Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
File: JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft (raw, json)
Hash identifier: U9uxUu7brabZ/oW+vCTPyOMfolh3HuvBMfo8+YUfTas=
Subject key identifier: 27:BA:6A:B5:4D:9C:2C:15:0E:79:53:26:A3:FE:5D:D9:CE:F1:60:C3
Authority key identifier: 24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27
Certificate issuer: /CN=24db53647ad645a9420f60b86d6e9375fcf85a27
Certificate serial: 0194BC3C37B88DB894290F372DC6E8EE6EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl (hash: rWioO78kyNY8RZXyoZ8uYzsWAJsJ0EYojEbN/fVTtXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:37:b8:8d:b8:94:29:0f:37:2d:c6:e8:ee:6e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24db53647ad645a9420f60b86d6e9375fcf85a27
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=27ba6ab54d9c2c150e795326a3fe5dd9cef160c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:53:08:fa:ed:df:16:13:12:d4:c2:96:2b:
00:af:1e:12:d7:4f:6d:ad:98:b1:96:5c:e0:45:ab:
c1:d7:80:93:7c:3e:13:5d:f2:83:0c:a9:24:72:ff:
ac:c5:8e:40:ca:96:5e:6a:65:f3:ca:e0:d0:82:45:
89:a0:40:97:2f:70:5f:99:3e:2a:59:8c:c3:0d:f2:
29:fd:fb:a8:0e:b0:5c:14:57:ab:87:08:15:c0:00:
50:ee:53:95:2c:f4:ae:16:48:23:01:2d:b5:82:d3:
d8:ab:36:c3:53:1d:ac:20:1d:bd:70:7e:bd:a5:2c:
f6:9d:84:ab:66:24:5b:76:fa:6e:5c:04:00:7c:37:
83:bf:50:90:87:3c:71:55:aa:56:1f:fd:dc:f7:78:
de:8e:7b:51:43:51:d8:43:27:83:cf:0b:04:cd:32:
9d:de:7f:6f:4a:78:3e:75:3f:bd:07:65:d7:d9:76:
8e:91:7e:00:e9:73:90:22:eb:10:04:98:a9:fa:4d:
98:e6:c0:cd:d4:54:6d:22:bc:95:db:07:26:93:47:
e5:e8:8f:c0:38:3d:af:44:55:5f:d8:6a:47:5c:9d:
5a:00:28:e1:80:24:ca:bf:46:67:5d:72:f0:22:a7:
4e:23:84:2d:11:30:8b:3a:f8:5e:41:d6:50:2d:59:
24:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BA:6A:B5:4D:9C:2C:15:0E:79:53:26:A3:FE:5D:D9:CE:F1:60:C3
X509v3 Authority Key Identifier:
keyid:24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ee:b6:9a:bd:b9:d6:d7:34:ac:30:c4:15:1f:a4:94:e5:f4:
b9:15:9c:82:d1:b1:de:60:e2:b9:91:12:86:02:6a:4f:e0:85:
73:36:63:86:9d:7e:9c:91:a0:93:f7:22:91:a6:63:ab:5c:33:
db:59:bc:c5:27:18:dc:89:43:d3:43:af:6a:35:1a:5a:12:a8:
ac:85:e3:42:0d:25:a9:65:60:85:99:3c:95:ad:e8:9f:a5:c4:
80:42:af:3e:32:f5:bb:55:bc:83:fc:08:af:24:04:59:a2:e6:
b5:3b:44:8a:85:57:7a:ab:18:9f:e4:b1:b5:eb:e5:44:9e:23:
91:cd:af:34:0f:a2:16:e9:69:4a:17:7f:ef:70:0b:1e:bc:e7:
2e:2b:1d:08:22:48:e9:44:25:c7:28:d6:91:f7:cd:89:0b:f0:
03:2e:4b:ba:e2:b5:ce:8d:b9:39:a7:4b:f4:43:0d:bf:fe:a9:
69:da:d1:fa:31:88:73:11:e2:d9:83:be:69:30:3d:42:e2:c9:
ce:44:fa:06:84:7a:fd:6b:60:c3:e9:88:43:11:27:16:3b:22:
1e:e9:6e:fb:29:a3:a0:a1:ab:e3:65:f9:3f:f3:3f:f8:ec:bc:
eb:31:32:d4:6a:6e:38:84:f7:eb:19:cc:3a:bb:18:90:10:ca:
a0:31:a8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:04 2025 by rpki-client on console-fra.rpki-client.org