Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
File: JLCG9IJCZjhOB4z3dzdfIb03C3A.mft (raw, json)
Hash identifier: s8fxzTudpOasJpGI1KjbGGYqdxRTK1xBUC87zBcf+vk=
Subject key identifier: 7B:49:AB:97:BB:B0:E8:A3:9D:94:AC:E9:D8:B5:8E:5E:A1:C0:54:40
Authority key identifier: 24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
Certificate issuer: /CN=24b086f4824266384e078cf777375f21bd370b70
Certificate serial: 0194C5080466143A508D87421A7020DA28E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
Manifest number: 1405
Signing time: Sun 02 Feb 2025 05:00:24 +0000
Manifest this update: Sun 02 Feb 2025 05:00:24 +0000
Manifest next update: Mon 03 Feb 2025 05:00:24 +0000
Files and hashes: 1: JLCG9IJCZjhOB4z3dzdfIb03C3A.crl (hash: q6/jh1OdAQfxQ/nYzGjkcgS3PM9j2REJgyUQs6wiyyk=)
2: sQUp-AbS_KxkGCffMeLCbixURSE.roa (hash: pCvwu2+e0TI/6BJxpMcxOzTCXPwA7YINyMnHTgFQvmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:04:66:14:3a:50:8d:87:42:1a:70:20:da:28:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b086f4824266384e078cf777375f21bd370b70
Validity
Not Before: Feb 2 05:00:24 2025 GMT
Not After : Feb 3 05:00:24 2025 GMT
Subject: CN=7b49ab97bbb0e8a39d94ace9d8b58e5ea1c05440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:74:42:38:be:a8:ea:63:69:f7:fa:7b:c8:
9a:89:6d:ba:2e:49:0d:88:d6:de:8f:9f:f5:3a:24:
6d:9b:c2:6f:a0:9b:3e:ef:4a:f9:fd:6c:8c:a7:7f:
ba:df:9e:fe:1a:52:13:ee:b5:58:39:44:85:61:d4:
9b:a2:72:59:c3:80:53:ba:b9:8f:ba:b1:71:96:92:
d6:60:16:f1:b8:4e:50:d1:b7:bf:fe:47:ef:80:71:
c6:07:d5:02:c4:ad:ca:82:1f:d5:32:11:87:09:f4:
7f:d9:12:46:71:01:d1:6a:ae:a9:f1:36:ae:17:52:
0c:9f:ea:45:26:95:ca:2e:ef:5f:d2:da:da:fa:ef:
b5:06:ae:61:35:d2:88:df:73:76:fc:a1:f7:ce:1c:
e2:b0:50:e3:9e:d8:94:32:7b:5d:15:e1:82:09:13:
45:3f:7a:d2:f7:83:6a:e5:a0:8f:81:d1:e1:ec:8e:
6e:35:f0:f3:9a:86:71:86:38:ca:e8:02:66:4a:7f:
7f:68:2f:56:6b:e9:11:58:b2:0a:5c:96:6b:3a:c8:
35:1a:50:dd:27:ae:5b:8b:36:51:97:29:a1:f7:40:
3b:a6:c7:0f:f0:42:5f:59:d5:a8:11:e5:8f:87:3a:
7d:65:e7:fd:cb:2d:d3:a8:a7:f6:7a:84:8e:18:7f:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:49:AB:97:BB:B0:E8:A3:9D:94:AC:E9:D8:B5:8E:5E:A1:C0:54:40
X509v3 Authority Key Identifier:
keyid:24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f6:85:2b:4f:95:8c:02:b8:74:a7:c4:06:4e:79:bb:53:58:
4a:0e:ae:4f:d7:3b:53:f0:3f:f2:c6:76:cd:50:d4:dc:cf:fc:
9c:6c:b2:d0:b1:03:b8:8b:6b:e2:cf:3e:6c:9d:3e:6a:d1:fd:
8a:c8:6e:f0:3a:13:b7:cb:7b:66:57:be:62:43:86:4f:52:78:
7e:70:d3:b3:60:67:36:e5:c4:b0:b2:9c:fc:a5:22:04:3b:e5:
00:a2:18:87:d2:97:d9:e2:5a:af:d2:b7:d5:12:93:dc:45:a0:
93:9a:d1:88:32:84:b0:e2:ff:a8:06:88:3b:b0:36:96:2f:6b:
fc:55:43:58:70:c3:43:80:5f:ea:39:ca:09:9f:2e:38:75:f6:
33:5d:3a:1c:0e:48:4e:1f:fa:95:a8:00:13:70:d8:65:af:fd:
f3:5f:b7:57:62:cf:e5:42:06:1f:da:45:8a:e5:91:c2:e9:55:
ba:29:ea:05:8e:82:b9:80:aa:a0:f0:3d:57:6c:ce:f1:7c:2a:
06:5c:a3:e9:e0:8f:77:04:84:dd:4a:24:f1:b1:ea:ef:34:b4:
a3:1c:8b:93:8d:a5:69:3a:91:43:1b:d8:7b:70:b2:0c:c0:aa:
d0:1d:ed:ac:11:4e:19:18:82:5f:b9:b1:a9:6c:cb:6a:9b:f9:
ba:32:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:54 2025 by rpki-client