Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
File: jsSmfb7XRE3dJ-gA-2whATpbEcY.mft (raw, json)
Hash identifier: lbkTOXr5iXSG096SLfK5jsx18R7HYSiZ4jDHxh1JgQA=
Subject key identifier: 12:16:E6:DA:4F:B7:10:9A:6E:B3:A9:2B:67:64:DB:69:47:75:2A:1C
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 019511A2CFB450B171AFFC9FED2C8984ECF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
Manifest number: 1186
Signing time: Mon 17 Feb 2025 02:00:37 +0000
Manifest this update: Mon 17 Feb 2025 02:00:37 +0000
Manifest next update: Tue 18 Feb 2025 02:00:37 +0000
Files and hashes: 1: YR1VaKlLKJmgPfacI5z01KK0ITQ.roa (hash: Y0yrftUHKysSM1f3rGORYltyLomawbCFUa1XRqsEEyw=)
2: jsSmfb7XRE3dJ-gA-2whATpbEcY.crl (hash: OT2Q9ROeXNlmur91x6eiMyCpDZD7GkjTMgvdf/XJ29I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:cf:b4:50:b1:71:af:fc:9f:ed:2c:89:84:ec:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: Feb 17 02:00:37 2025 GMT
Not After : Feb 18 02:00:37 2025 GMT
Subject: CN=1216e6da4fb7109a6eb3a92b6764db6947752a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:8c:d7:52:8b:f9:b1:a3:48:12:29:16:90:
56:09:1e:30:d7:72:af:c3:c8:d5:da:f1:a7:97:13:
9b:37:45:fd:4b:af:5b:4d:91:c9:4b:fb:ba:2e:b6:
93:b0:1f:c4:82:c7:16:9f:2a:95:6a:1b:bd:6f:8d:
5c:bb:7d:39:9a:9e:42:ed:e1:c2:a0:aa:60:85:7d:
31:6f:f9:16:fb:0b:db:ff:b6:c7:5d:52:d8:68:94:
9a:ef:21:c7:f3:0b:4b:b3:1d:99:c4:a2:42:0c:e3:
44:b2:87:26:11:ae:80:70:2e:1f:57:e6:3b:c8:5f:
21:ec:c6:ca:af:8a:33:f7:69:ab:5a:fe:a9:d6:22:
c1:d1:95:47:e9:a0:af:19:6d:16:54:43:31:40:b3:
3a:2f:11:a3:52:33:5c:c2:ad:a4:6d:96:56:c9:3a:
95:84:84:1a:0d:4a:df:0a:57:22:40:e9:2e:e2:4b:
25:8f:0b:3d:f4:c0:5d:2e:20:a4:35:ef:12:ee:41:
5b:2e:22:b0:3e:38:d6:88:53:1f:c4:32:03:e4:87:
b5:bc:ac:97:b8:1a:fb:31:66:3d:71:ee:fb:2b:82:
5b:ee:7c:ab:a0:22:c9:f6:b5:f4:e3:29:22:fc:5d:
5c:61:dc:99:13:8f:1c:0a:9b:4f:d3:15:7a:90:f9:
24:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:16:E6:DA:4F:B7:10:9A:6E:B3:A9:2B:67:64:DB:69:47:75:2A:1C
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:da:ac:08:48:f6:e4:54:10:c3:fa:b0:32:85:7f:32:27:41:
33:9b:0b:41:1a:84:4f:01:af:f1:57:aa:07:ec:ba:64:91:ae:
29:b0:f7:2e:dd:0f:bf:70:9b:01:89:05:fb:35:b6:96:75:92:
d9:54:cb:d8:3c:2a:19:35:61:e6:75:73:1f:a5:db:1a:2c:b3:
1c:55:53:a4:f7:f8:24:d4:d6:d0:7a:a0:33:29:68:09:d3:2d:
b7:f7:8e:db:78:e6:bb:7b:85:8e:44:ef:3a:dc:7c:09:7e:ee:
64:e6:a5:8c:0b:bf:c6:56:5f:65:35:03:9b:e9:ab:0e:54:cd:
3b:4a:f8:8d:4f:98:7d:db:fc:b9:6e:84:c1:4c:fd:e5:7c:4b:
16:53:4c:1d:e2:66:2a:48:0b:9f:be:b2:3b:52:76:e1:d2:5c:
79:88:ce:a9:63:de:99:8c:97:7f:90:6e:3d:80:28:47:89:36:
82:4c:44:b8:24:56:4a:32:94:0f:ac:4e:a9:04:1e:28:ab:f1:
97:5d:76:c9:e6:ca:e8:16:85:f6:9d:69:ca:aa:e8:03:79:6d:
c5:47:64:90:26:1e:52:cc:ce:0f:84:16:02:91:e7:00:7d:d7:
cc:f1:4a:81:41:c1:3d:07:87:2e:bf:82:d9:d0:fa:a1:03:22:
65:f3:24:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:03 2025 by rpki-client