Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json)
Hash identifier: 6bvvlEzXqRwu153mi+iSFXZSPGd3ciR0GbWmCMQSJdI=
Subject key identifier: 9B:48:5B:D0:A7:37:79:48:8D:E4:FF:D5:42:31:56:F6:18:2E:F2:32
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 0194C3F65E4E4DB3DB4162C5EB664B17734F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
Manifest number: 1437
Signing time: Sun 02 Feb 2025 00:01:30 +0000
Manifest this update: Sun 02 Feb 2025 00:01:30 +0000
Manifest next update: Mon 03 Feb 2025 00:01:30 +0000
Files and hashes: 1: A8xcoz0CxVsQV59nDwDYQFIr0lo.roa (hash: DYANfqFgGBJIwz26B4ECCOb3ofMn4dBZTXHVwjQaWQ0=)
2: ihKky7iErFMr7G88FOVCnj74bps.roa (hash: j7P5G19jRMsSzlS7Lh1Jjj17xJpONrJFrA53mphipiw=)
3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: 380rwYGLuBshvgTPBGKvM3SVnil7iFDhjnkFGDPAPsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:5e:4e:4d:b3:db:41:62:c5:eb:66:4b:17:73:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Feb 2 00:01:30 2025 GMT
Not After : Feb 3 00:01:30 2025 GMT
Subject: CN=9b485bd0a73779488de4ffd5423156f6182ef232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f8:c2:7b:05:ad:4a:1b:33:30:a0:ce:71:64:
c8:1d:33:8f:f9:27:8b:a6:de:34:38:cf:4c:f3:d3:
d3:31:c0:8f:c6:64:93:fe:df:43:f1:67:74:60:61:
d8:b0:8c:e7:72:cc:71:87:9e:7a:14:b7:1a:54:c2:
6e:bd:1a:9a:26:13:8d:b7:85:be:96:ae:0e:db:ac:
e3:35:06:12:34:e3:c3:bb:cb:c6:1e:27:75:ff:7a:
9a:5b:91:ce:8f:f9:7c:96:13:6b:b1:fe:e2:90:6e:
58:27:c7:ed:4c:05:90:c6:7e:15:c8:2c:eb:a0:53:
9c:4b:ca:f0:32:cb:53:0d:ef:b0:49:3c:ca:51:eb:
c8:81:e9:73:9f:1d:bc:60:b6:8f:2a:42:15:0e:75:
f8:b7:4e:4b:df:ff:06:d4:fb:96:ed:4d:bb:46:bb:
02:82:41:cf:14:4d:04:b5:f0:7f:85:a4:57:df:4f:
79:85:fc:d7:5a:6d:30:7c:c4:14:f6:01:16:43:05:
c0:ee:90:17:56:73:98:a6:7b:33:fa:38:f1:ed:b5:
5a:a4:26:46:54:8f:aa:82:0a:ad:00:65:03:2e:65:
c1:31:ae:3a:4c:03:3f:56:4a:fc:a1:4e:ef:99:55:
bf:09:f4:d2:b8:fb:4a:6f:da:32:cd:83:f1:11:ef:
61:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:48:5B:D0:A7:37:79:48:8D:E4:FF:D5:42:31:56:F6:18:2E:F2:32
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0b:f3:50:c6:5e:f4:16:4f:86:75:7a:98:2e:80:a1:24:ea:
e9:dd:1e:dc:39:fc:0d:d3:6c:3f:07:ad:09:0e:19:71:99:4d:
79:00:f5:6c:a0:b6:67:a8:ee:81:4e:54:79:20:00:fc:2f:77:
f2:9b:4c:18:04:4d:09:05:bd:21:a2:4e:1e:6c:58:a6:04:66:
93:8c:6c:59:17:c0:a5:d6:23:a7:76:b3:d9:47:f7:f4:f2:db:
69:8d:1c:11:30:56:42:be:9d:59:fa:42:62:46:92:15:f7:d2:
04:6c:db:de:b0:c6:c9:a2:b6:df:18:61:c0:dc:20:04:be:8d:
a9:97:70:62:e6:65:70:be:6a:8b:57:2e:51:57:4b:ab:1c:98:
65:11:36:8a:62:f9:b3:0c:85:49:78:4f:19:00:ff:0f:09:28:
b7:8f:ae:71:92:ed:ec:fd:9f:de:7c:49:8a:3d:48:10:e5:b8:
7d:a3:18:f5:b5:a6:c9:ba:1c:5a:37:15:ad:11:fc:21:9e:6e:
42:69:11:ae:78:3d:fa:3b:c7:07:00:3f:de:a1:f4:56:dd:c9:
b1:ea:03:49:f4:ee:2e:8b:a6:92:35:69:57:c1:9e:a3:6b:a9:
39:a7:e1:52:2c:c0:21:5c:78:44:06:07:69:a2:7d:6d:73:ae:
56:32:86:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:41 2025 by rpki-client