Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
File: JwBs1Oq8VbNskwifFND6bg-gzG0.mft (raw, json)
Hash identifier: phVUYWGZbzOXa/98bOzjbEfg4Zv6kUiPM4cqou2OBxU=
Subject key identifier: B8:72:1A:BC:00:E2:75:27:C3:E1:61:70:AE:CF:D6:02:94:5F:95:D8
Authority key identifier: 27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
Certificate issuer: /CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Certificate serial: 0194C463850C45B54D6D45B944BA56470F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
Manifest number: 0F2F
Signing time: Sun 02 Feb 2025 02:00:43 +0000
Manifest this update: Sun 02 Feb 2025 02:00:43 +0000
Manifest next update: Mon 03 Feb 2025 02:00:43 +0000
Files and hashes: 1: JwBs1Oq8VbNskwifFND6bg-gzG0.crl (hash: QFp2NbhzXuuRNZsjjuCcyYDc7d/ZD2xj4djmyHWQXcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:85:0c:45:b5:4d:6d:45:b9:44:ba:56:47:0f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Validity
Not Before: Feb 2 02:00:43 2025 GMT
Not After : Feb 3 02:00:43 2025 GMT
Subject: CN=b8721abc00e27527c3e16170aecfd602945f95d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:bd:5c:82:50:5f:e4:b6:7e:71:4a:43:ef:
24:7a:46:3c:21:6b:13:8c:e9:38:de:09:a1:e2:b5:
1e:79:73:e6:b7:81:6a:c7:29:6b:2b:0b:58:5d:f4:
3c:6b:c0:af:66:76:ab:e4:cc:d3:b3:76:c3:70:56:
93:ff:9c:38:a8:a7:84:f8:93:5f:32:8d:57:75:34:
5b:27:0d:10:5b:54:fb:5a:ba:47:71:fc:24:a5:75:
df:b8:6e:1e:b4:a2:e2:33:4a:26:78:5f:ea:24:a3:
de:1b:1f:a7:36:7f:5e:3c:63:0d:d7:af:91:cc:9b:
49:0e:77:75:df:c9:26:35:7f:70:bd:aa:82:f3:32:
84:d6:64:d7:70:45:a0:ce:a8:98:cc:65:55:5b:0a:
ef:73:93:09:da:ec:06:cb:14:7f:8d:b4:ab:de:be:
96:00:66:5a:b1:41:e6:c6:87:42:ff:84:e5:86:96:
44:75:b8:9a:cf:91:48:03:2a:4b:4a:5e:cb:f4:fc:
01:cb:06:9c:c7:8b:e8:dd:8d:9e:3f:e2:3f:54:9a:
8c:9f:18:9b:87:66:44:8b:c9:95:94:18:cd:da:41:
5b:44:e0:70:35:05:a2:24:29:c0:58:c2:2c:fa:6e:
e1:50:d9:33:ad:ab:ec:59:ba:39:27:c7:e4:88:74:
07:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:72:1A:BC:00:E2:75:27:C3:E1:61:70:AE:CF:D6:02:94:5F:95:D8
X509v3 Authority Key Identifier:
keyid:27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b9:97:e6:76:bf:e4:cd:96:a2:3b:7f:a6:84:1a:c8:52:73:
51:36:f2:e3:f5:d1:42:16:61:d8:29:c4:c2:7e:22:a2:2b:86:
9a:2c:60:66:f2:04:16:fd:57:45:2c:75:c8:1c:c5:49:7c:82:
69:b5:da:de:2e:ce:3a:6b:92:3e:20:a5:e1:9e:bf:a0:f4:52:
93:89:a6:91:9e:c1:0f:c2:17:d1:47:a2:de:64:4a:35:1b:a8:
b9:97:67:6b:b4:7c:03:53:cc:7b:2e:65:c5:c0:20:7f:98:9a:
0d:1c:3c:e0:69:64:88:5b:62:b4:2f:54:a7:06:f5:21:15:09:
c4:9b:90:11:f1:33:9a:af:51:01:f4:fe:43:c6:ec:5a:8d:72:
67:75:51:b4:bc:12:a4:29:4e:d5:9f:55:f5:60:af:6d:0c:60:
9b:8e:b3:63:7f:9b:a6:0a:3a:65:ed:e3:8e:36:49:91:71:37:
1e:4f:03:4a:22:dd:39:71:89:ab:8d:b4:48:d9:79:0d:3a:b9:
d1:ed:25:96:78:23:7a:d7:b0:9f:cf:b4:56:fe:37:30:da:54:
d2:e6:63:8c:bd:cb:3e:7f:c7:5c:b9:57:70:00:91:22:8d:d3:
4f:b4:40:64:ff:00:45:68:4f:83:df:ff:e1:42:8b:ec:2a:6a:
f1:15:24:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:14 2025 by rpki-client