Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
File: JcUDXdNt8HSfTWKZyPy-1hVcARc.mft (raw, json)
Hash identifier: lng1FKisN9jm1wOBPJGoz4JKtKQzHQVAlsQ92/QCv2U=
Subject key identifier: 50:D3:94:38:61:FF:F7:77:B7:83:C9:5E:74:A5:18:02:2A:31:93:2E
Authority key identifier: 25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
Certificate issuer: /CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Certificate serial: 0194C387AF912BDF22565689873CB6D62D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
Manifest number: 142A
Signing time: Sat 01 Feb 2025 22:00:36 +0000
Manifest this update: Sat 01 Feb 2025 22:00:36 +0000
Manifest next update: Sun 02 Feb 2025 22:00:36 +0000
Files and hashes: 1: JcUDXdNt8HSfTWKZyPy-1hVcARc.crl (hash: tFLIGJ9mhmTqqRYsr3vR/nXR6fTGujNjEVIXNKLpltM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:af:91:2b:df:22:56:56:89:87:3c:b6:d6:2d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5035dd36df0749f4d6299c8fcbed6155c0117
Validity
Not Before: Feb 1 22:00:36 2025 GMT
Not After : Feb 2 22:00:36 2025 GMT
Subject: CN=50d3943861fff777b783c95e74a518022a31932e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:cd:e3:d0:63:43:b2:e3:3e:cf:cf:b2:5e:
e0:fb:4c:de:40:4d:86:39:3c:06:fa:0f:c0:26:e7:
90:df:1a:b3:fc:1a:e5:7a:64:6e:5e:e0:01:8a:28:
2e:8e:d1:05:36:88:18:f1:9c:3e:56:1c:7b:c6:c5:
9c:56:da:a3:ca:ae:24:7a:4c:9c:8b:2d:8a:b9:4d:
d4:b0:52:0c:19:71:d7:a1:79:95:f1:92:7e:77:c1:
66:e5:d1:36:5c:e8:29:6f:ac:c1:df:b1:9e:7b:19:
4a:84:43:4c:2a:ab:d5:76:a8:92:17:c8:c7:86:d4:
24:92:a6:ea:f9:b6:86:75:48:91:33:bb:48:87:b8:
e3:e2:d5:39:b0:4c:70:54:8c:3a:a1:9a:b3:c7:42:
2a:1e:77:97:31:36:4d:7f:3d:f3:57:2e:7e:64:25:
59:92:a8:09:a4:c6:eb:29:8b:9c:4e:bb:d6:ae:46:
4b:4d:99:c0:28:13:2f:07:82:e3:84:99:0c:8c:69:
d9:bd:68:33:42:ba:4e:ae:a0:38:93:ba:8a:c5:06:
d8:df:a3:42:ae:7a:f9:7b:aa:c5:43:87:a0:74:75:
ac:49:dc:14:00:f0:b7:7c:fc:e0:3a:55:52:7e:ce:
f3:99:8b:a1:46:61:55:01:1c:8a:99:56:cd:e9:7f:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D3:94:38:61:FF:F7:77:B7:83:C9:5E:74:A5:18:02:2A:31:93:2E
X509v3 Authority Key Identifier:
keyid:25:C5:03:5D:D3:6D:F0:74:9F:4D:62:99:C8:FC:BE:D6:15:5C:01:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUDXdNt8HSfTWKZyPy-1hVcARc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/809cd5-f23f-4720-8c64-59eb384e0967/1/JcUDXdNt8HSfTWKZyPy-1hVcARc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:09:89:82:b7:6c:dc:5d:45:7b:40:6c:1b:46:bb:86:a1:ba:
2f:77:df:25:d0:96:03:e2:be:a3:e5:93:a3:bd:79:ac:2c:6c:
85:80:75:91:75:a2:95:5b:0c:43:d7:b5:2c:f4:36:62:4c:08:
b2:8b:90:d9:a9:12:1b:1e:44:01:58:6b:f7:f9:5f:07:78:48:
93:fa:3c:27:c7:5c:16:96:1e:47:58:8f:b8:bb:ae:22:5d:7e:
77:0f:db:ff:0e:9f:8b:3d:fd:7a:01:65:cd:ec:e5:42:ab:bd:
62:ef:4a:c5:e8:a8:14:98:81:50:ba:7a:69:ed:ce:2d:55:82:
8c:93:95:a1:ee:c4:16:d8:7c:90:e2:bf:0e:56:dc:41:44:36:
6f:6c:d0:bc:9a:a0:fe:d4:dd:aa:08:2f:84:8f:f3:cc:1f:ee:
d3:30:e8:23:13:d2:21:97:cb:2f:cb:e5:67:df:ea:03:5f:c4:
84:ec:20:38:de:2e:de:76:17:5c:c2:e0:c4:7f:b4:26:0f:c4:
e2:b2:7a:5c:42:94:47:0e:0b:10:51:04:e5:f6:fd:fa:6b:cc:
f4:04:07:6f:48:12:e6:23:e8:77:62:bb:55:03:ac:70:a8:7d:
d0:06:4f:83:d2:c0:c9:37:e9:72:fb:7e:26:ba:28:b2:ef:ec:
27:4e:a4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:52:29 2025 by rpki-client