Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
File: JiditzviJrFxmZQSYlrMcnAkQ0M.mft (raw, json)
Hash identifier: DmHqPeYDoSWRw6qC94L0rUvcgmwTa4u94oo8MROiJGw=
Subject key identifier: 37:39:EF:7B:27:EF:44:63:DA:94:EB:1B:1A:D3:F4:6E:55:E7:86:FE
Authority key identifier: 26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43
Certificate issuer: /CN=262762b73be226b171999412625acc7270244343
Certificate serial: 0194C5082BE7E1248505E301D31EF0245D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
Manifest number: 7D
Signing time: Sun 02 Feb 2025 05:00:34 +0000
Manifest this update: Sun 02 Feb 2025 05:00:34 +0000
Manifest next update: Mon 03 Feb 2025 05:00:34 +0000
Files and hashes: 1: JiditzviJrFxmZQSYlrMcnAkQ0M.crl (hash: WHhHrCFZis3RoeCftILYMBxLPjs0jx3lmTW6oQtmYtg=)
2: SW0NmgN1MfeImMBLkTet_og-k3A.roa (hash: NuBlZaeVdzU+Qx3vpR2cHPvzMF2hd3qV04JT0+dx0Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:2b:e7:e1:24:85:05:e3:01:d3:1e:f0:24:5d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262762b73be226b171999412625acc7270244343
Validity
Not Before: Feb 2 05:00:34 2025 GMT
Not After : Feb 3 05:00:34 2025 GMT
Subject: CN=3739ef7b27ef4463da94eb1b1ad3f46e55e786fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7f:17:59:71:b3:e5:d7:35:00:9d:90:3e:20:
bd:a4:42:51:ab:87:d8:73:d4:33:f3:f2:17:2b:0e:
bd:c2:03:bf:e4:15:e2:57:cb:d9:a6:76:ee:7d:96:
d2:dc:ed:9e:c6:97:f5:60:2e:3c:34:fc:78:6f:f6:
3b:8c:a3:1d:ad:77:b0:2b:e0:ac:ac:63:4e:ed:66:
c7:7b:5f:2d:43:6d:92:f1:ba:89:e7:de:32:8a:e3:
30:78:71:52:06:cd:03:f1:84:73:46:70:7d:69:9d:
e3:a7:ce:e0:3e:1f:a3:b8:44:df:f1:fc:a5:b8:ed:
24:9f:a0:ad:55:b6:78:07:50:f5:41:c9:64:15:72:
70:fd:75:4a:ae:01:de:d2:b2:9b:2d:7a:ce:ab:3b:
14:2b:70:52:d6:6f:7f:b4:2a:a2:d5:24:a7:70:2e:
74:8d:37:e8:38:6f:e5:28:b3:b5:7b:1f:b0:a1:6f:
33:6e:eb:b9:3f:69:1a:ca:a3:e3:02:d4:e8:f1:53:
9f:5e:a4:ae:15:88:86:d5:31:b5:b4:1e:5e:c5:2b:
f0:bf:7a:e1:17:41:57:72:4a:1b:c2:33:17:d1:9d:
e8:c5:ce:17:aa:05:30:ab:2b:ba:fb:c9:44:28:8c:
3c:bf:09:54:79:ca:42:76:78:c9:7c:92:ce:48:10:
f6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:39:EF:7B:27:EF:44:63:DA:94:EB:1B:1A:D3:F4:6E:55:E7:86:FE
X509v3 Authority Key Identifier:
keyid:26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:47:37:10:ac:01:2f:32:eb:02:e3:ab:58:a4:32:12:85:96:
71:9b:26:79:05:bd:1b:d7:bc:d5:b7:81:d9:ca:46:a1:73:78:
16:70:af:6b:6f:98:cb:d6:3b:53:26:5f:d6:94:2b:e7:c6:b0:
47:00:60:b9:32:0a:1c:0a:d0:01:f2:68:49:ba:31:a2:79:c3:
8c:c7:b3:15:ad:de:01:d1:c1:81:d7:0e:83:f1:91:4a:72:13:
23:44:02:bf:5c:23:d8:cf:fe:e1:25:78:89:3d:c4:f2:9a:db:
73:ac:76:84:23:d3:50:92:00:47:90:c8:be:cc:16:7c:01:e0:
59:e5:92:38:2b:e0:1f:0e:62:0b:aa:79:ce:df:0b:f7:eb:9a:
65:0e:bf:72:b5:9c:db:06:39:eb:86:3d:47:e4:89:f7:d2:0a:
b0:15:26:87:25:2e:16:ec:5f:ff:b5:ab:7c:e1:57:c4:7a:e3:
aa:67:49:86:62:96:c8:7f:06:37:c4:32:38:79:ae:7d:94:33:
2c:45:78:52:83:8b:84:e3:2e:7f:29:8a:2d:87:d7:c4:6c:84:
ad:1d:98:fb:47:d7:46:ca:b0:8c:ea:2b:d6:25:c7:20:b1:92:
ba:0f:60:54:0a:87:9e:07:30:ca:5e:a1:cd:b0:22:f1:14:59:
9a:5e:40:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:44 2025 by rpki-client