Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier: xuSrAunsb/kkRKcMJW3oH4SuKrWNfqV8b5DEnRUE+AM=
Subject key identifier: 13:A1:57:29:6B:97:58:FF:FC:50:CB:0E:35:08:ED:98:E5:78:12:64
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial: 019511D9ABE3C9AB3DC629DE9C6A2E48809F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number: 112D
Signing time: Mon 17 Feb 2025 03:00:32 +0000
Manifest this update: Mon 17 Feb 2025 03:00:32 +0000
Manifest next update: Tue 18 Feb 2025 03:00:32 +0000
Files and hashes: 1: 7BGirnEkwzmDaMHYb7_OyeObZ-o.roa (hash: Mqe4eHaFftNeUPq4ztkhypVdBvRsFekv3LwUY3g3YP4=)
2: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: qztySu/f+TndYDNOXg+zAXWuVyFO8fZvjP+c+jKtvxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:ab:e3:c9:ab:3d:c6:29:de:9c:6a:2e:48:80:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
Validity
Not Before: Feb 17 03:00:32 2025 GMT
Not After : Feb 18 03:00:32 2025 GMT
Subject: CN=13a157296b9758fffc50cb0e3508ed98e5781264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:ff:48:35:5b:14:f5:e4:cb:3b:f7:1f:f7:
84:1b:96:be:fb:85:89:9e:f8:bb:e4:a0:23:81:ff:
ac:e5:21:0c:4e:2c:25:06:99:d0:5c:fe:c4:cf:33:
50:73:69:72:b7:59:b0:dd:7d:c0:c7:5d:21:f9:03:
7d:4a:9c:34:d2:19:98:07:74:f3:1e:8c:48:4a:fa:
50:c0:e2:aa:33:b9:68:ca:33:3f:07:f4:e0:c4:32:
95:d9:b4:b5:bc:20:c0:22:0d:3b:46:50:47:58:ab:
9a:76:14:54:80:ba:de:4b:04:16:47:a3:c8:5a:5e:
7e:93:57:fb:ac:ba:f5:5f:c5:dd:b4:a2:dc:30:03:
3f:95:a7:ae:55:b8:f1:10:2b:8a:9a:1c:d5:48:99:
ab:c1:85:7e:a7:5d:0c:60:0c:aa:ae:b4:98:fc:a2:
13:7d:28:db:82:ca:c3:05:1b:e4:04:2e:b2:45:da:
35:df:c8:c8:72:f7:4f:5c:8d:e7:69:44:24:e3:d0:
f8:61:3b:6d:e7:fa:ad:14:3f:09:cc:56:dc:b5:3e:
98:ba:99:5a:55:8e:d6:8f:67:ca:89:ba:21:81:2a:
88:92:b9:5f:55:f3:5e:48:cd:90:af:1d:ed:e6:a4:
a4:46:11:7e:ab:19:f7:ed:ba:13:cb:8a:4c:ae:b1:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A1:57:29:6B:97:58:FF:FC:50:CB:0E:35:08:ED:98:E5:78:12:64
X509v3 Authority Key Identifier:
keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f7:bb:0e:4a:32:f1:a1:64:ee:19:d0:3e:2f:47:d6:55:86:
1f:4f:26:52:ba:89:91:3c:af:3e:df:26:cf:17:ae:2c:d4:38:
c7:0a:88:d4:2e:16:24:83:8f:0d:4e:7c:76:5e:61:c5:fb:ea:
4d:5e:bd:54:0d:ef:d5:71:74:a3:5a:9a:4a:28:71:d4:24:13:
89:98:90:7a:f1:0e:9e:8c:ee:ae:ac:9b:be:b8:d8:fb:ae:4b:
1f:e8:d3:84:cb:4e:80:a6:d6:05:e4:4a:14:af:d3:64:3a:d5:
e8:78:5d:f9:8c:35:6a:8e:58:34:05:32:19:11:c6:58:18:cc:
a3:81:17:24:55:5f:b7:2d:dc:8d:3a:31:19:5e:b1:40:8b:6d:
df:c9:37:3f:9f:e1:3f:54:bf:2f:f5:fc:9e:ca:8c:0e:c8:fd:
31:60:80:9a:a2:ab:50:7c:53:7d:d9:01:45:13:61:61:2a:d2:
8c:f6:b7:ce:35:c5:0d:02:12:31:3e:8e:98:47:5d:03:f7:96:
9a:a0:63:db:33:9e:28:93:b1:8c:26:be:26:56:dc:a3:69:e3:
23:4e:15:01:c4:10:a4:d2:2d:60:a5:62:7f:a0:a9:04:d4:9f:
da:26:12:bf:ae:a0:2b:6e:51:1b:5c:e5:b2:5c:46:fd:e3:6b:
54:b7:cd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:06 2025 by rpki-client