Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
File: J-lCeLPhkBhjrdYde98tJzzxNAw.mft (raw, json)
Hash identifier: b8g9YsTCNd7rDYtNlDiFp8bBLIaNU1O6bhWUuP6tTPw=
Subject key identifier: 42:3E:75:8E:D5:90:D1:2D:C4:E8:3D:98:03:9E:C6:B1:0C:DC:C3:01
Authority key identifier: 27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
Certificate issuer: /CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Certificate serial: 019510C7A691A81EA9B21EAD19F05E7FEEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
Manifest number: 1455
Signing time: Sun 16 Feb 2025 22:01:14 +0000
Manifest this update: Sun 16 Feb 2025 22:01:14 +0000
Manifest next update: Mon 17 Feb 2025 22:01:14 +0000
Files and hashes: 1: 7oIgDgDNpX6XAW4lQ5qq69olmro.roa (hash: 3Y/w0AZ9JHVMQciRUgte6R4EVpLThqmwyOoyqP/qwcw=)
2: J-lCeLPhkBhjrdYde98tJzzxNAw.crl (hash: m/Y1siKvIbkZdylIb6ib15VntswIdfkNFfO25VUMFsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:a6:91:a8:1e:a9:b2:1e:ad:19:f0:5e:7f:ee:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Validity
Not Before: Feb 16 22:01:14 2025 GMT
Not After : Feb 17 22:01:14 2025 GMT
Subject: CN=423e758ed590d12dc4e83d98039ec6b10cdcc301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:77:7f:5b:fe:7f:9b:b8:62:73:7c:a0:6a:5e:
48:f5:7c:6a:a9:82:1b:46:93:d4:e3:b0:51:c4:a6:
84:d2:0c:fb:47:8f:db:57:aa:eb:e0:7a:13:a7:5c:
3b:f7:eb:f3:ab:0b:9b:b2:26:58:16:53:cb:a1:ca:
65:71:93:ec:a9:fa:4e:d5:9b:59:7e:03:d3:9b:36:
44:65:e7:87:72:29:0f:f2:7d:30:b3:46:0a:60:e0:
a3:a2:60:be:08:8c:98:a3:f6:a1:38:6a:06:b0:a9:
ad:93:77:8b:87:ac:e0:74:2c:04:30:6c:26:5e:bb:
97:01:cf:e8:1a:23:db:5f:48:04:2a:99:1a:e6:7e:
f4:e6:e6:8a:7f:d9:0e:d5:6b:ff:64:83:23:bc:a1:
44:56:14:8e:84:f4:1f:c1:c9:c7:75:a2:51:cc:8b:
8a:73:83:67:94:dc:6d:aa:2f:d3:47:4d:bd:73:02:
94:a5:e4:42:31:35:38:6e:1a:bc:3d:0d:d9:99:28:
35:3c:36:1a:d6:7a:d7:d5:23:fb:9d:22:6f:ec:40:
6a:28:80:8d:3f:a0:19:83:3e:86:8d:e3:b2:b0:69:
64:41:d2:70:60:e6:ed:db:5a:d6:a1:50:14:d3:8a:
68:dc:da:1a:7f:8f:bc:34:8e:a4:5d:27:3c:68:28:
e1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3E:75:8E:D5:90:D1:2D:C4:E8:3D:98:03:9E:C6:B1:0C:DC:C3:01
X509v3 Authority Key Identifier:
keyid:27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b9:78:d3:30:b1:6c:78:0f:96:b8:e2:fe:68:d9:b6:40:df:
4c:3d:4b:3f:cc:46:13:48:c4:12:fe:a6:cd:23:7c:d1:14:92:
8e:9e:b1:81:ad:3a:9c:ea:0c:5a:2d:0c:55:19:f3:ed:57:ca:
48:c1:20:75:80:dc:d1:60:c9:ab:84:4d:14:84:cb:94:2b:8f:
ff:30:d0:ee:97:5c:f3:7a:e2:15:75:1d:58:50:90:c6:96:1b:
34:12:a4:9b:c5:00:f0:27:93:f7:fa:b4:58:77:9b:13:ee:dd:
03:bd:80:2e:10:0d:75:a1:ac:71:b9:f2:cf:89:d3:bb:1c:1c:
04:11:0e:43:90:f0:82:7d:2a:c0:52:a7:e6:76:ea:c2:61:b5:
23:66:a1:b4:d3:7c:54:d0:c4:f7:55:1b:c8:73:60:64:bf:91:
2f:9a:74:6e:f7:7a:d6:9c:aa:d3:e1:69:1f:e3:71:19:26:b1:
eb:d3:4f:97:8c:93:9b:28:e9:0b:20:47:ad:91:95:ce:d6:8c:
11:6b:4d:35:d3:2f:35:9c:eb:a2:a0:2a:8b:a2:1e:6d:2d:98:
5c:c5:f8:7e:b8:af:22:ea:68:ea:d1:db:4d:f8:3b:0b:79:be:
eb:21:bf:0d:8a:6d:22:39:69:97:b4:b3:a0:fc:e5:39:39:91:
60:be:48:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:40 2025 by rpki-client