Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: qF/gwW1reat1CN/rVvH1lS0YpHk9PcZbnByQBYlJG1s=
Subject key identifier: 62:B8:A1:DE:F8:AC:FA:B3:E2:9C:C6:AD:42:18:74:32:EE:3A:EF:A6
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 019511D9917249AD7A6707BDB95D4A5717A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 093B
Signing time: Mon 17 Feb 2025 03:00:25 +0000
Manifest this update: Mon 17 Feb 2025 03:00:25 +0000
Manifest next update: Tue 18 Feb 2025 03:00:25 +0000
Files and hashes: 1: KGShywXbD4wB1PLsBTNT01VDQKY.roa (hash: hBh9EiIl2TqddpHizY/LGkFYV3Ncy9Yws3g05SvVJTg=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: sX2rxTyPBTeA7I+rrvoyxdYpm2OAy7BN1MZQ4tLbg/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:91:72:49:ad:7a:67:07:bd:b9:5d:4a:57:17:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Feb 17 03:00:25 2025 GMT
Not After : Feb 18 03:00:25 2025 GMT
Subject: CN=62b8a1def8acfab3e29cc6ad42187432ee3aefa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1b:19:b2:9e:a8:0e:a9:1e:4d:4d:eb:aa:1c:
8f:83:30:de:2e:ba:30:d2:c3:e2:e2:c1:ae:97:9c:
c0:10:1f:0a:7f:a2:fa:d8:50:9b:c4:41:81:c5:57:
02:41:ea:72:91:71:3f:36:4a:ab:21:ca:f1:1d:76:
d7:4b:42:67:62:0c:0c:c2:da:d8:f3:30:6a:e6:f6:
85:26:19:de:fe:4e:7b:ae:5b:d2:73:ab:4d:b7:df:
4d:4a:b8:8f:c6:f9:2b:99:ba:df:79:59:bb:b9:dc:
7f:30:c2:ad:67:f8:3b:fe:25:b1:1e:e2:1c:47:b2:
40:9b:a9:75:21:d0:3a:b9:dd:34:69:44:fb:17:62:
8e:11:9a:d1:f9:b7:15:6a:18:c0:bf:3b:03:23:6c:
da:3a:f6:41:c8:fe:fd:21:f0:e1:3e:38:d9:21:38:
10:48:6e:62:37:c4:87:1d:ea:49:5f:b7:09:7d:71:
c5:6a:dd:82:8d:9e:bb:03:64:b2:3f:e5:43:2a:96:
ac:78:7c:ac:a9:7f:40:6f:f1:fa:23:54:af:a1:41:
42:69:28:0c:9e:e3:fb:04:96:88:5a:66:af:8c:b8:
b2:72:8b:94:6c:e8:fe:8a:7f:31:12:76:69:f6:d5:
d3:5c:83:39:34:2c:81:71:33:51:7b:70:07:62:2f:
e5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B8:A1:DE:F8:AC:FA:B3:E2:9C:C6:AD:42:18:74:32:EE:3A:EF:A6
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5a:00:4d:5f:ec:05:32:21:8d:ee:0f:54:92:2a:6b:dd:6d:
8f:6c:62:45:8a:a2:13:5a:78:8d:2b:68:d2:4b:5c:f1:5d:09:
e8:1c:ca:e8:82:b0:3a:c8:d7:dc:37:22:6b:69:5e:23:31:4e:
7a:7c:a1:80:70:d4:b8:51:e3:18:50:36:dd:20:c2:8d:15:40:
82:51:aa:83:d2:c5:0d:b7:45:3f:40:a0:30:8b:d7:ce:c7:14:
66:ab:86:dd:09:fa:97:eb:99:a3:b1:26:09:9d:b0:37:e8:35:
98:a0:c6:ac:a9:49:22:c6:8b:d2:9f:1e:4c:34:68:15:94:69:
2e:97:6a:af:7d:38:33:f6:93:b0:d4:b2:be:1f:e5:95:59:9e:
5f:70:8b:36:f3:c6:d7:2a:f7:6a:f6:96:a7:12:26:a0:66:ef:
ac:60:7e:95:db:84:0f:9b:39:80:d3:a5:d7:41:c4:de:b4:0b:
7f:b9:b7:ef:c4:68:44:1c:fa:aa:e1:e6:1d:00:e4:4b:46:71:
64:12:e0:71:cc:75:7c:f9:e6:c7:fa:a7:64:11:be:96:16:2e:
fb:98:f8:de:04:55:80:7e:41:6d:18:6d:c5:85:ee:06:ba:99:
eb:24:7b:d6:b7:6e:6a:fc:b7:d3:d1:f8:e7:ef:fa:3d:4f:88:
40:c4:2b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:51 2025 by rpki-client