Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: 7hHloiEkBMUadqXSXM3CuFF855AoaI/YBdg9qDCfEqs=
Subject key identifier: 75:C2:DF:CF:98:69:AD:4B:2C:AD:B1:6E:8B:52:C3:7D:C9:C0:E4:7A
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 019511A2991A9A85EFBF57ED665ED1710B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 13E9
Signing time: Mon 17 Feb 2025 02:00:23 +0000
Manifest this update: Mon 17 Feb 2025 02:00:23 +0000
Manifest next update: Tue 18 Feb 2025 02:00:23 +0000
Files and hashes: 1: IhekhU6m6siADVsydLLUojGt3d4.roa (hash: Ie3OUaBFXbHVHoRv6fa60x6E6g/3rnXK7E53n8a6clg=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: w5hLybsXMC0oCF2Y1Gvd6oPN3Zf1V8+TPjJyrw++Ul4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:99:1a:9a:85:ef:bf:57:ed:66:5e:d1:71:0b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: Feb 17 02:00:23 2025 GMT
Not After : Feb 18 02:00:23 2025 GMT
Subject: CN=75c2dfcf9869ad4b2cadb16e8b52c37dc9c0e47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:84:e9:b9:51:e0:f8:c4:17:d4:08:e5:5e:
a4:25:af:bc:e8:f8:fe:27:1c:3a:cf:64:46:f0:2a:
cf:9f:76:0d:ec:e6:f0:75:53:e5:0e:aa:49:36:d0:
2e:7f:02:c1:9f:22:da:62:ed:44:c2:c0:45:6b:3b:
2c:67:c0:53:89:fa:62:4a:29:58:10:3f:37:cf:8f:
db:30:cc:fd:74:fe:43:e1:1c:11:ac:85:26:36:bc:
ff:06:45:b0:4c:a3:e3:eb:59:6f:45:78:9a:a9:4f:
26:b2:b4:4a:cf:e3:e8:84:0d:13:80:59:b0:d1:0b:
e0:e8:91:7a:57:af:06:97:89:c4:f5:c5:ca:e4:f7:
48:fc:31:46:01:78:16:e2:6f:2c:2b:1e:30:85:51:
89:4d:9c:3d:cd:54:45:3d:0d:7b:e7:83:b7:de:52:
fc:ee:5d:6e:0d:f7:b6:93:a6:4f:6d:a9:2e:b1:eb:
95:7d:5c:35:1a:07:e8:4a:a6:17:ca:41:07:d9:0d:
45:70:00:79:44:6c:bc:dd:05:0e:9a:34:1e:33:e6:
80:03:5b:3e:dc:01:76:23:45:68:6f:f3:a2:d5:0a:
d3:81:8a:78:63:0d:cd:71:d3:ab:16:e0:7d:c0:ea:
3d:72:af:ce:02:c9:63:ba:a6:f3:a0:36:3a:aa:7e:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C2:DF:CF:98:69:AD:4B:2C:AD:B1:6E:8B:52:C3:7D:C9:C0:E4:7A
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9c:59:9a:e1:c8:44:ee:2e:14:35:63:40:d4:b1:1a:9e:a8:
6c:ac:32:85:32:12:5e:20:5c:4d:07:d8:5d:70:33:e3:18:6f:
dc:2a:64:2f:38:9d:85:d7:03:e3:8a:36:bb:bd:17:95:06:56:
73:88:a0:8c:47:45:4f:49:b9:41:68:c9:ac:81:9e:3c:70:6b:
e0:f0:2f:fb:54:b7:8f:a7:d3:32:4a:45:ba:36:14:5a:ef:51:
ab:72:8f:c6:84:95:80:fd:77:34:a7:70:75:a4:0a:a3:97:c5:
e2:29:7d:88:ba:22:10:98:bb:1c:dc:9e:69:51:26:56:c9:3a:
bc:10:27:6e:55:8f:7c:b3:3f:1c:89:f2:49:63:ab:20:44:ff:
81:94:c5:bc:a3:b6:30:c2:60:e2:64:6f:e8:36:b7:0a:db:6f:
a6:0b:25:91:b9:d6:c8:b7:2f:ce:99:50:f0:2d:f2:6b:64:4d:
d0:ce:2d:f0:01:28:d5:3a:3d:07:ae:ef:b1:e9:ce:05:bc:d1:
7d:cc:80:2b:d3:4c:c3:7d:d9:c6:c2:28:00:fb:ee:15:15:63:
6e:de:75:1a:db:ad:fe:5f:53:ce:9b:59:58:1c:9d:85:d8:08:
fa:98:8a:7c:00:c2:76:fd:76:d8:af:1b:c8:6b:a4:7e:1a:ec:
da:03:82:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:36 2025 by rpki-client