Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
File: jDzPk_fIB93gQgrVSGrinrXcdfk.mft (raw, json)
Hash identifier: Peh7gHs4zGuS/fN37/AvX51v538gh18OwSZjVBMGmvE=
Subject key identifier: A4:07:DA:D5:61:15:5C:67:9D:0F:82:5E:4C:DC:40:9C:D2:7A:73:BC
Authority key identifier: 8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
Certificate issuer: /CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Certificate serial: 0194C42C0FCB501776E2C36D536C74AB618A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
Manifest number: 1431
Signing time: Sun 02 Feb 2025 01:00:09 +0000
Manifest this update: Sun 02 Feb 2025 01:00:09 +0000
Manifest next update: Mon 03 Feb 2025 01:00:09 +0000
Files and hashes: 1: jDzPk_fIB93gQgrVSGrinrXcdfk.crl (hash: LSXywCbto2N6ZvwfsDP59sZnhvzzSMaTWRKyQy5yyiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:0f:cb:50:17:76:e2:c3:6d:53:6c:74:ab:61:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Validity
Not Before: Feb 2 01:00:09 2025 GMT
Not After : Feb 3 01:00:09 2025 GMT
Subject: CN=a407dad561155c679d0f825e4cdc409cd27a73bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:f5:69:a0:69:21:9c:19:aa:5e:06:63:5f:
cc:12:14:5b:27:78:f5:17:89:29:12:16:7f:51:d7:
04:a3:a1:54:f0:3f:75:2f:58:21:15:65:49:4d:c1:
6e:5b:99:ff:c5:4e:6e:b3:a4:8d:ce:1f:f0:95:c5:
ac:21:c3:60:6f:51:48:de:af:3f:e7:af:9e:46:eb:
9e:d4:7c:8c:99:c4:e7:6e:0d:ae:6e:a8:03:25:56:
1b:8e:32:fc:1a:d3:49:56:5f:55:d8:ba:df:55:5e:
cd:b0:6b:93:f6:43:27:0b:a8:2b:cf:26:69:b1:d1:
9c:04:0d:29:76:7b:22:20:c9:02:00:6d:bc:f2:03:
d2:b3:ac:4b:37:7b:38:23:d4:b7:d6:5e:d0:4d:c9:
9b:36:5d:b6:59:42:8d:3f:3b:57:86:66:55:ac:6c:
d9:8f:87:09:fa:7a:8a:98:34:b9:cd:8b:54:f9:ac:
fa:bc:93:d1:6c:4f:20:67:76:9d:ec:0b:f5:e2:fb:
54:58:4f:fe:5b:aa:12:f8:c5:12:22:d9:bb:91:90:
e4:d4:0b:1c:de:c1:0f:55:b4:d5:b1:c7:2e:4f:12:
db:47:3e:59:42:33:df:ba:4f:c3:7a:ac:8e:7f:c9:
41:4a:44:fa:11:9d:91:35:be:17:58:dc:48:a3:9b:
64:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:07:DA:D5:61:15:5C:67:9D:0F:82:5E:4C:DC:40:9C:D2:7A:73:BC
X509v3 Authority Key Identifier:
keyid:8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:20:09:42:fb:37:ba:e6:9d:42:c1:a5:86:39:55:13:a6:88:
1d:f5:08:e2:d2:33:c0:14:79:d1:e8:c7:26:f7:52:94:63:57:
1e:5b:18:0d:ca:01:b4:9c:2c:44:d2:c5:c4:bb:e3:4d:af:e5:
c0:4a:ca:fa:6c:64:0c:79:06:ca:f7:8f:80:02:35:7a:72:b1:
49:f3:56:11:98:0f:32:ab:b7:6b:dd:fc:36:8d:c3:21:38:e7:
55:8b:88:bc:39:10:c6:a3:3e:27:4a:ed:f9:b5:0d:c2:79:2c:
df:51:91:1b:a1:c3:eb:fb:58:e7:e5:96:2f:7e:9d:2d:78:83:
e0:4f:d4:19:ad:9f:78:35:ba:91:9b:00:da:96:a2:a0:e6:65:
ff:d4:44:f2:1c:14:7c:cd:5e:a6:01:a1:20:1c:e9:e4:51:82:
d5:74:94:a7:76:72:a0:8c:13:72:c0:a2:5f:3b:01:1f:1c:b2:
c8:65:35:83:35:8c:ef:b8:43:a5:23:95:38:c9:bc:55:b5:c9:
ae:e3:20:21:6c:38:13:49:27:c9:c3:4a:59:63:31:bd:b2:15:
6e:59:1e:de:45:7b:58:db:da:43:f5:83:07:20:d2:a0:57:c0:
8b:6b:cd:89:02:dc:9d:0a:9e:fd:47:bc:c9:3b:4c:aa:8d:64:
6a:04:b1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:13 2025 by rpki-client