Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
File: jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json)
Hash identifier: QCevsU0HRCgVCmI/RkxYVdqykSfdl+9l5NwXmJmmWVw=
Subject key identifier: DA:BF:0C:8F:B8:D8:CC:3D:9A:B7:B1:22:A4:BE:EE:8A:A1:36:9E:5A
Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Certificate serial: 0194C42C95A9FCBBEFCA71C6989EBF3E05A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 01:00:43 +0000
Manifest this update: Sun 02 Feb 2025 01:00:43 +0000
Manifest next update: Mon 03 Feb 2025 01:00:43 +0000
Files and hashes: 1: gUp9W6gdzA4HeeDeBLYOgieiGro.roa (hash: lrN/LUw9qbgMyjQd+6zHffB/Q9YQH49/9bc6+74QbTo=)
2: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: Ax+0Z0HgVWKzj5HQAzJK72qxuJGtc67f553FNJzNpyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:95:a9:fc:bb:ef:ca:71:c6:98:9e:bf:3e:05:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Validity
Not Before: Feb 2 01:00:43 2025 GMT
Not After : Feb 3 01:00:43 2025 GMT
Subject: CN=dabf0c8fb8d8cc3d9ab7b122a4beee8aa1369e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:1d:82:34:40:81:8d:46:52:13:62:78:9c:
5f:86:58:74:2e:67:07:53:0e:d0:61:c7:c7:e2:fd:
8f:7f:27:fa:0a:7b:8e:fb:25:84:e7:46:49:09:a8:
30:8f:47:54:2b:f0:fb:fc:ba:0e:f5:7c:f4:46:06:
b1:7f:14:21:b9:01:70:28:be:9a:5a:bf:67:d9:85:
a3:eb:5d:39:00:02:f6:78:54:56:07:19:4f:31:0d:
69:dc:a1:23:d4:25:6b:f1:3f:be:2a:fb:8f:23:c2:
ef:40:44:d8:70:e2:41:6e:dd:11:88:8d:82:ae:99:
80:52:97:f5:8d:45:86:e8:3f:d7:1a:ef:15:b5:98:
cb:e4:01:eb:6a:3f:8c:8f:d4:0c:ca:62:cc:7b:04:
7b:73:2b:ab:67:fe:18:02:8e:7a:37:84:5d:e9:cc:
6e:54:c8:38:87:72:3a:62:d8:b7:78:8e:42:c0:34:
67:db:79:ea:49:b3:07:7d:9b:85:0a:f7:72:2d:1e:
da:8a:da:bf:52:07:d5:eb:35:31:6c:73:fa:ab:a5:
0d:10:f5:3e:98:51:f2:0e:ca:3f:22:9b:f9:1e:24:
70:d0:b4:64:2f:f1:57:f1:97:57:0b:a9:64:52:d1:
ae:ac:27:5d:f9:1b:dc:08:8e:df:99:82:0b:c5:33:
74:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BF:0C:8F:B8:D8:CC:3D:9A:B7:B1:22:A4:BE:EE:8A:A1:36:9E:5A
X509v3 Authority Key Identifier:
keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8c:95:ef:19:2e:9e:6e:e0:72:25:c3:ad:57:56:fb:5a:c9:
7d:62:dd:e6:1e:e9:d1:c9:bd:c7:8d:30:56:6d:de:b6:c6:e8:
41:6f:ed:ca:9f:f5:60:bc:02:76:5d:1b:b1:c6:b0:3c:c2:df:
9b:75:9d:02:e2:a6:65:35:b1:f0:04:91:a6:26:82:2c:87:67:
05:df:7d:c3:93:be:cf:70:ff:6b:82:79:3e:46:e8:18:97:a5:
5a:13:ac:6f:3d:63:cf:67:9f:17:68:c4:cf:d9:12:d6:bd:fc:
2d:8f:1f:68:1e:10:1b:6d:a6:c4:c5:08:8d:a6:6e:87:ea:16:
ce:66:8d:c2:14:b8:f8:ba:38:d1:44:0d:ac:26:02:de:d7:1e:
62:b7:be:52:1b:b9:47:3c:33:1b:8d:fa:10:9b:a0:80:14:d8:
85:91:89:66:c4:17:4f:72:db:bf:8e:70:9f:cd:57:93:fd:f1:
95:00:2c:91:60:c0:19:71:10:44:23:77:be:9a:0f:dd:f9:76:
bb:e4:3b:d2:79:d9:36:f3:4a:97:a3:61:9f:d6:6f:9e:d4:ed:
f2:41:d0:71:94:9b:88:67:4f:3a:7d:5d:67:55:f7:7b:13:41:
67:52:23:21:2f:41:04:79:08:43:34:37:c3:8c:01:20:f7:2d:
44:92:91:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:50:05 2025 by rpki-client