Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
File: J0hgAkaZUbaABwTI8CysdLX4KQU.mft (raw, json)
Hash identifier: En88j+buFGWWGBEO2/mccPQtxsxlWdqzgUCnS63mhuY=
Subject key identifier: 9E:A7:EE:A5:65:9D:4A:13:B1:7D:DA:18:A5:28:3F:B7:1A:0C:85:09
Authority key identifier: 27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05
Certificate issuer: /CN=27486002469951b6800704c8f02cac74b5f82905
Certificate serial: 0195127E38BA9FDADCC53589E2241F64C7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
Manifest number: 0318
Signing time: Mon 17 Feb 2025 06:00:16 +0000
Manifest this update: Mon 17 Feb 2025 06:00:16 +0000
Manifest next update: Tue 18 Feb 2025 06:00:16 +0000
Files and hashes: 1: J0hgAkaZUbaABwTI8CysdLX4KQU.crl (hash: +9C0z3hGW4AiDOIpUO2Iwr3PcrLlYLTh3rKV05ZMp+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:38:ba:9f:da:dc:c5:35:89:e2:24:1f:64:c7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27486002469951b6800704c8f02cac74b5f82905
Validity
Not Before: Feb 17 06:00:16 2025 GMT
Not After : Feb 18 06:00:16 2025 GMT
Subject: CN=9ea7eea5659d4a13b17dda18a5283fb71a0c8509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6d:7a:f5:85:e5:7c:0a:2b:1f:da:2d:50:a2:
73:a5:de:f1:71:18:2f:e9:2d:cf:34:4f:fb:47:4c:
a1:a7:e5:ff:57:50:94:44:f5:08:70:1c:92:db:5b:
f6:88:33:cf:f0:69:5e:93:67:6c:b8:0c:83:b4:8d:
a3:12:72:7c:b1:f4:14:66:07:d1:bb:cf:1c:cd:8d:
cc:db:b9:31:b0:5c:a4:56:7f:29:05:9f:2a:32:ae:
c3:d8:da:44:6f:0e:bf:47:a5:d8:7d:cc:d3:6d:63:
6d:15:06:bf:ef:07:e4:92:a4:79:27:5d:3d:4a:4a:
b1:42:4b:bd:d2:44:d5:f4:f5:79:70:a8:98:77:06:
05:c2:1d:af:ad:8b:c3:56:a8:27:00:72:20:dc:0e:
df:f2:e3:9b:86:00:a5:e1:59:a5:7f:18:4e:9b:f8:
c0:76:8a:75:ba:6e:f1:0a:06:08:a9:e8:9f:bd:73:
f7:55:da:ad:09:81:a6:d7:d8:f9:f0:b3:2d:b1:13:
74:e7:25:cd:2f:62:a9:0c:98:59:16:c2:ca:ba:14:
34:44:e4:cd:1f:fb:47:08:b3:ea:2b:3f:27:2e:24:
17:ad:e0:f6:82:13:71:1b:87:71:e9:af:76:38:c9:
66:c4:28:7f:eb:7b:33:67:5f:d4:ca:20:96:81:7c:
fc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A7:EE:A5:65:9D:4A:13:B1:7D:DA:18:A5:28:3F:B7:1A:0C:85:09
X509v3 Authority Key Identifier:
keyid:27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:aa:f0:f2:38:9a:b2:d9:91:12:2b:e0:dc:d7:f2:74:89:e9:
5c:05:f2:7c:0d:db:a8:a7:bb:24:5b:b4:98:69:d3:5d:08:79:
63:ad:09:17:9e:a1:1a:d4:eb:e3:6e:f0:63:5d:e5:fb:f5:d9:
dd:2e:d6:78:00:f5:9b:ac:09:a0:dd:46:c4:e6:12:3c:6e:10:
6c:ef:1e:1d:74:67:96:83:e5:80:ee:e6:d2:7b:ba:28:41:fe:
8c:31:73:1c:94:cf:9e:aa:7c:03:30:2d:ab:11:b9:1c:e0:53:
6d:f9:90:40:9e:9a:c4:5d:29:94:46:a1:d3:b0:62:8e:f2:32:
57:ed:16:ad:2e:04:96:e3:27:01:09:79:a2:c7:16:46:fc:a7:
41:c8:de:49:d3:6b:8b:cf:6f:0d:62:eb:14:e3:09:8c:bc:54:
36:17:a7:65:dd:61:2d:f7:02:0a:c1:68:96:0c:80:aa:a6:63:
de:eb:41:4c:75:db:c4:98:0d:e1:62:bc:fc:6b:39:9e:2f:78:
d7:e3:4b:7d:0f:d6:e5:42:c2:36:38:27:fe:53:82:e5:e6:3a:
0f:a9:23:56:57:ba:f8:ee:34:e5:31:c1:1e:14:2d:8e:f1:b0:
72:b2:19:ea:78:5c:06:12:cb:aa:19:d3:8a:77:a9:68:8c:14:
6c:b6:a8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:41 2025 by rpki-client