Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
File: jxVuaflETCsGaHJWCFtqek6Yh_Y.mft (raw, json)
Hash identifier: OzDGY9o2Vv2xJazkW+nhTHEpsT+Ib9aSKs85gGQsmd8=
Subject key identifier: F9:82:BE:1A:01:3A:59:F5:4C:F4:5C:DB:F5:06:C8:4D:E3:D3:34:16
Authority key identifier: 8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
Certificate issuer: /CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Certificate serial: 019510FDECF6A4E8CD2757523BD376B0641F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
Manifest number: 0800
Signing time: Sun 16 Feb 2025 23:00:31 +0000
Manifest this update: Sun 16 Feb 2025 23:00:31 +0000
Manifest next update: Mon 17 Feb 2025 23:00:31 +0000
Files and hashes: 1: gENnBMD7CFnpDe73cGovXB6cewg.roa (hash: rDcPDp/N1UMZLBWpv8SmAqXs5rg//NGw82tfNx9i/r0=)
2: jxVuaflETCsGaHJWCFtqek6Yh_Y.crl (hash: pRzI6QyyyIDzcrVd6y5GaXJwvGA4U0wz483DIbZ2jmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:ec:f6:a4:e8:cd:27:57:52:3b:d3:76:b0:64:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Validity
Not Before: Feb 16 23:00:31 2025 GMT
Not After : Feb 17 23:00:31 2025 GMT
Subject: CN=f982be1a013a59f54cf45cdbf506c84de3d33416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f5:83:e7:fd:af:dd:8a:07:f5:4d:24:19:a8:
3b:fa:e9:1d:72:e9:b6:c1:4f:07:31:0e:29:d4:c3:
2e:48:2a:74:67:2d:61:4e:8e:a3:75:5a:d8:99:4f:
a6:be:d6:25:c4:1d:75:b2:29:6e:a6:b7:4e:be:b2:
e5:c4:20:15:01:2b:2f:14:2d:be:3a:d6:58:1f:21:
77:e0:8d:30:a7:33:c2:dc:b0:d3:91:10:f0:e9:b2:
99:2e:bd:6f:ea:e7:46:6e:37:db:ab:14:a8:71:65:
ab:8b:45:df:1b:17:f2:69:04:50:24:b7:18:95:b7:
07:fd:b3:e7:27:17:40:e1:10:a8:a5:9c:09:d6:ce:
9c:82:34:5d:50:4c:09:f5:a1:fe:18:3f:d1:c2:98:
d7:e1:44:7c:66:52:7c:64:f8:e0:40:ab:8c:7d:c4:
44:91:a7:b8:e1:dd:bd:cc:ae:54:b4:ee:d2:8d:b4:
d1:4e:97:2a:f9:88:00:77:b7:6d:30:a4:d8:7b:78:
98:27:4d:be:b1:fe:4b:30:e4:0a:c3:da:be:d5:d8:
0f:06:90:e3:04:f9:e2:d2:ce:b5:73:c9:f5:d3:d5:
33:9c:90:34:f0:5a:87:e9:dc:0d:8c:78:13:3c:33:
99:e0:17:79:48:21:88:c9:1f:b7:12:72:f7:1b:e7:
ae:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:82:BE:1A:01:3A:59:F5:4C:F4:5C:DB:F5:06:C8:4D:E3:D3:34:16
X509v3 Authority Key Identifier:
keyid:8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b8:b6:ce:1a:51:70:ef:0d:04:bb:a8:7e:3a:2b:b6:8b:73:
17:07:27:b5:f9:65:72:4b:45:e0:f7:0a:ab:65:a6:75:1f:6b:
7a:7b:44:15:c8:ac:b1:ec:e2:69:ae:7f:01:cd:d8:e7:14:00:
bb:47:54:2a:6c:93:2e:2b:01:bf:10:05:f1:fe:b8:a1:fb:5c:
4b:9b:c2:e0:e8:17:e1:be:e0:04:4e:2d:31:c4:ee:2b:7b:24:
ea:2a:13:95:9a:57:3d:d6:c7:9d:86:d1:19:67:9f:9a:68:1f:
ef:a8:22:c3:70:07:23:1f:71:cc:02:26:8f:66:46:e0:81:64:
74:e8:c4:61:cb:5f:09:4a:07:e1:f9:da:b0:8f:67:f6:2d:14:
c5:d6:3a:2f:1e:b5:5f:ce:ce:09:9f:ef:ce:37:c1:43:da:70:
4c:02:1e:2f:f2:37:1d:7d:00:02:a9:4d:10:93:5d:e3:c6:c7:
77:1c:5c:9e:49:11:53:3a:26:7e:0c:d4:75:2c:7c:e0:21:6f:
b8:68:34:cb:94:1b:91:dd:f1:45:ea:d7:44:b5:0f:82:8a:9e:
66:0b:44:f1:33:ea:ab:50:e9:b1:2a:8f:f4:4d:d8:01:6c:dc:
49:a5:b0:a0:3e:a8:33:a5:73:d5:85:4c:26:c2:81:d5:9c:4d:
64:3e:b8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:20 2025 by rpki-client