Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
File: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft (raw, json)
Hash identifier: Jbp7X7r7c4K8w2F513co+EceD9sHbb/tHodb/naAjLg=
Subject key identifier: 3F:4C:7B:24:7E:DE:66:A0:A9:52:51:A5:66:DD:B9:18:54:62:92:57
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 0194BB975A56ED40DC0233A8A99099368AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
Manifest number: 12F5
Signing time: Fri 31 Jan 2025 09:00:45 +0000
Manifest this update: Fri 31 Jan 2025 09:00:45 +0000
Manifest next update: Sat 01 Feb 2025 09:00:45 +0000
Files and hashes: 1: HK8tZZEnH3XebSxA7uU7eXL76hY.roa (hash: A9qzXbhJ+D8oACcswpJV6B2AKA++OqnaZLnW9gQTaUM=)
2: iV0pnh_JQIBr_RdQB2xJYX8tQRw.roa (hash: YaxAkBWvS50g4TE9KDjWuEy+sBe25yzJdsukBPT8zpw=)
3: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl (hash: ZBHN2zZR0g5f6uuYhW7lTKyWABSsv53QRjh3l+qNFOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:5a:56:ed:40:dc:02:33:a8:a9:90:99:36:8a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Jan 31 09:00:45 2025 GMT
Not After : Feb 1 09:00:45 2025 GMT
Subject: CN=3f4c7b247ede66a0a95251a566ddb91854629257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:2a:f0:fc:41:be:d8:4c:25:6e:71:23:42:
0c:b4:f9:b3:cb:66:b7:53:b4:26:7c:4d:ec:45:bd:
00:38:fa:7f:a7:cc:3e:dd:f9:df:13:99:50:65:0b:
fd:47:62:aa:46:af:93:4b:29:12:12:bc:7e:96:07:
1d:bf:cd:80:d2:3e:55:c8:0a:4b:15:93:58:69:19:
dc:94:23:d9:ce:14:2d:6e:ca:0e:af:7d:59:ed:0a:
19:3d:28:d7:be:2c:fb:00:c0:2b:5d:48:b9:27:67:
06:a4:98:43:d7:8a:07:1d:87:51:d9:fb:f5:5e:63:
ae:f0:90:e6:b2:42:b0:df:8f:af:ca:27:a8:6e:06:
2e:92:68:e8:fe:b4:25:90:32:9d:5c:31:6f:fa:17:
45:29:82:4f:09:f3:f3:59:e2:00:98:4d:33:10:02:
e4:06:5d:dc:15:9f:d6:d6:6c:07:0f:f4:96:b1:07:
89:ff:d5:9c:c0:d9:a4:66:bf:6d:78:56:9e:ed:ce:
1f:d3:45:a8:85:a7:0b:45:09:85:df:9f:21:78:ac:
e4:14:75:da:2b:0d:fd:45:91:88:ec:74:d2:a6:c7:
df:69:a9:dd:e0:b6:5b:aa:e2:f9:f2:7b:98:47:56:
d6:47:e1:fe:c2:59:34:3e:a2:b0:e5:23:30:6e:f3:
3f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4C:7B:24:7E:DE:66:A0:A9:52:51:A5:66:DD:B9:18:54:62:92:57
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1f:a9:83:0e:71:69:3a:65:0d:08:a3:2a:99:18:cb:8e:f2:
5f:0d:7e:5c:3c:03:47:e2:f0:b2:70:0e:6a:48:37:0e:29:84:
96:3a:91:94:06:0e:a7:04:bf:51:85:fa:c3:cd:9a:44:e2:c6:
e0:a4:47:f0:cd:c6:66:72:af:cf:c7:5a:30:f6:d2:d2:14:bb:
6b:a0:32:01:41:2e:b0:10:46:f6:f7:73:ae:17:11:ac:85:31:
8e:d5:be:07:ed:59:1b:d0:51:f2:f7:14:f0:51:69:26:98:2c:
5e:ed:ae:3f:d4:c7:7c:b5:10:5a:cf:2c:db:b0:e0:de:c6:2e:
11:28:6a:cb:90:ad:0b:c7:02:f2:3e:0b:40:55:28:0a:02:02:
b7:ee:b2:ab:ea:2f:cc:b3:12:a8:bf:84:67:60:39:03:8c:52:
e3:2b:1b:88:be:0c:dc:f5:78:26:77:ab:be:6e:66:35:b0:c7:
c2:ce:00:c8:69:8f:2d:30:b2:78:df:5c:cc:6d:47:e1:9c:3c:
ef:99:78:a9:3b:fe:a4:31:4b:4b:e3:50:20:29:aa:78:89:1e:
b3:ab:f0:09:c2:78:8c:a3:47:ab:c2:a5:f3:06:46:2c:e7:4f:
04:ef:ce:de:1e:97:5f:d2:3c:5e:6e:32:af:d9:71:c2:7e:66:
fb:07:b9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:01 2025 by rpki-client on console-fra.rpki-client.org