Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier: 1zoHie9d9+KBsUCrsSYe77LxZrWyn4asIQU7a6uG2qs=
Subject key identifier: C4:24:44:4F:7A:0C:B1:F7:4E:34:FF:0F:0C:38:DA:02:57:52:1E:DD
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial: 0194C3F5A647985DF955F3610594A72916CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number: 142C
Signing time: Sun 02 Feb 2025 00:00:43 +0000
Manifest this update: Sun 02 Feb 2025 00:00:43 +0000
Manifest next update: Mon 03 Feb 2025 00:00:43 +0000
Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: vc/xFcRzcqEdYvOD5d8mgLtrSM+q2vQPRyXlcr6Pjk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:a6:47:98:5d:f9:55:f3:61:05:94:a7:29:16:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
Validity
Not Before: Feb 2 00:00:43 2025 GMT
Not After : Feb 3 00:00:43 2025 GMT
Subject: CN=c424444f7a0cb1f74e34ff0f0c38da0257521edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:73:5b:f0:54:1d:af:91:bf:d9:be:70:55:c5:
ec:5b:e3:e1:05:49:b1:98:b0:fb:59:25:b0:0e:e3:
16:c1:8e:7d:8a:b2:f4:78:9c:d8:89:3d:84:c8:d3:
51:ae:53:9a:8b:84:29:e7:03:4c:d2:d9:ed:b8:54:
99:95:93:77:a7:f0:3e:f1:e5:a9:cf:27:29:cf:bb:
e8:c5:16:0b:7a:5b:60:65:dd:b1:25:20:53:94:66:
60:6f:a7:20:e4:f7:0a:f6:91:5b:15:37:a8:12:ff:
34:b2:c7:42:43:f3:c0:95:c0:78:35:06:d6:95:78:
fe:69:de:8b:0c:e0:d5:2b:87:46:cd:51:48:b9:83:
9c:52:3a:af:14:38:6d:cf:92:98:af:5d:a3:db:4e:
99:2b:dc:9e:6a:ac:5d:97:3d:f3:ec:03:e0:c7:3f:
9a:fa:b5:42:7a:0a:7d:0b:6b:b2:8e:c6:13:8d:64:
a6:5a:1d:17:4a:4d:df:8f:c5:7c:cb:63:a2:8a:77:
c7:2a:cf:98:ac:25:7c:ce:c4:23:7a:75:e9:71:b0:
30:08:cd:be:07:08:a8:c3:db:a1:19:42:78:c1:92:
cf:f1:48:58:67:49:f1:d5:69:5d:bd:09:14:0a:2c:
9f:18:21:b3:dd:63:f8:98:72:96:26:ac:8e:2e:c8:
17:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:24:44:4F:7A:0C:B1:F7:4E:34:FF:0F:0C:38:DA:02:57:52:1E:DD
X509v3 Authority Key Identifier:
keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:54:bb:25:1d:cc:a0:2e:a6:da:3b:a5:86:15:7f:13:38:ac:
ac:59:ed:8a:b4:00:ae:9d:b0:b9:e9:26:ee:8a:96:07:4a:93:
40:5e:45:e6:a3:d7:bb:d9:ac:87:0e:4c:d4:7f:90:ac:4c:47:
d1:a9:5b:13:28:6a:c6:30:a1:78:66:98:59:56:12:24:7e:bd:
a7:a2:82:5f:1e:2e:fe:d6:bc:5b:2e:f0:e0:10:d8:41:b2:02:
43:ab:ca:e6:a2:6e:09:a5:ff:ff:37:80:27:6d:0a:8c:e9:c2:
1c:29:9e:43:2f:f2:22:78:61:ab:ba:a5:bd:d2:6d:d4:b6:e4:
3f:e0:31:b8:31:bd:15:da:d0:db:ff:f1:1d:50:41:4e:c1:05:
1c:a0:ba:b2:dd:96:57:2d:b2:a6:4e:d6:2f:d6:49:96:cf:48:
02:24:77:43:aa:fd:80:65:82:c1:00:58:fc:c7:19:89:a2:f8:
31:b5:92:6e:ff:04:63:fc:e3:f2:61:39:ac:73:98:af:7e:1f:
f9:e4:fd:46:9d:d8:ed:88:84:d6:68:1c:48:0e:aa:fb:a8:5e:
69:48:0f:74:c4:c5:e8:54:e8:18:36:e3:ad:61:57:20:31:16:
f3:d2:0c:6f:97:8e:53:12:12:59:50:fa:7c:b0:f6:97:5e:0b:
51:13:e6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:51 2025 by rpki-client