Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
File: jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json)
Hash identifier: Ljay+QTLkA6LZue2reo7FyYJ4udGJSyJ/EVwcLwIZ9Y=
Subject key identifier: 44:5F:84:1A:9A:C9:C7:6B:48:44:FF:F1:D6:CC:6A:B1:73:6C:DA:F1
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Certificate issuer: /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial: 0194C42C27954CABC4D73DD7BD66234695F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
Manifest number: 142D
Signing time: Sun 02 Feb 2025 01:00:15 +0000
Manifest this update: Sun 02 Feb 2025 01:00:15 +0000
Manifest next update: Mon 03 Feb 2025 01:00:15 +0000
Files and hashes: 1: K-6vxGr3EkVKtgWk3f7FXppAHWU.roa (hash: OqJwTUOjnt783umU3SvwJ0pGKHDe69wtlF63xIDInso=)
2: K7Su5tLQd2NMZMj9NBaGujGCyFc.roa (hash: mUfUc0m1Q5fvSqMO5jRLGU7xEPj6/17vBXx5MZ0j9fY=)
3: eE7CtoiQAT2pLGSZ83z4bGyxlms.roa (hash: 0jzCXVU/84NgsdnKR1p45oVJW0ZBdnomnSJlnmwgNt0=)
4: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: 7UwsueNeTmkE3MVMMeII2Qludb/6sfTlqDwEM9uASPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:27:95:4c:ab:c4:d7:3d:d7:bd:66:23:46:95:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
Validity
Not Before: Feb 2 01:00:15 2025 GMT
Not After : Feb 3 01:00:15 2025 GMT
Subject: CN=445f841a9ac9c76b4844fff1d6cc6ab1736cdaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:bd:56:cc:e5:78:92:04:15:58:5a:c7:6b:
81:4b:e4:2f:92:f1:88:77:50:3c:4d:f7:14:cf:c7:
b5:d4:6d:ca:7e:df:5e:7f:4c:a7:1a:6b:1f:ba:fe:
98:6d:cf:8c:06:e4:1e:15:fc:a1:bc:ab:ba:52:4e:
57:24:9c:ae:46:a5:46:87:52:be:33:c7:2b:6c:ed:
b8:28:7b:bf:a7:00:58:ce:c4:10:1e:62:a4:b4:49:
d4:a2:18:bd:20:21:d2:17:a3:8c:f5:8d:19:05:46:
16:aa:02:c8:ab:67:6c:9d:91:a3:ba:4e:08:f0:81:
ce:0c:ec:6d:36:19:93:55:4e:52:a4:a8:25:c4:79:
02:cb:94:c5:dc:52:9a:8a:13:88:bb:d4:50:a9:02:
d7:cc:6b:cc:c0:ac:54:6e:46:02:fa:ef:f6:13:34:
89:ec:56:be:a9:71:ce:34:68:5d:d9:1e:42:d9:c1:
8d:30:57:78:7e:3d:37:98:c9:22:42:37:a2:5c:5a:
1b:7d:03:e2:33:ad:2f:09:63:dd:80:96:43:e6:64:
14:fd:08:cd:7b:a0:b9:6e:44:bd:e2:5d:b2:f2:43:
05:00:89:78:35:08:e0:0e:81:cf:22:9e:41:ee:47:
9e:74:85:b9:3c:5a:38:a5:f8:fa:8f:9c:f6:2c:08:
f1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5F:84:1A:9A:C9:C7:6B:48:44:FF:F1:D6:CC:6A:B1:73:6C:DA:F1
X509v3 Authority Key Identifier:
keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:34:03:83:6f:6a:ac:5a:4a:fd:2e:89:fb:2b:87:80:17:db:
db:ad:08:73:d8:b6:d7:95:84:47:9f:77:37:59:9e:ad:c0:e5:
48:fb:70:22:e7:92:80:6d:b9:bf:c5:9f:c8:4b:50:eb:ab:f0:
f7:1b:24:99:a4:ef:43:34:73:8a:a1:aa:e9:09:d1:35:4f:c1:
cc:d6:49:7d:37:98:0a:1a:d4:50:37:14:ff:3a:bc:d0:b0:e3:
30:ce:dc:d7:d9:6b:cd:5a:c6:b1:42:f8:8d:73:e5:3b:ef:fe:
69:49:4d:6d:35:de:f1:d0:c4:38:2c:10:0e:4e:01:e8:14:83:
57:ab:be:e5:2e:21:10:21:51:ec:2d:42:09:58:aa:c6:b5:9c:
41:c4:95:12:de:d5:91:35:39:33:38:a7:de:bb:8a:bd:c7:4a:
d0:a9:e8:91:6c:f2:1f:a0:3f:af:3c:44:94:4a:38:de:f1:42:
95:f7:d2:22:31:f4:40:20:a9:87:66:ef:ee:02:5e:61:a8:db:
4f:51:70:4a:d5:85:50:f6:37:56:a3:a5:cd:b0:9f:63:23:02:
de:78:e4:19:c7:b4:a2:32:eb:11:eb:f5:43:51:47:d9:a1:6b:
90:26:34:ad:9f:79:04:40:c4:de:13:f0:76:fa:16:0e:8e:e9:
9f:68:c2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:48 2025 by rpki-client