Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
File: jxpRl9YyTu7SVrJoYeGiSshjXTc.mft (raw, json)
Hash identifier: DY4knLV5G1z+JhorpoK3qoXUzl6vyrBk6o83waz96Sc=
Subject key identifier: 44:B0:B8:31:14:20:34:BE:E3:BD:02:E6:AE:C4:82:DA:23:F0:E7:B6
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial: 0194C3BE34F2FEE34A73F13BFEFF57092217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
Manifest number: 0125
Signing time: Sat 01 Feb 2025 23:00:09 +0000
Manifest this update: Sat 01 Feb 2025 23:00:09 +0000
Manifest next update: Sun 02 Feb 2025 23:00:09 +0000
Files and hashes: 1: JQLVtXN-TqtLp9hzLXYLt2Yh1zk.roa (hash: f214yyN1FtBYx9omDVPh5FOJpLcqVPrmTXzmLrvFbb4=)
2: jxpRl9YyTu7SVrJoYeGiSshjXTc.crl (hash: Fe/UgQ44cZvWCJW0vrxPumxA3mPdmWSpUDQVVeR/rvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:34:f2:fe:e3:4a:73:f1:3b:fe:ff:57:09:22:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Validity
Not Before: Feb 1 23:00:09 2025 GMT
Not After : Feb 2 23:00:09 2025 GMT
Subject: CN=44b0b831142034bee3bd02e6aec482da23f0e7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:70:d0:c8:01:d2:7d:d0:a0:b6:f9:dc:b6:44:
c4:a8:d8:54:82:31:07:bf:ab:ce:eb:18:7b:cb:b5:
22:f4:79:35:eb:03:f2:4d:f6:81:59:e6:8a:83:c2:
48:68:b2:bb:50:c2:2b:dd:1e:68:6f:ca:63:c7:86:
80:97:3c:b4:48:69:e1:59:c0:ca:79:fa:c2:ac:f2:
46:0f:6d:b7:2d:43:b2:7e:b6:bc:8d:6d:8b:0a:a2:
7a:75:de:c7:41:6d:99:03:61:8b:3c:71:38:d3:f4:
a1:2a:e4:f5:75:96:07:f2:df:62:f4:8c:bc:29:65:
29:37:2b:d8:74:2b:c4:6d:74:0c:11:ee:30:fd:9a:
d0:4a:55:43:e5:66:46:1a:3a:fc:e0:43:26:9d:2e:
b1:26:16:91:f6:47:fd:5d:99:cf:f6:17:09:4b:fb:
c7:ad:fb:0f:61:e4:d9:a7:bd:ea:9e:fd:ee:15:08:
ef:a7:6b:54:f3:6e:e8:a5:56:73:29:1a:8d:0b:27:
08:a7:e3:15:00:44:77:65:7c:34:aa:42:7e:0f:02:
11:28:90:c7:3d:fe:34:75:08:8e:d6:d7:fc:6c:32:
14:67:e9:8c:9e:6e:9f:27:14:2f:7c:32:8c:a8:cf:
03:94:3b:69:2e:30:76:6a:50:90:46:91:36:08:f5:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B0:B8:31:14:20:34:BE:E3:BD:02:E6:AE:C4:82:DA:23:F0:E7:B6
X509v3 Authority Key Identifier:
keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0e:10:80:70:4f:ff:c8:c4:08:fb:39:d7:f6:0f:e8:77:20:
df:f2:61:c8:b6:f6:54:a0:46:80:61:f2:1e:78:c2:d4:d7:33:
fa:2c:94:bf:e4:40:e8:05:e2:74:07:75:e9:73:7f:49:f3:87:
bb:da:ca:b9:c8:58:4f:3d:90:81:19:16:71:57:c8:69:17:da:
34:d6:e5:c5:53:b5:88:62:23:46:6d:05:81:24:3a:7a:09:d0:
1f:b1:fe:d8:66:63:5d:5b:d8:17:13:db:a2:2d:ce:a8:4e:7d:
37:3c:1f:d4:be:b1:59:04:7d:fa:e6:17:6c:23:f0:d7:ce:45:
97:a4:81:a6:ec:01:77:65:80:d9:b5:69:b3:0a:54:73:72:29:
c6:1b:ba:d1:f7:97:25:96:b3:d4:3b:c5:13:cb:3c:15:75:95:
24:62:73:02:ae:6f:2a:c9:6c:51:8b:3f:e5:e4:59:33:d2:c7:
ff:0d:2f:1c:52:f9:18:5c:a8:ce:bf:51:c8:c3:1b:4d:3d:10:
a6:d1:1f:54:ef:9f:0f:f5:30:8c:44:77:c7:3e:ce:12:88:3b:
8e:e8:7f:c1:61:81:8e:10:00:ab:f4:a5:67:8e:e9:4c:74:7a:
43:f2:e3:12:d7:b8:f4:83:44:bd:ae:03:37:a0:23:b1:b1:67:
86:d9:58:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:30 2025 by rpki-client