Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
File: jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft (raw, json)
Hash identifier: 8pfn6WvrJyJgF6z1YZLIRHXHQdAYstCDLUD9FrEuAyA=
Subject key identifier: 1D:D2:53:DF:26:F9:F4:EA:22:E7:AF:59:3E:07:69:30:05:AD:72:B7
Authority key identifier: 8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
Certificate issuer: /CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Certificate serial: 0194C507CB7B97AC947FDF65885A65114538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
Manifest number: 0E28
Signing time: Sun 02 Feb 2025 05:00:09 +0000
Manifest this update: Sun 02 Feb 2025 05:00:09 +0000
Manifest next update: Mon 03 Feb 2025 05:00:09 +0000
Files and hashes: 1: ekK1eE5a32VySivOIvx2lxJnCKs.roa (hash: R1iwy2ZxPxih68xnTXgeurMmYbkKLoEgJqs5giY8O4U=)
2: jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl (hash: aPBQaziFcJtnE73bdeAlf5BGF0+xHcX9nzmlNR5LcFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:cb:7b:97:ac:94:7f:df:65:88:5a:65:11:45:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Validity
Not Before: Feb 2 05:00:09 2025 GMT
Not After : Feb 3 05:00:09 2025 GMT
Subject: CN=1dd253df26f9f4ea22e7af593e07693005ad72b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a2:8f:67:7d:15:c8:0a:d0:3e:49:3f:b9:c2:
aa:a7:ec:6d:04:6e:aa:e3:b7:2d:54:48:b6:7d:6a:
3f:f5:0b:d1:02:73:9f:7f:0b:38:2e:d6:a4:62:66:
bd:9d:62:37:54:0f:e6:e7:e3:04:b3:e1:ed:7a:a2:
da:1c:c1:8c:66:e1:cd:26:ab:8d:d6:fa:76:c8:75:
7d:bb:99:f8:9d:ab:9b:61:ec:f7:e0:9a:f4:b4:33:
cc:18:25:33:ab:31:7c:f6:b0:ae:dd:a3:88:38:5d:
8c:5e:fe:2a:c9:9d:91:dd:88:45:a1:3d:39:4d:b0:
57:b1:43:7d:05:b8:82:9f:fa:08:d4:2c:24:04:35:
79:8b:1e:88:a8:71:b3:1c:ef:8b:30:10:2c:42:f4:
df:4c:a3:2e:2a:76:34:c3:5b:7e:19:27:bc:3a:84:
1c:68:b3:0f:96:48:8d:40:08:ee:a7:7b:9b:6a:84:
64:91:74:94:2f:2c:57:c5:e9:30:bb:9d:ec:de:23:
c9:8f:51:f0:db:75:06:d0:ba:36:c7:49:72:f4:a5:
57:dc:b0:45:9d:8a:6b:cb:1b:0a:7e:4b:45:33:a9:
ad:18:df:8a:c0:58:dc:d2:b3:bb:64:5e:88:67:27:
6a:e6:17:02:db:8f:79:6a:c1:e5:bb:d2:fb:db:10:
79:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D2:53:DF:26:F9:F4:EA:22:E7:AF:59:3E:07:69:30:05:AD:72:B7
X509v3 Authority Key Identifier:
keyid:8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b5:41:92:41:df:c4:61:47:55:d3:e5:77:62:2f:93:26:0c:
b1:42:b1:15:8f:4c:6b:4f:b2:7a:cd:98:52:87:5c:57:70:d1:
32:f7:9b:3b:6b:21:69:ae:2c:98:78:f6:0a:00:47:ee:52:fd:
55:12:ca:0f:44:b8:9c:5d:90:3e:aa:54:19:21:23:3b:d6:96:
27:c3:06:da:5c:e8:5a:ee:61:82:98:83:b7:93:7d:8d:cd:94:
65:23:fe:dd:6d:29:b3:0e:14:f1:fd:26:58:ad:53:a7:c0:e3:
47:ce:47:36:13:aa:56:f8:4f:a7:68:6c:59:2d:db:58:2e:de:
e6:b5:2d:9c:0b:1b:5f:81:c2:4c:d4:b2:17:d2:20:84:af:39:
96:17:62:42:73:85:70:c5:5b:a1:67:92:7a:53:f9:6c:e6:4b:
cf:4b:60:ee:4f:db:d9:d5:64:ea:d1:ec:2d:9d:ae:a5:7f:82:
9f:61:0f:db:51:1d:68:d9:97:10:5f:0c:cb:47:ad:58:05:99:
dd:62:b9:a0:db:60:c3:8f:5f:2d:6e:18:90:d5:20:74:70:3c:
62:15:61:2e:93:a8:b2:04:f0:25:4b:f3:17:42:2c:67:a3:a2:
c5:0f:ea:31:b1:0a:cf:55:01:49:a1:d1:02:02:3a:06:29:b8:
cb:bc:cf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:42:00 2025 by rpki-client