Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier: ezDaaOnZyTl/rPhl7BctKGE4ytFPSMInY8LT4WfKl54=
Subject key identifier: 68:23:6C:AC:BF:ED:B8:AB:5D:41:5E:49:1A:DE:E4:46:90:56:06:DA
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial: 019511A322F7970DCBB3CC53B9990A4B070C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number: 103B
Signing time: Mon 17 Feb 2025 02:00:58 +0000
Manifest this update: Mon 17 Feb 2025 02:00:58 +0000
Manifest next update: Tue 18 Feb 2025 02:00:58 +0000
Files and hashes: 1: U32_Sc22WvD7Fv16LTG7iyrHJKk.roa (hash: HDMDgZcXReJr66n8qO4cBkBwOaGGNGz+zcAfJfe/HW0=)
2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: wOOqqjcP1KgJiDDovD0YRt74ri9ZIkwxwnFykZblis0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:22:f7:97:0d:cb:b3:cc:53:b9:99:0a:4b:07:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
Validity
Not Before: Feb 17 02:00:58 2025 GMT
Not After : Feb 18 02:00:58 2025 GMT
Subject: CN=68236cacbfedb8ab5d415e491adee446905606da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:5b:90:f7:20:9a:13:8c:0d:52:dc:48:41:
0c:e8:8b:e1:36:43:4a:d6:4a:1c:bc:57:3c:28:ae:
d4:8a:85:6a:63:2c:b8:5e:c3:17:31:78:eb:0f:c2:
29:93:bd:98:05:ef:fc:98:c5:cc:15:80:99:af:72:
62:37:e3:58:0a:6b:7a:49:4a:f3:97:00:ed:1d:e8:
9e:8e:94:15:23:c4:64:75:95:96:14:d0:ae:a9:c8:
a2:65:25:e1:31:2f:8d:47:9a:f0:e2:ee:39:f2:5d:
84:44:53:6d:ac:60:1e:33:67:9c:d0:86:eb:3f:d0:
46:3a:c7:4e:d4:96:bb:cd:cc:76:40:62:4b:f4:36:
90:37:2d:21:b3:5d:5c:b0:e3:a6:32:25:38:1a:1a:
a7:b3:a1:b2:d7:84:3d:b4:d9:16:ad:b7:2b:19:c8:
51:c6:6d:bd:a8:4f:5e:f5:49:c2:1e:4b:40:b0:b4:
fc:88:ac:41:77:34:c1:05:d8:1a:0c:1c:0d:74:a0:
52:e4:4d:3f:38:c9:ba:e4:1b:20:84:6b:7b:12:df:
6c:10:f8:b1:7b:c1:52:fb:0f:7e:12:9c:5f:ef:63:
82:93:7a:08:99:9a:06:f2:65:33:5c:2d:d0:91:dd:
d2:af:c8:dc:7c:64:21:27:9a:f0:a8:45:db:58:86:
56:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:23:6C:AC:BF:ED:B8:AB:5D:41:5E:49:1A:DE:E4:46:90:56:06:DA
X509v3 Authority Key Identifier:
keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b8:b9:23:64:2d:88:4a:7d:19:9d:78:af:8e:05:3f:0c:45:
6a:a7:18:68:4c:dc:7e:ac:99:ce:04:67:40:12:ad:c2:6f:f6:
cb:d5:c4:0a:95:e0:dc:86:a7:c5:a0:14:71:3c:9a:da:8e:0c:
64:78:ff:54:b1:97:63:46:cf:a1:bb:8a:70:20:82:b5:ad:18:
68:08:f5:94:f6:69:8d:09:7b:a2:5d:07:dd:eb:9f:c2:8d:7f:
ba:53:b1:af:4f:e2:a9:c5:18:1b:56:bd:6b:e7:1b:33:46:04:
d9:74:c3:d9:48:f4:43:89:ee:64:10:7f:a0:c2:cc:4a:49:10:
8b:31:4f:79:4e:45:38:9a:e1:e4:dd:35:b4:1b:52:e9:9b:22:
2a:f5:7e:ff:d0:59:01:9f:52:9b:08:a3:96:b1:c8:e7:e0:47:
1a:ba:a1:61:68:f4:94:89:33:a9:12:55:22:68:91:ba:6c:2e:
6d:e5:51:5f:3a:3f:56:15:1a:d8:64:78:2b:3b:e0:22:cf:a2:
ca:e0:e2:3a:23:17:f9:b9:9e:07:d0:de:4b:b2:fd:57:3a:8c:
3e:94:2b:3a:4e:58:21:0a:33:52:d5:89:6b:e1:f0:16:4b:67:
2f:6d:62:51:00:7e:cb:08:7b:ab:f1:63:ed:ff:c5:35:34:88:
af:ee:f2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:05 2025 by rpki-client