Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File: jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier: +ixdOHCiJSy+ko8/ZAhc73cpB+qJ3vGYTqPVoDVsAlc=
Subject key identifier: 11:9B:9F:D9:A5:09:B1:D3:29:92:DA:37:E0:17:53:86:A6:35:39:C1
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 0194C4D14E8F4EB1D3126B20171893A68984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number: 13C1
Signing time: Sun 02 Feb 2025 04:00:38 +0000
Manifest this update: Sun 02 Feb 2025 04:00:38 +0000
Manifest next update: Mon 03 Feb 2025 04:00:38 +0000
Files and hashes: 1: 77z8QXKc8ERahKIbASlcnYfSpXA.roa (hash: 4+qUdKw0CqogSD0bEzw5oz5fN5HdO2eQJ/PSKGd57hQ=)
2: Vp9dMAyfVmCM5zZQhLE8hK5dRc0.roa (hash: 5cnih+GaWo66TQ4L2W2BbOxLKl4dL4P027VTj45pMMU=)
3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: wttGUb+u8i2gnXtFJxt9tHUy4s1TQSt/16vMQRYR5pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:4e:8f:4e:b1:d3:12:6b:20:17:18:93:a6:89:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Feb 2 04:00:38 2025 GMT
Not After : Feb 3 04:00:38 2025 GMT
Subject: CN=119b9fd9a509b1d32992da37e0175386a63539c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:97:3d:91:c3:d6:d3:fe:80:51:f2:fb:ba:
9a:6c:c4:cc:1b:79:e5:24:78:ea:5e:78:06:43:fc:
19:77:6e:e8:ed:a0:a5:89:73:b3:1f:bb:df:38:7f:
3a:29:07:33:e4:db:14:fc:b1:8b:d1:be:4f:ff:ce:
ea:8c:21:a7:b1:9a:5e:a1:18:fd:0e:b5:b3:87:ab:
ea:31:3a:5e:46:d3:c9:95:a2:40:53:02:b1:23:eb:
ab:0c:30:c5:2c:82:56:4e:dd:42:8d:2c:07:67:00:
92:e3:36:fd:74:45:16:5f:50:ab:fd:ed:4f:64:27:
2e:04:aa:17:82:d7:5d:2e:a0:fe:dc:1a:f5:8a:6d:
43:82:cb:a3:85:4e:3e:de:92:4d:43:d4:f8:77:2f:
a6:3b:fc:60:ed:37:79:83:dc:7d:3b:88:2e:09:74:
c7:2c:0b:ae:dc:21:29:f9:04:91:32:da:39:ea:52:
d9:1d:f7:c3:6e:15:2a:da:57:fa:7a:24:4a:4c:6b:
75:f6:57:31:a6:06:7d:67:80:11:19:7c:c0:b3:35:
fd:67:ff:ae:cb:fd:1f:a0:1b:87:45:a0:71:90:a4:
63:fc:50:af:02:e0:04:60:90:4e:b6:51:d0:25:8d:
3c:67:c8:c2:1e:b1:ec:86:61:9e:04:74:9b:87:7b:
e3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9B:9F:D9:A5:09:B1:D3:29:92:DA:37:E0:17:53:86:A6:35:39:C1
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:29:6f:bd:07:77:8b:a6:f7:7b:80:d0:65:e3:34:ec:a1:e3:
ab:74:70:8a:e8:09:d8:13:53:b2:d3:32:16:25:fc:d4:4e:2e:
4b:7d:5a:7e:65:e0:17:1f:7d:8a:1a:f5:84:21:60:68:33:17:
58:c2:c1:3f:89:46:69:22:0c:c4:a5:a7:e2:36:7a:fa:aa:44:
55:1e:d8:bb:3d:68:c0:a0:c9:04:33:81:23:de:98:4a:75:e3:
2e:c0:e3:a1:c8:f8:74:be:ab:8f:39:19:53:72:85:52:88:f8:
eb:ce:34:ea:f7:70:6d:d9:e0:c7:41:2d:4a:9f:74:39:e0:91:
9b:9f:99:94:c6:87:60:27:cb:35:77:72:aa:af:44:96:44:6d:
10:52:3d:41:30:3a:8c:e7:02:91:ba:fc:69:06:b3:d8:cc:32:
d6:1e:84:41:59:a1:67:4a:67:23:31:5e:be:41:8e:c4:5e:6c:
6b:50:ea:71:a8:b1:f8:c0:5a:b5:75:eb:bd:e1:95:48:f0:d9:
78:9a:f8:2b:f2:79:3f:b5:70:eb:6f:81:5e:55:fc:9b:88:4f:
79:d6:90:a3:e3:c4:3c:4c:b7:75:0e:c4:18:91:95:93:64:cf:
fb:02:49:55:2b:5b:52:70:a2:94:43:34:48:82:bd:06:6e:05:
e4:1f:ea:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:04:00 2025 by rpki-client