Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
File: JegnfR_qtSOH6rJvjcypJgwlij0.mft (raw, json)
Hash identifier: wPsfaERhS++jIN4LFU+RLb8dMX2sqrXkSLnGzYbDNTM=
Subject key identifier: 2C:E7:51:E8:0C:75:2D:C4:2B:85:64:3D:51:2B:72:CB:12:56:69:13
Authority key identifier: 25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D
Certificate issuer: /CN=25e8277d1feab52387eab26f8dcca9260c258a3d
Certificate serial: 0194C3BEA995279DA4D9F09F212FF7E1C168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
Manifest number: 0734
Signing time: Sat 01 Feb 2025 23:00:39 +0000
Manifest this update: Sat 01 Feb 2025 23:00:39 +0000
Manifest next update: Sun 02 Feb 2025 23:00:39 +0000
Files and hashes: 1: JegnfR_qtSOH6rJvjcypJgwlij0.crl (hash: ZqS2iDNHbdz7IjRef+nkL0JT1S3Mere81AG1uIe9wsg=)
2: QJ-q4jY57XBPftq8mgfLyBux4KM.roa (hash: pgWu6jyyJTF/Q2y1mtLzh6qQQVUyFCHc0G6KZW7xtps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:a9:95:27:9d:a4:d9:f0:9f:21:2f:f7:e1:c1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e8277d1feab52387eab26f8dcca9260c258a3d
Validity
Not Before: Feb 1 23:00:39 2025 GMT
Not After : Feb 2 23:00:39 2025 GMT
Subject: CN=2ce751e80c752dc42b85643d512b72cb12566913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6b:22:73:4d:c3:58:9a:4a:a7:8a:56:3a:6f:
38:55:79:d9:b2:0a:25:2b:20:51:43:e9:c5:c9:64:
f2:b1:81:d6:e5:c9:39:ec:fc:05:ca:64:0b:18:ca:
c4:b9:b7:32:2a:a5:b4:8e:3a:51:a2:69:bc:cd:08:
1f:28:f8:9b:9e:e6:12:82:0f:2c:c8:13:4e:14:15:
c1:6f:8e:af:c5:6d:c4:cd:66:cc:ad:cc:a5:d0:3d:
dc:47:3e:01:f7:b7:ab:f4:2b:a8:f8:0a:41:14:95:
ff:4b:c3:95:7f:0f:b2:ea:d2:dd:c3:44:1d:e5:ec:
7d:c6:8a:25:e8:00:39:ac:22:63:08:20:e6:67:73:
9c:e8:b9:f4:4e:16:24:d1:fa:24:02:a8:07:72:17:
da:31:88:b2:1f:21:65:83:0c:46:90:33:f8:ab:4d:
92:df:8d:04:b2:5b:d4:73:cf:a6:e6:f7:62:27:18:
d7:2e:20:c0:76:ea:5a:a0:af:bb:a7:e7:2f:1b:45:
69:73:64:97:92:e7:c1:eb:2f:6c:b4:48:32:3e:f4:
30:7d:04:61:d9:14:d8:48:8c:10:59:9b:74:e2:57:
1c:c5:42:45:eb:9e:10:f8:96:cc:db:b8:f7:f2:41:
ed:4d:e3:3f:72:11:73:0b:9a:1f:54:18:da:8e:24:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E7:51:E8:0C:75:2D:C4:2B:85:64:3D:51:2B:72:CB:12:56:69:13
X509v3 Authority Key Identifier:
keyid:25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:db:20:16:cc:46:2c:fc:7b:c1:74:1c:ae:5b:9d:a5:18:75:
9e:ef:5b:d7:b2:84:b1:73:02:cb:0c:d9:37:89:8f:d7:f5:fb:
3b:b7:66:9b:70:e8:a6:f4:62:db:84:18:1b:7a:d1:82:68:2d:
39:41:8a:9f:19:6c:13:03:80:89:d4:a0:90:1b:56:8b:c6:b6:
bd:63:da:ce:67:2a:ad:86:b1:55:fd:20:0f:75:fd:57:34:96:
cd:20:00:3a:6b:b4:c9:f1:6a:b5:65:57:90:e0:95:ae:11:75:
0c:d0:b7:52:f7:f6:59:42:0f:77:c0:57:9d:42:3f:5b:43:f7:
0c:78:82:e8:d6:12:ae:7b:fe:e4:ff:39:bb:37:66:15:ca:63:
16:06:2b:c2:46:8f:f0:7c:5e:e3:e3:42:91:37:01:e7:01:f2:
9f:13:c8:c4:31:6e:56:68:a4:66:d4:a6:c4:5a:4e:57:c3:1c:
61:77:91:9a:b5:7b:59:c0:c5:cc:a1:71:31:d2:34:5d:7a:a9:
24:ad:4c:a1:c0:19:62:d1:c0:38:48:a6:32:28:bf:92:80:13:
8a:cb:29:7e:2d:1e:28:11:cc:b9:0a:33:25:e8:1c:6c:ff:ae:
a9:65:82:ae:1c:4e:63:ff:67:bb:d6:1b:ca:33:3d:e8:b1:c4:
59:5c:86:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:25 2025 by rpki-client