Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
File: JeqXR70BpFf6K7AvzArIIxQLUY8.mft (raw, json)
Hash identifier: mbWXfbD5mSRzcQXW7RW9z5OYmvj60F6cNOWaiMs6+Lo=
Subject key identifier: 34:2A:AB:8B:C2:74:6D:B6:05:95:29:CD:81:4C:ED:87:E8:49:D7:2B
Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Certificate serial: 0194BAF23AE7EC087E85756F6975C9220947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
Manifest number: 02D2
Signing time: Fri 31 Jan 2025 06:00:24 +0000
Manifest this update: Fri 31 Jan 2025 06:00:24 +0000
Manifest next update: Sat 01 Feb 2025 06:00:24 +0000
Files and hashes: 1: JeqXR70BpFf6K7AvzArIIxQLUY8.crl (hash: UUDCIpc6Fci4+jkpGV0rNlTxnxW3xi31mGKr4D7tgbE=)
2: MmaQNXqdY0uKh-k6Q3lAXI1Chz8.roa (hash: gbTLg78j8QXaXHSAXv6UFJxOI7JnWlqhBTReKaDFIXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:3a:e7:ec:08:7e:85:75:6f:69:75:c9:22:09:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Validity
Not Before: Jan 31 06:00:24 2025 GMT
Not After : Feb 1 06:00:24 2025 GMT
Subject: CN=342aab8bc2746db6059529cd814ced87e849d72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cf:af:03:00:1a:fe:3f:ef:c6:10:5a:ec:0d:
fb:1b:b9:f4:a3:9e:bd:3a:ea:52:c7:dc:b0:42:85:
e3:d6:90:9b:54:e1:50:33:c0:8b:4f:88:0f:83:0a:
fe:eb:9b:28:a4:3c:2c:79:bd:7d:dc:8e:72:84:08:
90:f5:9b:4f:c5:8e:c2:b0:9c:8b:cb:ae:5c:31:de:
2f:b0:76:a5:20:e6:11:47:15:62:1a:4b:83:2f:f9:
9f:d8:5c:31:1d:e0:cb:70:94:a9:be:ed:f3:fb:e3:
4e:8f:e8:ca:58:ce:9f:76:7b:e5:9f:f1:a3:05:23:
67:10:de:5f:2a:24:c4:e4:5a:3b:5c:66:31:b0:05:
78:5d:40:b0:95:bf:88:42:ce:30:1a:4e:72:45:7b:
6c:56:c9:0a:7b:ff:ee:a2:14:1d:4b:d1:96:98:24:
36:29:39:60:d7:50:41:5b:2c:0a:1c:24:9e:d8:ba:
dc:07:6a:2b:d2:3d:6d:55:3c:50:10:83:8f:22:13:
86:fd:18:ee:0c:52:7d:99:ba:20:86:46:04:25:da:
50:cc:c5:5e:07:fc:02:be:b9:c6:e0:67:2f:92:25:
b4:77:11:b6:c1:bd:fe:e3:c6:ef:20:b4:f0:3b:b6:
93:76:28:2f:e3:12:ef:94:bc:12:7a:f4:9d:fc:15:
7f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2A:AB:8B:C2:74:6D:B6:05:95:29:CD:81:4C:ED:87:E8:49:D7:2B
X509v3 Authority Key Identifier:
keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:17:80:82:16:44:f5:ea:37:5a:b1:c8:77:ae:d3:6b:45:8c:
e0:89:29:c0:c6:05:ae:86:83:57:27:1f:1f:3c:77:46:ef:04:
ac:e0:2d:f5:b6:fc:d0:8f:8f:f8:63:c9:3f:ee:22:a3:f2:56:
83:2a:c2:81:d4:b7:e0:1e:b9:d8:0c:b9:17:5a:cb:e0:a0:10:
0f:fb:ef:9f:6a:07:2d:69:01:28:dc:3e:25:42:a1:07:6b:02:
e8:4b:05:b2:3f:96:52:59:7b:c5:82:51:f5:ff:3e:3a:14:9a:
b1:eb:de:73:9c:2a:4e:57:d2:73:0a:91:13:77:87:c4:0e:5d:
28:ba:e1:fc:60:22:2e:4e:e5:3c:0d:37:12:65:51:c0:8b:dc:
41:c7:9b:54:0d:7c:27:f8:de:7a:ec:17:fd:bd:8f:a3:7b:68:
6a:27:77:5c:29:ee:45:f3:22:0e:e7:39:8e:15:14:d5:05:6b:
00:c9:30:98:5f:c0:df:97:66:f9:08:ff:eb:83:a7:eb:7e:f6:
68:5d:b6:c4:e2:70:3e:22:de:4a:8f:46:af:e3:e5:6d:5d:56:
bf:56:92:90:7f:99:43:d0:c3:0a:b7:41:96:b9:37:ea:98:f0:
4c:70:bd:9c:51:07:3e:65:29:f0:39:6f:a8:86:4e:f1:f6:a6:
ba:de:84:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:35 2025 by rpki-client on console-fra.rpki-client.org