Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: 7re+NKIgCQS0k1gvzjXEUjA2XBKi+RnpT43RuQxcM9w=
Subject key identifier: B3:8B:D0:BF:A5:F6:07:5E:F2:0D:09:96:C6:5D:02:E7:F5:A2:CE:F2
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 0194C4D0F4314268B8D11049DE69266A598D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 16
Signing time: Sun 02 Feb 2025 04:00:15 +0000
Manifest this update: Sun 02 Feb 2025 04:00:15 +0000
Manifest next update: Mon 03 Feb 2025 04:00:15 +0000
Files and hashes: 1: 1-nkTyOMqH94a8OlfukcDf7YbkNc.roa (hash: Z6uvUYmhirGQlJwClrs+HtNhQJGa2PNo7VCbu68pXz8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: g+XpOqpd8AE9xGzydFNo7xfzAJythy642zVSkduhulE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:f4:31:42:68:b8:d1:10:49:de:69:26:6a:59:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Feb 2 04:00:15 2025 GMT
Not After : Feb 3 04:00:15 2025 GMT
Subject: CN=b38bd0bfa5f6075ef20d0996c65d02e7f5a2cef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:a3:cd:43:7c:ce:a1:b3:2a:d4:51:c1:e7:
2c:e3:75:fc:22:f1:d1:6b:e0:20:ea:e9:9c:3c:17:
b5:53:43:3f:9a:f2:30:80:52:7c:29:f8:9f:00:85:
17:eb:f0:2c:36:4e:e2:cb:f8:49:a8:a9:00:3c:53:
57:ca:59:24:b1:3c:cb:bd:c8:51:b5:a0:5d:64:39:
b4:15:e5:d3:bf:36:3c:ea:f6:a6:a1:8b:45:9f:3c:
48:15:14:8e:4e:20:75:63:8d:06:50:eb:7e:90:5e:
3c:69:19:2c:04:dc:01:1f:5a:e1:c5:10:7f:a5:2e:
4b:20:a7:57:0a:51:f5:ae:66:b8:7d:e6:b0:70:77:
41:db:b6:98:dd:86:a8:64:ac:a9:20:e2:e6:a5:33:
f4:22:12:8f:dc:a2:e4:58:bb:fd:e4:f0:dd:cf:a2:
f3:2a:aa:10:20:09:2f:44:48:df:05:88:a3:a8:fe:
74:5a:85:1c:59:ca:07:d1:9f:b9:cf:cd:9f:db:53:
41:a2:b5:3e:14:09:ff:26:c4:c5:f2:c8:ae:25:a7:
d9:89:e8:ea:1f:a9:93:41:bc:f2:78:65:1e:82:af:
a8:95:da:30:c0:f1:09:d3:fb:19:49:e4:c9:4d:75:
60:00:ef:87:eb:a2:25:03:bf:ef:21:df:d7:9e:9b:
a9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8B:D0:BF:A5:F6:07:5E:F2:0D:09:96:C6:5D:02:E7:F5:A2:CE:F2
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d5:b6:b1:70:23:ec:8b:60:04:70:6a:2b:98:41:54:68:5a:
7a:51:de:a6:27:1e:77:48:f6:1b:36:7b:4f:b0:cb:ac:18:da:
94:5c:ca:71:a5:4c:8a:ce:54:c5:bd:93:bb:3c:53:3b:65:97:
03:1c:da:b6:88:d6:e6:81:8f:6b:1e:93:be:c0:28:70:70:ff:
60:ae:c7:15:5f:03:d3:1e:ef:d0:ec:7f:0f:f5:89:57:f4:57:
8f:a0:24:b8:2b:6c:15:79:be:f4:66:67:09:8f:71:b6:cd:db:
5b:b5:e7:c6:34:e5:ab:65:63:43:82:9a:80:ff:cc:d5:5e:dd:
0d:51:cc:12:64:af:de:5b:7b:2b:cd:f8:e5:1d:b1:ad:46:ef:
d2:79:18:d0:11:37:2a:42:fc:ca:0e:cc:83:52:ed:36:72:73:
e9:7a:ec:ed:93:86:5d:2a:d5:0e:a9:61:63:32:93:cf:78:8e:
af:d1:d9:7a:9e:70:f1:28:51:5d:7a:e4:cf:60:3a:be:cd:8b:
c6:e0:58:2c:e5:e0:3d:33:a4:a9:34:7e:41:41:d5:81:1c:f6:
ab:b8:8b:9f:62:3f:fb:28:42:71:bd:b5:a0:4d:d5:88:7b:ea:
15:04:ca:d9:2f:7c:89:db:95:ec:d8:5b:d0:1a:64:02:03:12:
94:52:f9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:38 2025 by rpki-client