Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
File: jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json)
Hash identifier: MSKF/ASClTRDV9Ql2ghxwqw4lBxLX2qNOpdUC4UcIQY=
Subject key identifier: 7D:24:73:24:36:B7:5B:70:FA:37:71:36:D6:1F:39:36:D5:73:08:01
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Certificate issuer: /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial: 0194C38807725E071F24DCF035A235AEECEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
Manifest number: 0B3C
Signing time: Sat 01 Feb 2025 22:00:59 +0000
Manifest this update: Sat 01 Feb 2025 22:00:59 +0000
Manifest next update: Sun 02 Feb 2025 22:00:59 +0000
Files and hashes: 1: Qc5cmd1l4zemEHfozY81Dk5Vg5A.roa (hash: 1e50whpvJStdUj8bNZvYvbgVa0jYFa3BmNTPWax7Fi4=)
2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: l3OGzTOYIoxnC/FaA/tSbeNfvsse6TI0yKteRPJj7pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:07:72:5e:07:1f:24:dc:f0:35:a2:35:ae:ec:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Validity
Not Before: Feb 1 22:00:59 2025 GMT
Not After : Feb 2 22:00:59 2025 GMT
Subject: CN=7d24732436b75b70fa377136d61f3936d5730801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:3b:d6:7b:62:3f:92:d3:09:cc:b5:f1:80:
b3:f6:e7:00:aa:a7:94:e5:16:1f:b2:3b:4c:db:82:
65:76:16:57:b8:df:42:f1:da:94:e5:e0:ba:cf:0c:
54:f3:2a:98:68:f1:b2:dc:fd:58:2d:71:ee:df:4b:
6e:78:d9:fa:d0:c1:db:44:09:72:5e:a9:3b:ed:a5:
72:82:35:1c:74:da:dd:b4:4c:6f:47:aa:24:68:9b:
43:1d:d8:27:87:da:a9:f4:0e:e4:0e:17:29:d5:85:
f5:ba:44:a4:7e:88:1e:aa:2c:cd:b5:f3:98:1b:72:
bf:7d:1b:d8:3a:1e:c8:27:ee:8f:6a:cd:39:72:65:
e2:3e:ca:f3:08:17:e0:ce:a0:e9:90:ce:d1:ee:2e:
a3:00:a2:31:79:ff:bf:ed:33:a8:ff:20:a6:7c:0c:
f4:2f:42:9c:36:d5:b8:08:2f:b2:12:b0:bf:47:45:
30:74:e7:31:c8:b5:48:fc:c9:35:fd:e0:a3:98:b4:
9a:70:5b:80:be:85:b9:31:54:86:95:31:db:b5:9a:
09:e2:be:35:cb:6a:a3:7a:21:0e:6d:f2:5e:ce:fe:
0f:73:e4:0d:e8:33:36:6c:78:20:17:40:8c:cc:3a:
46:7f:73:19:cf:4c:52:16:4f:46:f8:a2:69:79:78:
c0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:24:73:24:36:B7:5B:70:FA:37:71:36:D6:1F:39:36:D5:73:08:01
X509v3 Authority Key Identifier:
keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:74:88:bb:0e:f9:58:ff:d5:97:bf:6a:cb:13:5c:d5:16:0f:
e8:7e:06:14:94:6b:3c:2d:7a:0b:b1:5e:f7:d5:ef:47:ce:c0:
5f:f3:80:dc:f2:00:f6:0a:fa:18:e6:ef:28:0a:4b:0c:23:ac:
da:85:b2:44:40:20:dd:73:62:e3:ad:2a:c3:04:d0:aa:30:68:
38:e7:92:c2:58:18:34:1f:1e:53:ca:a0:05:db:b2:ff:da:9f:
9c:27:b1:8e:eb:07:cc:02:43:38:f0:82:1e:ff:00:28:d5:58:
e4:2b:f0:b8:91:de:03:70:f7:b5:db:d5:05:f6:a5:06:55:86:
37:37:f9:f0:ae:03:e4:ee:1a:ee:fe:57:02:6b:6b:0f:f1:7a:
78:53:56:65:5d:17:14:e9:11:4c:9f:23:e3:e2:24:ba:9f:c0:
86:f7:b4:d0:79:62:dd:31:af:4e:03:d0:42:ba:dc:68:13:81:
ed:98:01:9d:0d:0f:32:e1:40:02:b2:74:f1:6b:18:dd:19:74:
15:84:50:94:0b:46:3f:28:59:8c:f3:75:79:59:9c:67:ff:d9:
20:fd:08:c1:85:76:a6:8c:89:31:82:d0:b1:4c:a5:82:e8:89:
62:8d:89:32:a2:2f:e7:67:00:3d:e8:b3:19:f2:af:fc:58:8b:
ba:c0:e4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:41 2025 by rpki-client