Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
File: j06-YGSqsD8mniKBWs1JSab7cmU.mft (raw, json)
Hash identifier: EbUvvOsn6pgT1s6Ysym82lvXsRqcUF9bYAIJwD/cc6s=
Subject key identifier: 91:CB:C9:1E:EF:5D:50:D7:C6:40:91:F4:3D:B6:B6:BC:61:86:DB:9F
Authority key identifier: 8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
Certificate issuer: /CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Certificate serial: 0194BABB3FB3057C6713484CE379CF2CEA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 05:00:21 +0000
Manifest this update: Fri 31 Jan 2025 05:00:21 +0000
Manifest next update: Sat 01 Feb 2025 05:00:21 +0000
Files and hashes: 1: dkbIFUT0Q5SimShUWdItYFUftjw.roa (hash: 05gsaTcl9nN2hM3ENc01cGsgdyNAx0BVpk6E3+GjptE=)
2: j06-YGSqsD8mniKBWs1JSab7cmU.crl (hash: 3uKYKEO6q3HFHUi5717qtSGRGa1B9v+GI+V56eZ2UVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:3f:b3:05:7c:67:13:48:4c:e3:79:cf:2c:ea:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Validity
Not Before: Jan 31 05:00:21 2025 GMT
Not After : Feb 1 05:00:21 2025 GMT
Subject: CN=91cbc91eef5d50d7c64091f43db6b6bc6186db9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:80:06:18:f7:c9:5d:4d:b3:bb:c8:b5:18:
4e:83:15:cc:4f:82:d5:73:73:87:d2:86:55:f2:81:
b8:d7:a3:95:6e:aa:e0:fb:54:12:d1:a0:04:25:5c:
8d:c7:4b:05:cf:fe:97:62:52:c8:10:8d:f3:f9:ac:
73:a4:f5:1a:e3:c7:e6:1c:d8:db:b7:c4:56:20:b2:
2f:df:1d:49:f8:28:e6:de:10:de:9c:27:8a:83:e3:
29:0a:12:dc:b5:d4:c0:21:b0:0f:7d:ae:d4:09:e0:
6d:7e:54:46:b4:36:92:73:0d:d8:6e:ed:20:38:4a:
19:4d:dd:95:d6:8b:61:b7:b7:bf:5d:d4:e1:fd:a7:
3a:71:4d:0f:df:59:7a:b6:6b:a8:2d:5c:49:2f:7c:
66:54:6c:62:61:0e:45:4c:9f:9a:cd:31:5c:ec:6a:
d4:20:4b:a3:f9:61:10:63:96:ba:53:5c:4c:06:ff:
b1:c4:9a:f8:7a:84:37:a0:0b:5f:d9:ae:93:74:ca:
e8:7a:96:18:a5:dd:ee:42:76:6e:4d:09:c0:81:20:
94:10:d5:bb:12:3a:65:39:fe:e0:7f:d0:d3:82:86:
c5:eb:c1:be:b5:19:96:c4:fc:54:13:76:6c:d7:ea:
47:60:a0:4c:47:29:fc:19:8e:c7:e2:5c:83:e4:29:
8e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CB:C9:1E:EF:5D:50:D7:C6:40:91:F4:3D:B6:B6:BC:61:86:DB:9F
X509v3 Authority Key Identifier:
keyid:8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:53:84:c7:ab:8e:a7:79:bb:3b:9e:55:4a:2c:c9:7d:b1:b3:
5d:7c:64:fa:7b:a9:ff:e0:52:90:3e:59:45:b2:09:ac:32:82:
da:b0:a0:78:f5:48:50:ff:30:f7:d8:5f:67:de:52:74:2b:20:
49:4f:38:41:78:22:b7:33:55:7e:e6:91:53:40:b8:68:5b:c0:
d6:7f:e3:2d:96:17:4a:04:c6:ad:f2:31:dd:e8:ab:d2:fc:01:
e9:ef:33:2e:81:ce:31:6c:45:70:37:37:1e:35:21:e8:e9:31:
8e:ce:0e:70:4c:b8:7e:e9:f1:42:70:c0:9f:42:eb:b1:bc:e3:
cb:45:eb:49:da:54:52:d5:0a:d6:cb:96:82:af:14:84:43:f5:
05:f4:5a:da:cb:08:93:26:0b:40:1e:a8:d1:85:1c:af:bb:42:
59:ec:df:21:87:cd:cb:71:81:c2:2b:bc:83:14:44:cc:65:0f:
74:16:3a:95:71:67:90:f0:93:e3:c9:c2:97:af:51:4a:f3:d0:
4d:96:63:c8:dc:bd:80:7a:b5:0c:0e:fb:57:11:be:f6:09:85:
0c:39:e7:e8:26:ba:a7:10:85:cd:a0:49:b9:e5:62:9f:0e:24:
55:69:ee:1b:b4:0d:2e:a8:49:33:2a:8d:da:19:82:10:e5:15:
6e:5b:91:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:43 2025 by rpki-client on console-fra.rpki-client.org