Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File: jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier: bPZBNhKKpHheakeSAAuk/IpYEps6RVKi+arQLhiyRV4=
Subject key identifier: 4D:5C:C7:75:7C:5A:BC:D8:05:C6:D3:1A:65:D4:80:23:29:0F:4C:47
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial: 0195116C1809868A780C94D937F5609CB205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number: 04C9
Signing time: Mon 17 Feb 2025 01:00:51 +0000
Manifest this update: Mon 17 Feb 2025 01:00:51 +0000
Manifest next update: Tue 18 Feb 2025 01:00:51 +0000
Files and hashes: 1: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: px/9l90FFqoz7QF8ebJuDAry04+l6P4O+wJIVzb1eGA=)
2: lHGrQ5ab4Wwh-Q0oJszTsf0BUdA.roa (hash: BJEIpPOdoxYjpK82/CR/sXoES/6zdTI5hZVWKdTDxHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:18:09:86:8a:78:0c:94:d9:37:f5:60:9c:b2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Validity
Not Before: Feb 17 01:00:51 2025 GMT
Not After : Feb 18 01:00:51 2025 GMT
Subject: CN=4d5cc7757c5abcd805c6d31a65d48023290f4c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1f:f2:ca:7c:ae:88:f7:5e:72:47:55:dc:0c:
1e:82:df:48:3c:99:50:e0:aa:fd:79:2e:8c:a4:e8:
26:6e:ce:0e:24:8e:9c:7a:e1:6a:0d:c3:f4:03:a1:
f8:f9:69:3e:fc:45:e4:5c:8f:44:01:62:6a:bf:bc:
9c:aa:45:e3:80:50:de:13:1c:e2:56:c0:c4:30:4a:
e4:d8:f6:71:72:05:9c:01:45:96:cc:2b:3a:5d:ac:
80:f2:dd:d6:3a:52:ef:fa:50:9a:2b:81:0e:13:6c:
17:1a:57:23:1e:07:1a:e6:a8:7b:6e:06:da:ae:7b:
2a:d0:1a:9c:a2:08:19:99:44:e7:b5:35:fe:74:59:
4b:c8:a0:81:0d:29:5c:53:4c:ec:9c:30:26:98:a0:
f3:ff:49:ee:17:4a:8e:31:5a:4d:51:ce:51:c8:4a:
d4:71:e6:56:43:81:69:1a:0f:db:1b:6b:05:0c:b4:
8b:19:48:08:0b:93:ae:67:af:c7:1d:ce:9e:36:e9:
74:fa:d2:b2:76:2c:f8:6a:f0:6c:31:a3:a0:ad:67:
38:ab:80:11:20:34:fa:03:ea:96:96:c6:33:9c:b2:
67:de:a6:86:fa:d4:3b:3e:82:eb:8e:e0:ad:72:e4:
cf:f9:0b:7d:c3:d3:9b:36:95:1d:50:34:cc:03:5b:
89:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5C:C7:75:7C:5A:BC:D8:05:C6:D3:1A:65:D4:80:23:29:0F:4C:47
X509v3 Authority Key Identifier:
keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f4:68:e3:5f:3e:3d:fc:88:ed:3c:9d:7f:ff:82:17:ea:fc:
51:47:9d:32:7a:3d:2c:17:2b:80:f0:5c:97:c1:e5:58:d9:a7:
e3:be:c6:67:e4:5a:e5:22:c4:7f:ba:a7:65:4b:c3:a5:5c:f8:
8d:75:00:21:64:b5:66:9c:cb:37:33:79:97:81:89:5d:cd:e1:
68:82:de:b0:b7:63:13:f9:1d:29:e7:cb:ef:e6:92:ef:a4:83:
fd:39:9a:76:76:ad:8e:25:5c:3e:3c:96:3c:1e:c7:a1:4e:86:
e1:83:37:67:6f:ef:04:c2:2e:5e:8b:26:36:47:00:03:8c:d9:
a6:d6:c9:1d:7d:23:03:b5:de:b2:2c:08:99:8e:c1:59:b1:90:
ff:88:1b:0d:13:65:b7:f6:2a:52:50:a7:f6:79:aa:8c:89:df:
f5:9a:14:92:f9:1a:81:79:81:f9:ae:f6:6f:89:6f:a2:68:99:
fb:ba:2d:0c:f8:fc:8e:21:c2:d9:71:e6:87:d4:9f:ee:55:fe:
09:4f:2a:c5:12:67:bb:5f:eb:46:b4:77:f1:c5:5b:0b:f2:af:
11:cd:4e:48:59:d0:96:47:bb:29:72:70:8e:7a:c2:6a:75:bc:
bc:89:ba:02:09:d4:f3:e9:0a:ff:b1:f9:bc:16:dd:e0:47:2c:
74:dd:47:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:47 2025 by rpki-client