Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
File: jpC9KHAFDIRHehYesJDwXrliAWw.mft (raw, json)
Hash identifier: L6l/7BykdDrcDY45iYVETuO39D22Zg4OgkynReXV62w=
Subject key identifier: 88:96:CC:7A:6D:55:93:F7:AB:A6:3B:40:A9:C9:36:7F:E4:8E:CC:B2
Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c
Certificate serial: 0194BB292353742251EFE00792C76A332094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 07:00:22 +0000
Manifest this update: Fri 31 Jan 2025 07:00:22 +0000
Manifest next update: Sat 01 Feb 2025 07:00:22 +0000
Files and hashes: 1: BSlnEx89lgl_01HQ-REkDQoHDZg.roa (hash: MlbhOxiaJMprDhYtQeIoXiaVKxfqoVezHoPe9+NM65Y=)
2: dKs_OVLBRUdu5eRJeY09vs38U8U.roa (hash: 2juP1UOIoyK0h+ulYDMXknIUbcCOY8A/8FAOZg52IL0=)
3: jpC9KHAFDIRHehYesJDwXrliAWw.crl (hash: RHVj/ol58QDuYbnVlByfNUL8j/Pw7GmDARfaood0taE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:23:53:74:22:51:ef:e0:07:92:c7:6a:33:20:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c
Validity
Not Before: Jan 31 07:00:22 2025 GMT
Not After : Feb 1 07:00:22 2025 GMT
Subject: CN=8896cc7a6d5593f7aba63b40a9c9367fe48eccb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:1c:43:9e:88:55:6f:15:35:cd:8f:2a:6e:
aa:e5:9b:e8:62:2e:41:de:14:ef:1a:fc:fc:9a:60:
1c:9c:02:ff:20:e9:57:c0:25:17:e5:15:b0:fa:96:
34:ec:c8:1b:f8:8b:41:d3:ea:77:c9:14:0b:12:7a:
a5:a1:6e:f0:8f:85:5f:5a:da:f2:3a:b5:a8:d9:58:
11:7e:f1:0d:ba:04:59:10:cd:b4:d1:95:cf:39:1a:
2e:a3:d0:d4:51:61:1f:1e:96:41:84:ec:73:14:78:
df:52:24:47:58:d6:fe:89:35:50:6b:b8:e8:8b:a1:
70:51:61:fe:8f:31:bd:92:e4:72:f1:10:3a:31:90:
aa:fa:60:fb:4a:cd:7b:5c:ab:c0:09:35:d7:dd:b3:
86:06:58:25:39:8a:71:00:a0:13:35:ee:78:f9:5a:
07:d6:2a:ae:8d:e2:ee:b2:6b:ac:b8:23:4c:b2:7b:
60:98:ab:1e:4d:3d:a8:67:f3:8d:c7:f7:34:11:56:
bd:f0:a1:98:46:dd:ea:83:7b:22:b8:b5:43:e6:b6:
b9:cc:47:4c:d2:dd:d2:e7:3c:e1:95:cf:88:d2:45:
67:1f:d2:b5:13:d8:fc:1f:87:46:34:10:6a:62:3b:
bd:9a:7a:2a:58:95:77:4b:2a:10:33:08:a0:53:26:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:96:CC:7A:6D:55:93:F7:AB:A6:3B:40:A9:C9:36:7F:E4:8E:CC:B2
X509v3 Authority Key Identifier:
keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fe:7a:0f:93:60:c3:43:ae:d5:10:7d:fc:b9:19:a0:20:ef:
15:55:1a:cb:06:ed:d2:d2:72:22:4b:5c:62:28:9b:5f:26:f3:
1e:39:6e:2a:6b:29:1e:21:7b:38:6a:55:41:df:56:cb:40:fc:
bc:0e:da:89:a7:78:dd:d2:3e:a9:cd:e2:b5:0b:41:04:a8:62:
95:1b:f5:82:71:89:7d:2d:62:9d:26:eb:fc:c3:96:55:c4:91:
95:59:f6:63:a5:c2:e6:47:52:61:a2:aa:aa:bb:31:1d:cb:4c:
ba:d4:2a:54:3d:85:1a:55:65:d6:04:52:95:9e:c7:47:32:71:
95:a6:75:43:cf:5f:77:f2:a9:13:16:3c:56:a2:e5:4a:d7:31:
8f:7b:4a:de:11:d2:71:46:24:41:0c:cc:7f:c3:27:da:03:42:
20:f2:cf:7e:b0:b7:f9:24:97:10:b3:79:36:55:f0:00:26:af:
57:88:f0:ba:26:83:06:c6:39:32:4b:d8:02:5f:1c:ae:76:a1:
82:5c:ea:7d:8f:6b:c1:ca:ad:60:3c:9d:04:67:99:0a:92:46:
5d:2e:7e:9e:98:41:41:39:2b:7e:9a:9a:5b:47:2f:4f:9e:c5:
73:18:2c:f3:8f:3f:26:ac:73:2f:89:fc:5c:3f:45:be:50:bc:
21:36:d7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:28 2025 by rpki-client on console-fra.rpki-client.org