Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: itg2qVE56vT+KycFrlcaKbdPFVFiKfo2jtmjrEs3sGc=
Subject key identifier: A3:B8:69:FF:16:79:7D:FF:EE:F6:C6:A6:1D:88:54:F0:98:3F:33:4F
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 01951210A422B03F41ED4F18F143F96711D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 04:00:35 +0000
Manifest this update: Mon 17 Feb 2025 04:00:35 +0000
Manifest next update: Tue 18 Feb 2025 04:00:35 +0000
Files and hashes: 1: 5n1EQkcmRaucyrGX88Dgx7YQ19k.roa (hash: t4Vnu9tnDcftty/GlXBTfwRRN3QnsJxvx0/8WS/aC10=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: FCAmeydaPs626oolzcmiMm1dKPZdvb3aKFy7YstF8Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:a4:22:b0:3f:41:ed:4f:18:f1:43:f9:67:11:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Feb 17 04:00:35 2025 GMT
Not After : Feb 18 04:00:35 2025 GMT
Subject: CN=a3b869ff16797dffeef6c6a61d8854f0983f334f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:08:eb:88:f4:b5:4f:43:e9:fa:38:69:1c:
a1:37:55:e0:10:24:a1:3f:55:0a:49:86:6b:f7:b6:
e9:64:97:98:d0:cf:ea:9a:92:20:64:1b:6d:2d:d3:
17:d1:53:ff:4a:11:4d:4f:50:02:53:bf:f0:13:5e:
9c:b4:9f:68:40:6b:c7:40:3a:e3:6b:b5:4b:55:41:
4a:14:5b:3b:6f:1c:a7:7e:2e:0e:9d:72:05:73:29:
ed:7d:61:99:42:8d:52:c1:89:fe:97:31:58:70:22:
b4:fe:c8:11:e5:c9:c9:dd:aa:15:a9:75:31:6b:fb:
f2:9f:4d:a6:ce:2a:b4:67:d4:d5:fc:0b:b4:75:4b:
b1:8b:1c:e5:1e:16:01:56:e5:e5:b9:bf:03:49:79:
d2:75:47:6f:6d:8e:ff:1e:44:b7:28:5a:ee:f2:0e:
2a:bf:d6:7b:0c:97:41:72:4a:06:08:b4:ca:bd:d2:
a8:bf:34:02:4d:01:0c:c5:05:97:0e:ea:bb:d4:92:
4b:15:81:4e:43:42:72:4e:f3:94:9b:0a:0e:66:bd:
59:53:20:65:bc:87:82:2e:95:e2:1f:e1:3f:a8:9c:
88:85:57:49:bf:f8:cc:41:dd:90:a5:02:40:e0:87:
73:ec:4f:f1:72:f3:b1:f5:ff:86:d5:00:8b:13:a0:
23:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B8:69:FF:16:79:7D:FF:EE:F6:C6:A6:1D:88:54:F0:98:3F:33:4F
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:78:7e:37:1b:d0:d0:7f:23:e8:08:e8:a2:f3:4b:c9:83:20:
46:e9:83:2d:b9:e4:d2:be:61:06:c5:4f:aa:bc:71:ba:c5:a2:
39:f7:c0:03:80:26:17:96:c9:75:9b:0a:12:aa:aa:f6:51:fe:
a3:c4:5a:30:80:9a:b3:14:cf:47:86:11:3e:bc:33:91:a5:10:
67:40:46:de:20:6d:77:f7:7e:4a:4f:95:ed:93:57:aa:13:a2:
52:cc:ce:18:29:8d:77:96:25:30:6a:83:9e:a8:23:7b:71:c8:
9f:bf:dc:fb:7f:cd:0d:62:f7:59:0b:ec:4b:32:95:1f:04:1f:
f6:d8:ae:c0:fb:5a:0d:5e:cc:ca:77:26:4a:13:c3:52:8b:7f:
9f:da:e9:8f:83:8e:1f:24:7b:a6:00:40:66:2d:56:6b:27:c9:
2d:0d:39:a8:36:c3:0b:69:94:44:9c:3f:d6:50:c9:d9:ea:08:
9d:e4:cd:fc:79:4e:8e:84:48:02:37:88:03:df:f7:4b:cd:d4:
d5:9d:12:a0:55:da:91:51:a3:58:9a:47:a8:90:47:90:3c:b6:
eb:17:4f:4f:8c:e0:28:38:51:eb:6f:12:5c:dd:c0:e9:10:45:
02:02:46:75:ab:70:dd:05:c4:97:9b:24:82:cc:63:91:1c:1c:
2c:46:46:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:56 2025 by rpki-client