca:c4:40:ba:cc:88:18:19:b0:1c:49:b4:3a:
5d:0e:b1:1a:fc:be:b7:1d:bf:57:fe:13:ac:70:ea:32:8d:ce:
66:18:d5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:21 2025 by rpki-client