Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
File: jsSmfb7XRE3dJ-gA-2whATpbEcY.mft (raw, json)
Hash identifier: bpRxUnOIsahUMD9kuowzv7Eix7j/Lt0ZXN6qN4g6eTE=
Subject key identifier: 4E:24:7B:B3:09:E3:39:DD:83:2B:6D:7E:83:13:B6:A2:50:12:EB:30
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 0194BABB8B56ED24AC48FB9C80B50BFD2897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
Manifest number: 1159
Signing time: Fri 31 Jan 2025 05:00:40 +0000
Manifest this update: Fri 31 Jan 2025 05:00:40 +0000
Manifest next update: Sat 01 Feb 2025 05:00:40 +0000
Files and hashes: 1: YR1VaKlLKJmgPfacI5z01KK0ITQ.roa (hash: Y0yrftUHKysSM1f3rGORYltyLomawbCFUa1XRqsEEyw=)
2: jsSmfb7XRE3dJ-gA-2whATpbEcY.crl (hash: +JIoMxGE29at+DlYemWNgBBSJpK+Vdwusq4uuRKWbfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:8b:56:ed:24:ac:48:fb:9c:80:b5:0b:fd:28:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: Jan 31 05:00:40 2025 GMT
Not After : Feb 1 05:00:40 2025 GMT
Subject: CN=4e247bb309e339dd832b6d7e8313b6a25012eb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:8b:9a:08:9e:8b:f8:19:93:f6:2d:37:bb:
3f:5e:5f:17:26:02:22:f7:07:cc:91:1e:aa:be:7b:
03:2e:0d:f9:f9:14:7a:f0:c9:f3:2e:19:64:54:dc:
e7:a9:9f:e6:f1:1e:c2:64:07:60:20:e8:0d:2a:98:
be:45:f9:7e:49:6c:0b:e6:41:cf:cd:ef:79:ac:dc:
05:69:6e:bc:a7:54:43:c0:f6:1c:45:30:9c:d4:68:
2f:a4:5a:b5:c8:30:96:c4:4f:f5:89:9f:40:c6:65:
2a:5f:d5:bd:25:5b:5e:78:0e:ec:0d:80:e3:f1:1d:
3a:1c:1b:5e:4c:89:90:d7:42:de:8f:17:29:d4:6d:
67:49:7a:ea:1a:b0:97:37:06:ea:1d:9b:77:39:ff:
0b:d0:32:98:3c:65:70:ca:10:a1:8f:80:a3:ad:a7:
ee:29:52:09:89:38:96:8b:d9:0c:ad:be:12:a6:b5:
54:9c:07:ea:92:d0:ab:81:be:0d:36:4b:dd:1d:fa:
31:ad:1c:3b:f8:ab:c3:76:22:0f:4f:a9:31:86:62:
cf:98:ed:4c:26:1e:00:d9:d0:29:5a:93:dc:47:d2:
91:88:49:c8:cc:27:4b:f4:05:1d:6a:c5:e6:fa:bf:
0c:f1:f1:42:8a:d2:c9:4f:be:c6:07:40:71:99:f7:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:24:7B:B3:09:E3:39:DD:83:2B:6D:7E:83:13:B6:A2:50:12:EB:30
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:69:d3:4c:71:2e:88:50:2e:63:e4:f9:b8:96:3e:27:22:8a:
f6:33:2c:4b:f9:00:e4:0b:26:77:b2:39:79:61:56:3b:64:6c:
61:a1:03:5d:02:dd:e8:1e:e8:df:db:13:80:78:c2:ac:da:f8:
d4:1e:d4:c0:59:8e:a6:83:a7:06:72:fc:09:7b:ec:c7:eb:9b:
d4:d8:49:e6:1e:78:ec:97:f8:91:fc:26:6c:c3:92:0e:ab:92:
b0:dc:4b:d9:3a:72:51:3c:86:bc:bc:06:62:e8:ca:a8:94:1a:
55:49:07:67:58:19:9e:f8:40:84:68:23:68:b0:0b:64:f9:b6:
93:c9:c0:a6:82:fa:1b:6b:72:86:af:58:b7:1e:4d:0d:06:12:
98:f1:62:7f:19:16:d7:00:1b:48:9b:4e:d8:60:ac:66:8c:c4:
aa:0e:14:66:55:5a:4a:a3:24:57:64:e3:a7:b5:12:1a:21:3d:
25:7a:c3:b6:8e:8f:c7:4e:44:95:a5:3a:e9:a8:e8:a9:d2:16:
a8:97:88:78:cc:18:f0:57:af:02:57:25:cc:b0:49:49:bc:40:
dd:b1:e6:c9:89:5e:e1:82:0c:87:bc:1c:ab:41:fc:ff:f3:01:
0e:df:a9:24:06:4d:64:a4:18:40:b5:b7:3c:d2:ed:de:ea:55:
18:d9:96:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:05 2025 by rpki-client on console-fra.rpki-client.org