Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
File: Js9NU-1cCkvT_iQiAalmZVyAzA4.mft (raw, json)
Hash identifier: LHgLjl/iL56X2aimP0bzIvkClOKNQRZIWr/Z0xRRtKg=
Subject key identifier: 41:8C:CD:11:75:08:C4:67:35:89:00:01:91:E4:3F:76:F9:72:2A:7F
Authority key identifier: 26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
Certificate issuer: /CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Certificate serial: 019511D9D10504316F2C2459FABAA90F1D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
Manifest number: 10E8
Signing time: Mon 17 Feb 2025 03:00:42 +0000
Manifest this update: Mon 17 Feb 2025 03:00:42 +0000
Manifest next update: Tue 18 Feb 2025 03:00:42 +0000
Files and hashes: 1: Js9NU-1cCkvT_iQiAalmZVyAzA4.crl (hash: 7uKOSh/neT7NHvve1+f+nVC4RNB4h7CWE2gljIu7aZA=)
2: MWBaP-HM3jMW5Yk6FgbmWZoD5R4.roa (hash: lV/XwmUehafjM9liZirbeuWxwquOHdPb1htNl8VM0b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:d1:05:04:31:6f:2c:24:59:fa:ba:a9:0f:1d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Validity
Not Before: Feb 17 03:00:42 2025 GMT
Not After : Feb 18 03:00:42 2025 GMT
Subject: CN=418ccd117508c4673589000191e43f76f9722a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:67:f6:ed:91:27:37:01:61:a8:03:a9:33:
8b:58:37:95:34:b4:3f:b1:3c:ea:04:92:bc:e2:75:
e6:8f:bc:af:0b:27:6f:5b:e7:d1:f9:78:cd:b0:a4:
dd:d2:e8:2c:72:eb:9c:48:e8:2d:9b:a4:ef:22:05:
d6:07:51:a7:c1:29:20:34:4b:ff:1c:e1:7a:b2:b6:
1f:8b:f2:eb:fd:dc:01:14:1f:cc:79:67:6c:33:f8:
a0:31:bd:d3:fd:dc:dd:29:2e:f7:a2:da:71:4d:2b:
22:94:92:16:d0:e0:35:48:b5:7f:6d:ba:a8:47:67:
56:7a:53:e4:7d:9a:b6:a8:14:2b:d5:d9:70:82:b1:
10:44:0e:dc:e8:ae:66:c0:08:f6:c6:ee:c6:9d:a8:
e0:97:77:6f:15:97:37:31:f4:ee:0a:0c:b5:0a:60:
23:65:b5:21:1c:fc:29:60:3b:50:19:e7:78:6c:36:
7a:7b:71:8d:9b:1c:f3:18:1c:78:1f:e3:e4:fa:32:
85:29:a6:e4:87:0f:8c:cd:c6:aa:e3:d2:2a:95:af:
21:d7:42:2a:f2:98:9c:f1:e2:a8:52:b3:ae:d2:59:
8d:6f:b8:5d:6d:67:27:e0:3e:33:9a:51:1d:57:ff:
38:b9:f5:0e:02:0f:48:b6:3d:93:69:80:ac:1d:ed:
49:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8C:CD:11:75:08:C4:67:35:89:00:01:91:E4:3F:76:F9:72:2A:7F
X509v3 Authority Key Identifier:
keyid:26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1c:91:73:ff:b7:d1:cf:73:bf:4d:0d:25:c2:66:ed:8e:39:
b4:db:97:37:74:e5:0d:7b:6f:8a:7e:6b:f1:25:d9:20:d5:40:
f2:26:ae:91:b4:b6:8c:79:7d:ea:28:43:85:b3:88:39:65:fb:
5f:a3:61:23:3e:ac:78:e7:aa:dc:34:fe:a7:dc:fa:d5:61:93:
2e:da:d8:da:05:f3:40:5c:a9:a1:0c:c3:30:91:31:f7:f4:b9:
18:99:be:11:fc:7a:3c:8d:40:8e:f5:95:75:bc:29:4e:ad:5c:
b3:c0:eb:04:6d:39:58:a2:0a:a2:7f:7c:48:84:96:a8:b6:30:
bf:4e:d8:7b:07:8c:44:96:a5:86:5b:94:10:9b:02:cc:ca:c1:
ea:24:b9:19:57:dc:fb:75:eb:0c:bd:d2:13:eb:8e:35:e4:3d:
f6:02:68:9e:5b:ae:b5:27:a8:1a:8b:5d:93:ae:4c:e5:5e:e9:
ee:d8:88:42:d9:fc:9f:1a:14:18:91:b7:ef:fc:7a:54:eb:bc:
e7:28:37:cc:9e:de:b4:6b:c9:7f:fb:54:9a:2f:5e:4a:e4:a1:
2d:bf:cf:7b:17:78:43:a9:48:e5:1d:02:7d:fe:50:42:cf:9f:
4f:ac:e7:2d:a1:79:91:01:43:85:af:3b:87:11:ee:4c:aa:d0:
89:9c:9e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:07 2025 by rpki-client