Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: nRRrfHwpZ50jh4IenBHO84xjeUUEsOKgZ2CxXcUvVhQ=
Subject key identifier: A5:D3:6F:19:EF:0C:25:73:B0:19:DD:09:15:85:79:8C:FD:2C:5C:4F
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 0194C463696225714730C14C8F0297F67015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 45
Signing time: Sun 02 Feb 2025 02:00:36 +0000
Manifest this update: Sun 02 Feb 2025 02:00:36 +0000
Manifest next update: Mon 03 Feb 2025 02:00:36 +0000
Files and hashes: 1: 2a4uGqXqRLFwxkrNzW_s6-qnGXE.roa (hash: goHZck25hCom6tNMtTpOVgal0/zlXu42ccbA4cfzVE0=)
2: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: hwf5vYiKFtKxuCMc0O5GAXHcm+vqSg1I+wpWvIMOnbw=)
3: kFOw0UjGI7qti8qa1uAUEOsP1Y0.roa (hash: 3Ka4QMk7D3J6EIhtUeiuaJXa58kFmA+7bZN+m672Gvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:69:62:25:71:47:30:c1:4c:8f:02:97:f6:70:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Feb 2 02:00:36 2025 GMT
Not After : Feb 3 02:00:36 2025 GMT
Subject: CN=a5d36f19ef0c2573b019dd091585798cfd2c5c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:00:80:e7:77:39:3e:5b:61:97:b7:7c:1c:
d6:53:cc:ec:6f:c7:2e:f6:72:43:b7:82:23:af:92:
f1:39:61:ac:44:66:70:a8:11:e1:30:c3:da:86:e3:
b4:c6:22:80:5f:45:b0:73:b6:93:2b:40:18:72:3e:
2d:00:17:76:53:cb:f5:34:2f:b8:c2:26:40:5c:d2:
ad:62:48:39:48:62:98:52:89:7f:5e:b3:cd:5c:b0:
9e:85:04:df:c7:71:ff:3a:ae:dd:be:84:8f:51:57:
d2:0c:6e:e8:ee:af:04:38:fd:49:67:2f:23:f7:50:
d0:dd:46:58:33:3e:3f:f5:16:92:d7:0b:ba:80:71:
61:f2:46:64:aa:ff:7c:36:bb:4d:a7:15:55:6a:0e:
f1:6e:47:e6:da:3b:bc:7e:d9:e1:b9:d0:db:89:f8:
59:cf:f5:ec:61:36:53:ba:b6:96:b2:db:36:33:f7:
ae:92:a5:3b:a9:64:d9:d9:d7:65:00:49:5f:80:57:
69:d2:55:95:1b:0a:de:f2:8c:59:3e:56:3a:f6:e5:
fd:ab:a6:17:9d:be:41:13:65:bc:05:c5:89:ce:2b:
91:cd:ac:99:a1:c9:61:e2:f4:1e:a8:45:df:63:b9:
01:a4:b1:0a:68:ae:c4:c9:9b:01:bb:14:19:f8:fe:
8e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D3:6F:19:EF:0C:25:73:B0:19:DD:09:15:85:79:8C:FD:2C:5C:4F
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:76:a0:ee:b7:a6:50:88:91:0b:76:4d:7c:11:1b:a3:73:ab:
e9:5a:1d:f4:5c:db:03:aa:bd:e6:20:6b:bb:3b:2c:15:2a:9a:
c2:5d:e5:b8:ea:9f:c2:bf:8a:15:c1:1a:04:90:ec:6d:06:00:
9d:68:93:5b:ea:78:43:14:97:6b:5e:4d:fe:70:f1:ab:b7:57:
de:c4:40:be:cb:46:8f:ad:62:e6:1f:50:55:be:ae:68:aa:6d:
da:8f:98:f2:90:c5:27:9a:a8:a2:c8:11:23:9f:97:7a:8d:43:
2e:79:eb:e3:02:90:64:96:35:d1:9c:85:ad:6a:39:1a:a6:d9:
3f:c5:95:d8:ae:e7:7e:a8:9e:20:33:75:45:3b:a2:02:ac:c1:
dd:e0:19:e7:a6:b3:39:f6:d4:d5:cc:c4:63:eb:db:fc:bb:e8:
20:fb:ba:4f:9c:ef:e3:30:c7:e9:24:f0:9d:7b:df:14:cd:20:
ec:32:df:5e:8c:93:d3:ba:fa:95:32:df:1a:ec:57:61:bf:50:
63:6c:aa:7e:93:01:63:a0:04:13:bb:03:fd:6e:15:bd:41:43:
10:8e:33:21:46:92:aa:df:0e:b7:77:63:3c:89:a0:b1:da:c6:
0f:73:89:49:8a:ab:4a:f3:03:87:0b:5e:6b:74:58:80:3d:91:
95:19:47:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:09 2025 by rpki-client