Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
File: jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft (raw, json)
Hash identifier: zpkWjwaemteHXHgu6b6rohxn+UVxuSUoiz6lXVf5gpk=
Subject key identifier: FA:0B:E7:1F:7A:C3:E2:A8:ED:D3:1A:DE:02:D3:EE:2C:5E:1B:DF:FD
Authority key identifier: 8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
Certificate issuer: /CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Certificate serial: 0195108FB3BFD6CA2A28D45EC1324D25EF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
Manifest number: 0298
Signing time: Sun 16 Feb 2025 21:00:07 +0000
Manifest this update: Sun 16 Feb 2025 21:00:07 +0000
Manifest next update: Mon 17 Feb 2025 21:00:07 +0000
Files and hashes: 1: VCruuJKpBEqYRmO1DijMiFDvfUg.roa (hash: 7eO2Zsxc+ifKLBaQAWYNaRvbWk6+lGNPQlm3ncwwgpg=)
2: jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl (hash: neZym7Py+RV4arI9S7GP7q8fp4F2wrGENoVSqjIXDps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:b3:bf:d6:ca:2a:28:d4:5e:c1:32:4d:25:ef:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Validity
Not Before: Feb 16 21:00:07 2025 GMT
Not After : Feb 17 21:00:07 2025 GMT
Subject: CN=fa0be71f7ac3e2a8edd31ade02d3ee2c5e1bdffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:68:98:ff:9c:f8:d7:35:be:8a:87:df:35:f2:
7d:28:88:ee:7c:81:57:4b:d3:bb:8e:9b:49:85:94:
a4:24:ce:75:5e:a0:ca:2c:40:1d:51:30:e8:c7:b7:
7f:c2:23:0b:97:62:61:0d:e5:a0:b1:3b:a0:c3:50:
c6:86:62:1d:df:c1:7b:df:0e:5c:11:c9:bd:64:ae:
a3:34:38:33:58:4d:aa:85:92:dd:66:a2:4e:21:11:
24:2c:8a:b4:8f:03:16:11:7e:f1:da:2a:8b:6c:84:
35:d1:ed:c8:10:74:4a:cf:b3:f8:e4:55:bd:40:3d:
0d:6a:25:4e:39:1e:66:f3:05:79:12:86:f6:1e:d0:
64:8c:08:c1:a7:d2:ec:d8:7d:16:35:98:6c:78:21:
6b:60:ee:74:ee:45:d9:97:ce:19:78:68:08:5f:f9:
5d:b3:22:dc:27:12:1f:30:08:cc:78:44:3d:4a:f4:
5f:f4:2c:bf:ce:68:c1:23:0a:aa:20:e0:8c:2a:3c:
3e:ea:83:ce:ec:58:7d:14:62:30:12:16:4e:34:1a:
65:e0:4e:eb:1d:27:76:ed:85:e3:22:43:87:5a:0f:
d5:61:65:28:95:cf:1a:4c:40:99:45:87:27:3c:49:
39:12:75:15:66:b6:ce:49:a8:7c:50:80:7c:ec:ac:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0B:E7:1F:7A:C3:E2:A8:ED:D3:1A:DE:02:D3:EE:2C:5E:1B:DF:FD
X509v3 Authority Key Identifier:
keyid:8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:25:ae:ca:a4:cf:d0:ed:e8:e8:9b:46:52:ff:7d:a0:32:39:
75:20:61:13:ea:d6:3d:cb:01:43:13:7f:69:b9:88:a9:31:2f:
ba:f7:3b:11:aa:3e:59:e1:4c:02:d1:74:1c:33:60:cc:a4:2d:
8e:d1:74:d9:ea:be:00:c6:9d:32:11:65:8f:6f:b7:4a:c7:50:
65:a6:49:04:6a:ee:3e:eb:35:62:f9:72:2d:82:bd:0b:ae:f5:
bf:a7:60:af:05:06:ba:c1:0c:18:36:d9:a2:ae:25:b2:e6:68:
25:3b:0f:f3:b6:b1:6d:f3:ee:0f:8a:5e:8a:3c:0d:6f:1c:5d:
0a:91:d1:1b:0d:04:e5:76:4e:ca:e2:89:1a:42:9c:ba:b9:67:
b6:16:d9:59:e6:b2:ec:03:22:66:11:04:0c:24:b3:86:e5:b4:
f6:44:ff:c9:0b:da:68:3d:75:db:e4:c5:df:52:77:22:57:40:
06:02:8a:15:67:2e:3c:e3:c4:bc:80:43:a6:f1:4e:b9:6d:14:
c5:65:ae:b4:a9:7d:6a:86:ec:88:16:bd:c7:d5:6b:bc:50:24:
e5:5e:dd:dc:8d:57:d2:9b:fc:9b:13:1b:3e:dd:d6:15:df:f4:
12:17:c3:59:f6:ad:d9:04:65:69:70:96:de:66:c4:5f:28:24:
65:b4:cd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:07 2025 by rpki-client