Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
File: jsIqh2Rb03Xm2yqguBbooGEOelY.mft (raw, json)
Hash identifier: 8+9MEy/zXIGD1eI9eqeHg7qJ+Dyuj30ji3YvIrh60gE=
Subject key identifier: 5C:E5:01:FB:C2:25:42:95:E1:09:D1:41:8E:B0:7E:47:88:2D:A5:0E
Authority key identifier: 8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
Certificate issuer: /CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Certificate serial: 0194C4D0DC125915C5B2ECA5C3462A616030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
Manifest number: 04C7
Signing time: Sun 02 Feb 2025 04:00:09 +0000
Manifest this update: Sun 02 Feb 2025 04:00:09 +0000
Manifest next update: Mon 03 Feb 2025 04:00:09 +0000
Files and hashes: 1: jsIqh2Rb03Xm2yqguBbooGEOelY.crl (hash: TSTquTBaOXRbxhna3/bHU0cxNUXllfOjBw3Hs7TWonc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:dc:12:59:15:c5:b2:ec:a5:c3:46:2a:61:60:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Validity
Not Before: Feb 2 04:00:09 2025 GMT
Not After : Feb 3 04:00:09 2025 GMT
Subject: CN=5ce501fbc2254295e109d1418eb07e47882da50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:35:a0:0c:5a:a4:62:b9:69:93:0e:f5:09:
49:c7:52:df:68:be:6f:b5:3a:eb:1a:3b:1c:7c:58:
c9:19:61:ee:d8:f7:b5:cc:e1:86:fc:17:d2:e4:62:
f9:a4:e1:fa:62:5a:f8:38:f5:25:8d:d1:26:6f:85:
d0:77:f8:5d:66:c0:86:b2:1f:3a:20:db:73:aa:50:
6c:a3:44:ca:7d:3f:3b:5d:f3:aa:b7:cc:19:d7:d1:
6a:ce:d0:eb:a5:0c:47:ed:15:db:6c:a9:21:9e:ff:
88:82:2b:07:f6:1a:a0:ec:c6:c3:05:6f:40:d1:e8:
9d:c3:2b:fd:7b:da:8f:56:40:b1:3d:71:29:09:a7:
55:49:68:e4:0b:68:ca:06:71:5f:30:1e:52:84:f1:
93:71:db:e7:8a:ce:3c:13:79:a3:aa:d8:6c:40:1a:
68:a0:59:ed:2b:1c:61:2e:dc:c0:f0:0c:a4:c2:f5:
51:3c:d4:c4:e6:f2:0d:5c:1a:97:39:5d:37:d1:25:
e7:49:02:ba:ac:25:90:8a:b7:e7:15:55:70:c9:e6:
7e:6f:32:0b:79:b4:af:1f:73:e5:2e:78:01:d1:69:
e5:0e:4a:50:18:fe:78:df:d8:5f:67:5a:d7:48:f7:
62:9b:58:8f:c7:d4:a0:44:7f:16:6f:cd:d5:12:51:
95:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E5:01:FB:C2:25:42:95:E1:09:D1:41:8E:B0:7E:47:88:2D:A5:0E
X509v3 Authority Key Identifier:
keyid:8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b6:46:49:e0:15:df:0a:5f:15:27:4b:12:90:47:c5:f6:0f:
93:69:0f:52:f1:bb:74:12:38:48:44:6e:d2:d4:b5:dc:be:47:
69:b8:ab:05:08:4c:65:01:63:1c:7e:93:71:63:b9:83:3b:b5:
e2:28:54:b5:e5:da:88:aa:5a:9d:ae:96:b8:ff:6f:da:91:81:
4e:2b:13:ba:2b:1c:71:1d:ac:59:e8:f5:0e:70:f5:37:aa:82:
dd:a1:08:af:06:12:dd:7b:54:c2:6c:1c:1e:47:c4:f5:b3:e9:
0a:ed:1f:f5:ca:24:66:f9:40:70:3e:c5:47:0b:14:5e:87:87:
87:9d:57:9d:e0:c0:75:3c:76:b0:7f:4d:86:47:e1:e1:eb:4f:
e5:07:ab:d3:2c:ae:2f:ed:1b:8b:b9:f8:5e:c9:23:b2:9f:67:
63:81:e6:fd:50:c5:7d:b7:27:6f:09:1d:84:8d:8c:91:d4:ac:
2f:73:d4:67:87:4a:1e:a0:07:f8:5f:c7:65:f6:c9:39:45:85:
e5:e1:5d:0d:81:2e:7d:aa:e4:f6:85:23:bd:00:cb:81:4d:c2:
2d:84:e2:f8:5b:b3:52:04:5b:5f:e5:81:86:1d:68:98:9d:12:
c6:d2:b7:49:56:9f:8e:91:03:7a:3e:ea:af:15:12:7c:dc:1c:
89:b1:8a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:54 2025 by rpki-client