Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File: JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier: TnVnouezQbopyf1swFVyV931lFCypgaBbydk+/rDGho=
Subject key identifier: CD:63:61:14:46:2C:2F:DC:9E:EA:6F:CF:8E:AC:4D:85:53:DA:CD:27
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer: /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial: 0195116BD7B5611B6FD84EDC0778B8CB1FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number: 0DE9
Signing time: Mon 17 Feb 2025 01:00:34 +0000
Manifest this update: Mon 17 Feb 2025 01:00:34 +0000
Manifest next update: Tue 18 Feb 2025 01:00:34 +0000
Files and hashes: 1: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: mVBjTjY2QAHCmn4SY5vJgoyUUl6IJPLWjkG8bMjdJAE=)
2: OG_A4kIfGMsNQjuMmYxD7_p2pL4.roa (hash: Xfk2o4ht2zMg9IMU5TSnOEAuY38Y9WCQbPUHWVQ3Uic=)
3: kAKuIYXg1bp7KYEaGGpYw_p_ZEA.roa (hash: rN2Ict4bzybwIS6kDp0XozP6rV4PW6e1BfkoB7rQg6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:d7:b5:61:1b:6f:d8:4e:dc:07:78:b8:cb:1f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
Validity
Not Before: Feb 17 01:00:34 2025 GMT
Not After : Feb 18 01:00:34 2025 GMT
Subject: CN=cd636114462c2fdc9eea6fcf8eac4d8553dacd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:06:6e:aa:f8:3e:0c:50:6f:8e:8f:bc:05:
19:d2:a6:aa:7d:fd:98:4a:1b:27:d6:b5:e9:15:25:
e6:a2:7a:c3:91:8a:58:7e:e7:e6:55:14:12:09:1b:
3c:cc:ae:2e:3c:4e:d5:15:37:54:99:a6:41:b8:5e:
89:92:11:05:90:b7:0b:92:c8:ca:15:f7:9e:3d:2e:
a9:f2:c5:cc:d6:18:7d:60:52:91:89:ab:1d:15:0f:
9e:23:0d:18:cb:f4:57:fa:e5:e4:ef:64:27:67:78:
43:7d:7d:f4:8e:62:93:c4:38:2b:d0:af:e4:44:f4:
ec:c6:de:a1:fa:a6:e2:b6:b0:d1:01:06:d0:ff:3a:
03:99:86:c5:f1:51:7b:35:59:9b:e1:7e:af:78:08:
5e:f9:c8:6b:da:54:03:4a:9a:a3:f9:db:a8:d5:94:
0c:29:63:cf:7c:14:59:47:a5:f4:2d:e4:3b:ad:bc:
2b:53:6a:27:75:fb:85:4a:2c:08:7d:7d:93:64:b0:
62:31:4e:34:e2:9c:71:70:a9:a7:ae:8c:1d:02:75:
12:f4:d6:63:ff:2d:cb:d3:40:bd:fb:e4:40:73:1b:
75:e3:f2:6a:40:ed:ec:93:c0:1e:6a:1e:7b:6c:ff:
30:69:d9:f2:7e:35:13:6a:d8:34:f3:9f:c7:5f:0d:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:63:61:14:46:2C:2F:DC:9E:EA:6F:CF:8E:AC:4D:85:53:DA:CD:27
X509v3 Authority Key Identifier:
keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fe:05:5d:11:2e:47:3c:81:9e:ea:8c:a9:9b:5e:02:2a:e8:
ba:60:fb:c5:ab:e2:bc:fa:39:1a:00:85:99:5f:34:a7:bb:02:
57:aa:7a:d5:8c:41:89:99:a8:00:78:3b:bb:20:3b:ea:b5:5f:
41:dd:2c:7a:ff:a4:f5:b4:b9:3d:f4:e4:98:ed:a3:20:a8:75:
f5:bb:df:79:e5:73:cf:3c:46:db:da:9d:20:cb:b4:ef:1e:51:
73:84:8b:fa:a2:62:5c:f6:f2:21:53:59:0e:b1:65:1f:bf:90:
8a:b5:b3:12:0d:b1:42:70:b5:99:59:e2:ff:47:89:77:99:2e:
c9:f9:1a:6d:de:f6:8d:7d:7c:b8:1a:19:82:4f:2e:06:23:ff:
66:98:c8:ed:c6:39:fa:da:91:19:b7:08:28:f5:5d:bc:eb:db:
32:3a:a0:cb:40:0f:77:34:5b:9d:e6:1d:44:e6:94:ea:76:73:
42:6a:95:eb:14:91:9d:af:6d:86:d6:6e:aa:89:1f:fd:d0:41:
ea:d8:76:7b:81:ed:54:79:a6:ed:f3:52:4e:f4:37:50:aa:17:
c4:26:74:49:20:51:79:c7:7f:17:9d:c4:25:b0:ba:7c:62:04:
85:7a:6f:c4:73:dd:94:a4:62:06:e9:4a:ff:bf:91:19:7c:51:
e9:f5:63:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:17 2025 by rpki-client