Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: unUlienNRnDGcvq359hVmxxUPEMkTZ0gRg9CjRFtNH0=
Subject key identifier: 85:9B:A1:76:42:AB:BB:78:14:D0:0D:0B:50:33:BC:F4:5A:E2:38:54
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 019510FE079844E49F253DB3DC24FAF0FB8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 10EB
Signing time: Sun 16 Feb 2025 23:00:38 +0000
Manifest this update: Sun 16 Feb 2025 23:00:38 +0000
Manifest next update: Mon 17 Feb 2025 23:00:38 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: jlRcLOu0vuxGhlECBJgegglyQqKNf61mKz+zl6JisIs=)
2: r_EtzemP5qS9owVy3amV1QVxd6M.roa (hash: 4ypXA4zqyl2FqWR9d1DoEhKj1KllDHJdbQvxad1aSJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:07:98:44:e4:9f:25:3d:b3:dc:24:fa:f0:fb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Feb 16 23:00:38 2025 GMT
Not After : Feb 17 23:00:38 2025 GMT
Subject: CN=859ba17642abbb7814d00d0b5033bcf45ae23854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:54:88:c8:e5:18:72:f0:99:93:47:bb:d0:
6b:ce:76:ee:c3:88:b0:3e:6d:9b:3a:1f:32:a0:68:
3e:11:3e:12:e8:75:1a:22:e1:d7:8d:58:73:07:d2:
2e:e1:22:51:5b:c6:02:97:66:a6:5a:cf:e9:62:e4:
41:92:72:57:7b:cb:90:21:9f:b8:ef:53:d3:6d:42:
5d:af:af:e9:4a:30:cd:73:a7:dc:5e:d0:25:7c:05:
98:ab:68:ee:a1:ed:b2:d1:02:56:3b:65:5f:17:57:
49:0f:3b:5d:eb:09:e2:bd:9b:9c:01:a1:fc:43:79:
c1:66:6d:89:61:48:46:08:22:ee:83:ea:7e:a0:01:
92:d0:d3:2b:38:d1:05:f7:60:ad:22:58:c8:42:f0:
ff:6e:54:88:f5:80:4b:ae:91:40:e7:4f:fe:58:45:
e6:ab:9f:9c:28:4f:7f:fd:f6:17:65:42:d7:d9:13:
b2:50:eb:8b:8a:34:16:e3:a3:26:7e:70:34:2b:b2:
69:5e:a4:bc:e4:89:bf:ad:ce:8f:38:6f:d0:33:3f:
b3:b9:85:8c:0e:51:1a:29:56:35:41:f1:3f:65:3b:
aa:8d:34:88:21:31:19:62:a5:86:f9:13:e4:46:9c:
3d:bc:c9:f4:2f:18:a0:00:f3:7c:8f:a2:f4:db:1b:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9B:A1:76:42:AB:BB:78:14:D0:0D:0B:50:33:BC:F4:5A:E2:38:54
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f1:f3:c7:96:88:7b:b3:95:87:5c:b3:96:92:7f:35:17:03:
0d:67:e6:53:b2:75:69:b8:96:ec:6f:44:02:d6:3d:a1:a2:ba:
a8:ce:fd:55:cb:d5:b1:d3:0a:c7:2e:0d:ac:f2:52:b7:0f:c2:
78:ea:8c:da:fd:69:13:35:1d:aa:97:06:ce:87:36:14:6b:37:
dd:4a:34:1a:e4:25:1b:bf:46:4e:cd:b6:67:68:fd:fc:33:36:
7a:f2:c7:ba:bb:d3:ed:02:64:5c:6c:2b:16:12:54:e8:27:6d:
02:a0:87:8e:08:2c:32:52:32:b5:19:f7:47:93:be:a6:67:05:
8a:d0:3e:da:95:18:9f:be:e5:6f:0b:86:fb:44:21:d5:31:c3:
87:75:fa:3e:2d:6c:0e:d8:8d:7c:ef:73:54:c6:ac:47:06:d7:
c5:57:9b:c4:01:15:89:54:b2:e7:52:7c:d4:86:73:1e:91:db:
78:be:ed:e0:5d:7b:51:3c:5e:70:82:17:4c:0a:b9:dc:b3:d1:
bb:0e:75:8b:97:f7:b1:23:b5:e5:98:c6:de:83:42:36:3c:3f:
1e:30:97:f9:50:c6:31:2d:e6:9d:f0:f5:a3:01:f6:fb:f9:a8:
84:0b:ed:b2:93:e7:eb:db:83:57:59:98:7d:5b:6b:f4:e4:7b:
73:5f:8b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:50 2025 by rpki-client