Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
File: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft (raw, json)
Hash identifier: i2kPg/4lVi3/+AcGq/C2C85uppUC6N/IT4Tnbw6r2+g=
Subject key identifier: BD:AA:AD:CC:8D:7C:C9:FD:AF:92:64:19:2D:56:09:04:BA:8F:BD:BB
Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868
Certificate serial: 0194C463B0F133C055E5848619A47A5224A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
Manifest number: 017D
Signing time: Sun 02 Feb 2025 02:00:55 +0000
Manifest this update: Sun 02 Feb 2025 02:00:55 +0000
Manifest next update: Mon 03 Feb 2025 02:00:55 +0000
Files and hashes: 1: NCxg4iDnSPo7sNDZogY6EAQ1qnU.roa (hash: a1KXZCaEoxN1UkOcv0YA7zkHr19aSLSv8QON/lo/20Y=)
2: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl (hash: WBbfkTa7YGhtSgDSB4tH6IL5PuXQPRo1H6dD/6KH7no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:b0:f1:33:c0:55:e5:84:86:19:a4:7a:52:24:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868
Validity
Not Before: Feb 2 02:00:55 2025 GMT
Not After : Feb 3 02:00:55 2025 GMT
Subject: CN=bdaaadcc8d7cc9fdaf9264192d560904ba8fbdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:22:58:12:ca:fc:79:99:cd:68:6c:03:32:7a:
f0:14:c1:9e:29:88:e0:20:c9:2c:9b:30:5d:dc:ad:
6f:47:de:9a:ce:62:e4:62:02:cf:23:5c:aa:e0:4f:
d6:0b:3c:66:b1:99:23:a2:b3:56:86:18:09:7b:31:
82:39:ea:d3:db:20:e5:a6:3e:cf:1b:cf:d2:0c:d0:
96:c7:f0:5f:21:a7:17:a9:37:3a:16:66:15:a9:89:
95:81:8d:30:6f:a3:c1:32:cf:8a:bc:fe:87:a8:f2:
12:54:5e:ef:48:06:79:f8:93:0f:f1:c5:e0:c9:ae:
24:fb:57:4e:50:8c:0b:4b:19:6b:a0:a6:c4:ea:40:
42:29:83:1e:7c:cc:d8:6e:ca:8d:c9:18:54:a6:66:
a5:54:28:27:c2:1f:1e:59:e5:a1:20:ca:a9:fc:38:
6e:b9:5d:6a:42:06:66:12:ae:06:1c:c8:da:3d:f3:
ea:73:79:01:de:91:36:a7:d0:d7:37:b3:2e:cc:21:
c0:02:c2:7c:00:13:b3:b4:a8:a0:c2:9b:e6:6e:1a:
e9:89:ef:cb:4f:50:58:fb:5b:44:26:e3:a2:e6:38:
c9:f5:9e:7a:c0:2b:3f:45:50:33:cf:69:1b:54:67:
9d:99:da:2b:73:b1:1d:a3:99:f4:33:23:0e:ac:b5:
58:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AA:AD:CC:8D:7C:C9:FD:AF:92:64:19:2D:56:09:04:BA:8F:BD:BB
X509v3 Authority Key Identifier:
keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0f:ba:ad:b4:9a:26:39:b5:b2:88:c6:5b:f7:b7:37:ce:dd:
cf:78:16:18:1d:dc:27:9a:6c:b3:9c:21:d2:71:26:1b:96:d9:
a5:fa:a1:dc:b8:9c:76:84:a9:db:34:55:fb:62:ba:8d:3b:e5:
8e:df:c0:c8:03:c4:eb:7b:b4:b0:4d:73:fd:46:aa:cb:ed:9b:
31:e4:4d:e6:b4:cb:41:93:7f:36:1b:40:08:95:e6:bb:0b:6f:
e5:89:65:ec:e6:2b:4b:0e:5d:3e:9a:9e:eb:5d:b4:61:b8:1b:
eb:0d:e1:3f:07:b7:94:fa:2f:43:a2:cb:2c:56:10:00:52:22:
dd:ed:27:85:69:a8:3a:07:c4:c8:69:bb:71:86:e8:b9:13:4c:
ee:96:7d:26:6f:3d:a9:9d:27:fc:67:bb:d8:38:60:7c:60:12:
ed:f0:18:5c:98:27:ef:7c:c5:3d:b8:b2:f9:7a:72:ba:5d:34:
b0:0a:38:4a:5c:c6:1d:b4:aa:f3:d8:94:bc:ea:07:12:5d:7b:
fa:fd:18:07:1b:fa:e8:e8:ee:3e:92:17:87:ee:d7:cd:7a:dc:
74:b1:c7:cf:2e:8f:0e:b0:33:8e:7a:f9:f7:d6:fd:21:be:49:
4d:ed:e3:12:28:6b:1b:bc:95:f1:44:4e:69:f3:73:e0:f1:d9:
92:64:b5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:12 2025 by rpki-client