Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
File: Jw__IYVmW535AIyeG-YmARiafXw.mft (raw, json)
Hash identifier: PPY4IOU3LOznyhoGkQmIA8/zLQwliK5iTaXeMI1NgF8=
Subject key identifier: F7:BB:9C:0B:D1:93:FB:AE:5E:01:8B:4B:A9:7A:18:2D:92:6F:B1:25
Authority key identifier: 27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C
Certificate issuer: /CN=270fff2185665b9df9008c9e1be62601189a7d7c
Certificate serial: 0194BB5FE8F9CD67914C5A555D4FA5E5BFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
Manifest number: 07D3
Signing time: Fri 31 Jan 2025 08:00:12 +0000
Manifest this update: Fri 31 Jan 2025 08:00:12 +0000
Manifest next update: Sat 01 Feb 2025 08:00:12 +0000
Files and hashes: 1: Fy2IYBN9hjZkWkvbtPQPrYui0qc.roa (hash: JelZKBaztB5j8Dd3i30kr2+tTI62dQSAVwbIQZ0Mhyo=)
2: Jw__IYVmW535AIyeG-YmARiafXw.crl (hash: o3NR92vGdyqIz+LMBWz+Misdm7ixex7YCTRLddOppKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:e8:f9:cd:67:91:4c:5a:55:5d:4f:a5:e5:bf:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270fff2185665b9df9008c9e1be62601189a7d7c
Validity
Not Before: Jan 31 08:00:12 2025 GMT
Not After : Feb 1 08:00:12 2025 GMT
Subject: CN=f7bb9c0bd193fbae5e018b4ba97a182d926fb125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:16:50:d1:87:01:dc:9b:95:31:c5:9f:c1:
26:dc:a0:d3:25:4f:cd:15:ca:ca:ed:6a:47:22:d6:
03:72:3b:ea:90:16:72:f5:89:34:6b:5d:c1:52:c5:
e6:71:f4:5a:22:c0:c4:e7:80:9b:80:69:62:39:65:
ec:b4:27:ff:6b:39:78:f1:73:54:da:b8:67:c4:f1:
d9:7e:89:05:b6:f2:a1:f1:60:b0:80:ce:ce:47:b8:
ee:0b:43:fc:28:26:15:53:d0:c0:83:dc:dd:19:f1:
34:00:04:1b:54:ac:2b:b2:53:f5:82:73:c6:e8:78:
15:4e:09:d8:9a:54:84:4a:8c:3c:c7:0e:02:fc:4a:
02:d1:9b:0f:d9:b8:e1:e4:64:2c:50:1d:9d:fd:f0:
f6:ba:1b:37:ee:e6:ce:a3:91:5c:db:43:b9:f4:28:
fe:7d:1f:51:17:39:00:7a:fd:f9:5e:93:df:56:20:
b2:68:22:d7:8f:00:fb:f6:08:d8:70:9f:b2:dd:14:
af:72:40:cb:3c:df:30:86:c5:78:aa:50:a9:fd:16:
1f:ea:fa:69:e7:d6:92:33:f6:f4:40:13:0a:01:ee:
50:81:63:b2:b2:42:d7:d1:c8:6e:15:33:36:b8:c6:
18:a9:bd:c1:5e:c5:c1:da:92:5f:a8:4f:82:1b:a3:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BB:9C:0B:D1:93:FB:AE:5E:01:8B:4B:A9:7A:18:2D:92:6F:B1:25
X509v3 Authority Key Identifier:
keyid:27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:af:14:72:85:f1:67:dd:b2:f8:33:ae:6b:21:73:b4:6b:19:
c8:73:2e:f0:7c:55:24:d6:a7:84:8a:45:e7:9b:b5:17:9a:42:
69:22:29:a3:18:75:6e:ef:fd:80:3b:90:8b:9c:61:e0:94:78:
fa:d2:2c:ff:8b:72:9d:fb:33:2e:7c:cb:0b:d5:97:cf:f8:db:
65:5b:f8:9c:b2:fc:d4:f3:3e:11:62:db:ae:19:f8:62:72:d4:
0e:71:7f:ee:d3:b8:74:6d:c1:b0:a7:ec:8d:be:de:b9:a4:af:
42:1d:60:c7:cf:5a:ea:f6:d2:31:e5:3b:d6:25:e1:77:a6:21:
c0:03:8b:40:a5:af:41:66:14:80:92:0a:fc:39:67:22:dc:9c:
8d:bc:c3:8b:69:90:88:f4:97:26:c2:9a:26:8b:9c:39:53:cd:
3b:05:71:80:d1:42:0b:f9:79:60:b3:2d:ff:4d:6e:a8:e0:bd:
e9:b3:8c:57:55:0f:10:6f:b4:f4:92:7b:06:b3:29:5e:76:78:
46:89:76:83:d2:40:9b:19:32:79:47:03:58:79:3e:a5:97:41:
a9:99:34:82:15:37:26:3c:9e:20:5c:f2:24:03:88:fd:47:96:
b8:ea:82:e9:2d:e2:f1:c5:bf:d3:3c:70:bc:14:28:d4:50:f8:
87:42:72:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:38 2025 by rpki-client on console-fra.rpki-client.org