Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: foVxMWexS8kviWsKsXkV8fhdUipEcFzYEr99AXeZWvA=
Subject key identifier: 48:9D:52:87:16:23:E5:94:33:18:00:E6:A0:33:60:D1:BA:60:B7:8D
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 019511A29831739F321C4BD83EAE89BB8B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 02:00:23 +0000
Manifest this update: Mon 17 Feb 2025 02:00:23 +0000
Manifest next update: Tue 18 Feb 2025 02:00:23 +0000
Files and hashes: 1: Cg0yCK2kQVd5LZZHHCdBRelfy-8.roa (hash: EJ5qFjEdSIaKu0rEkfVQQqMjYA83tlJGweW9Y6wELDM=)
2: DOAjS6N6DDMCT5Gs48jEEQ8kKdo.roa (hash: RxOSt+nS2Pi/oAjRbiU1f0I2BGNusR2WMtoxS2juhtk=)
3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: bWeUuwyMxOmHEbZxoGcp7sC9L6XwTmQF/tCicVUpn8w=)
4: NAFWH-6HZko-2jXV8t7oA0HzSIU.roa (hash: evlx0SvXozysnwaGLeRFiaf3O6MnrQAS3vJN/CS0+Og=)
5: ZDqkiej3KvbVcchBqYbs_m_58AA.roa (hash: WNRpgM2RfMTJF9WJxnTJzmUWmkHVlsXryqz1NtCqsaw=)
6: dtjkwOe--LCCK4SbfbTdSzg4V0w.roa (hash: DEavIckb2pS6VVqJFeMdsfbc6yjw9j8R9FNcBP297Fg=)
7: gvqSMksH9JFq1OfSJxdxmDTsBXc.roa (hash: osF872WgvjeWIvsXIp7+FXDCTfbIPesx6UeUql8Clms=)
8: pjBzn2Sy238yqyUOKntcgX57jHI.roa (hash: b3xbE8EnvkIkCdg8uGMMqz1ugaDBKhweBVSuxKKNfPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:98:31:73:9f:32:1c:4b:d8:3e:ae:89:bb:8b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Feb 17 02:00:23 2025 GMT
Not After : Feb 18 02:00:23 2025 GMT
Subject: CN=489d52871623e594331800e6a03360d1ba60b78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:32:44:7a:c8:c5:2c:7b:52:a6:0e:0c:c4:
13:1e:45:f8:a7:a4:37:2b:c6:88:30:c2:0d:8b:ce:
73:ee:db:9d:38:b9:d8:b2:ed:09:e6:26:ed:0c:dd:
fb:0a:62:76:ad:58:db:4c:69:59:82:e5:c6:f9:d2:
96:99:52:34:0a:ce:d2:40:20:7a:e3:53:54:5d:61:
e7:e2:b8:c0:5a:e9:d4:7d:46:9c:72:35:e1:f2:68:
5a:d9:77:ed:0d:01:c9:52:59:7c:38:0c:6a:4f:c8:
1b:92:a0:4f:a9:bf:e9:c9:fb:a1:db:95:08:90:aa:
2e:24:d9:c8:8d:b8:85:22:b2:8e:38:42:ba:0b:fd:
56:5c:2b:a7:b4:48:35:79:2b:4e:e7:57:b1:55:70:
87:a7:bf:c1:9c:11:87:a3:61:a0:c6:9d:1b:27:f7:
35:ef:ca:31:7f:e6:e4:47:00:af:67:00:56:af:ee:
4f:03:4a:cb:d7:49:d8:e4:09:9a:de:e2:34:09:66:
4f:52:53:aa:e2:f1:37:0f:89:e1:e1:9a:0c:e0:20:
38:78:b3:f8:2c:4e:35:33:72:b6:ad:7f:65:7b:53:
60:27:e2:94:e1:d9:c6:d5:cb:54:c3:a5:89:4b:4a:
21:73:05:56:d4:4d:50:12:34:bf:4d:db:76:5e:8b:
6d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9D:52:87:16:23:E5:94:33:18:00:E6:A0:33:60:D1:BA:60:B7:8D
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:dd:56:30:ef:44:a9:3c:e4:73:ab:36:b4:dd:ff:52:d5:c3:
bb:b7:f4:da:ce:b0:93:55:7a:bb:23:de:22:6d:13:35:96:f7:
46:9d:cd:6d:a9:97:a4:5b:fa:79:83:dc:52:4d:15:c6:8d:06:
02:51:4b:5c:72:af:b8:c6:fd:20:83:2c:7a:3d:18:17:f1:5f:
36:5f:93:d8:41:65:e8:6a:9a:9b:a7:29:ca:fd:01:fc:6a:c2:
2d:d1:20:98:98:a2:c2:7c:87:a2:e4:be:5f:41:e6:13:bb:02:
13:38:36:5b:2a:13:cc:cc:79:dd:f5:38:65:30:6c:86:b6:f9:
ed:13:25:3a:68:80:44:b5:50:a2:b8:c6:a8:a5:14:f3:f1:8a:
2b:3e:2c:ef:63:78:3f:54:ca:0b:ab:c6:00:16:5b:47:6f:12:
c6:b4:18:23:5c:27:ef:13:9b:82:42:18:78:1e:ed:f4:e7:a1:
f1:3f:55:13:b4:8a:01:9a:e3:45:f8:b6:fd:6a:4a:bb:7a:37:
85:d2:45:51:d4:40:d6:15:45:42:b5:fa:63:c0:79:23:36:8e:
c4:0d:4e:ab:27:de:8c:d7:2d:f1:14:9f:55:60:65:5b:ca:c3:
9f:56:8b:3e:e5:16:f5:74:7d:ad:12:16:8c:4c:84:45:a4:f4:
df:73:81:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:04 2025 by rpki-client