Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: uhK5jbX9LKn+gE7CBgD6JaVaBvIgUdadmDFu2Aoa010=
Subject key identifier: E8:94:EA:BF:12:9C:59:04:1F:6B:4C:C1:E5:FE:E3:96:96:31:B7:91
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 0195127E3D4250461866D3C47BB2AB6BC82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 031D
Signing time: Mon 17 Feb 2025 06:00:17 +0000
Manifest this update: Mon 17 Feb 2025 06:00:17 +0000
Manifest next update: Tue 18 Feb 2025 06:00:17 +0000
Files and hashes: 1: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: cERNmp8jqagifxjMrPG5adE/KklEOJkFo5oprhvMs9w=)
2: hRPI0iSGl2IzeA7QH3Szt11HLAA.roa (hash: PPwH27Sg7uIDGa5QbdK7/mYmLXCSL9d4CnlOhCXOspw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:3d:42:50:46:18:66:d3:c4:7b:b2:ab:6b:c8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Feb 17 06:00:17 2025 GMT
Not After : Feb 18 06:00:17 2025 GMT
Subject: CN=e894eabf129c59041f6b4cc1e5fee3969631b791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:7c:1c:9d:be:32:64:ca:ca:85:2e:a3:24:
a0:b1:52:9d:21:dd:e2:b3:bb:b2:c5:29:16:f9:ce:
1b:9a:ce:63:83:2d:a1:fd:96:a7:55:74:8c:9e:40:
97:1c:16:39:65:5e:8e:6a:19:2a:35:c3:f1:c1:5a:
4a:dd:de:87:5f:63:03:8f:d0:00:f9:c7:ad:18:a1:
21:e5:17:c0:e8:b1:97:74:6b:11:ee:2f:ac:0a:89:
57:04:a3:fe:28:6d:2a:23:61:96:70:83:1f:e5:c7:
61:14:6b:79:f9:23:a1:8b:8d:f5:fb:eb:6d:42:ac:
c8:25:c9:80:64:b3:ad:ce:a5:32:01:9d:2d:7f:f2:
99:e2:ea:24:a2:e8:ae:0b:45:37:fa:36:1d:78:04:
05:71:45:3d:70:3a:01:dc:d1:0a:16:b2:c0:3b:da:
4c:29:bd:a6:6d:80:a7:4d:a0:f4:3d:7a:7e:99:77:
97:d8:dc:62:88:fb:28:d7:f9:e8:95:fd:de:31:89:
94:7d:fe:f1:2a:da:00:6e:8f:46:c5:dc:67:8b:f9:
c8:08:99:3b:67:97:16:43:18:ae:9b:36:b6:21:ad:
db:26:b1:9a:4d:3e:ca:74:4f:d1:06:bc:fe:73:d1:
84:a0:2f:26:46:bd:38:df:71:7c:b3:72:63:22:eb:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:94:EA:BF:12:9C:59:04:1F:6B:4C:C1:E5:FE:E3:96:96:31:B7:91
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:24:46:b3:48:a0:01:79:16:20:62:28:24:b7:c8:f9:e5:a6:
83:88:88:fd:6b:a2:90:14:44:10:dc:0f:c9:0f:b2:f6:dc:7d:
7d:20:1a:08:0d:ee:b5:9f:d8:da:2e:6b:d7:f0:1c:21:49:44:
e0:4a:62:01:92:c5:07:6b:84:b8:4c:79:e1:f8:42:f1:ae:64:
c5:94:56:ca:fd:4d:71:1a:32:8a:f5:88:42:f3:a6:64:97:cb:
f5:ae:b7:2d:b2:f1:36:44:58:83:7c:8c:d5:04:b1:84:fe:bb:
be:eb:22:23:7e:52:c6:dc:5a:5b:05:c1:25:dc:8c:d1:5d:f9:
23:f4:f6:01:37:f1:2d:fa:24:45:78:02:c9:c1:b0:03:61:06:
2c:c7:9b:d5:49:8c:83:0a:ca:59:07:fe:fa:6b:a7:56:fb:ee:
41:99:32:d2:46:f7:f2:bf:97:03:86:ea:de:b7:8a:f9:a8:85:
5a:7b:a8:72:95:e2:20:5a:fd:0b:88:f5:ae:6e:4c:ef:aa:5d:
c0:80:d7:a2:18:78:84:5d:c4:3f:46:2d:fe:3e:e6:2a:3b:cf:
b0:ce:6f:0d:ba:74:4c:f8:ec:12:14:b1:d8:51:4d:d3:3c:cb:
5d:6e:41:ad:30:f4:ae:ff:c9:e8:06:05:98:ed:9d:76:bc:aa:
6f:22:ea:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:07 2025 by rpki-client