Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
File: j_3661qU6wJ-yDivUw88ELObHNk.mft (raw, json)
Hash identifier: sSnMMWVRBU4dg9yb7wP9ps8XYQ9wgBnjn3eB3Vzn3ts=
Subject key identifier: 6A:04:05:60:8F:19:15:3A:3D:F2:D5:3D:9D:B8:FC:7A:0D:6D:9D:67
Authority key identifier: 8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
Certificate issuer: /CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Certificate serial: 0194C507E2F7EA49D0F397173921176A7D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
Manifest number: 1246
Signing time: Sun 02 Feb 2025 05:00:15 +0000
Manifest this update: Sun 02 Feb 2025 05:00:15 +0000
Manifest next update: Mon 03 Feb 2025 05:00:15 +0000
Files and hashes: 1: hH1lu6qi54xeYgPUuzVlSLVdXOk.roa (hash: 9Lqd0U++MW4wXcTAm0AGtBobzDUdjZXw+rDwnRqe5sI=)
2: j_3661qU6wJ-yDivUw88ELObHNk.crl (hash: BkYMzk8Zsd2wtt5mM2sSdDhzaodKfXo8I7zydtg9TA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:e2:f7:ea:49:d0:f3:97:17:39:21:17:6a:7d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Validity
Not Before: Feb 2 05:00:15 2025 GMT
Not After : Feb 3 05:00:15 2025 GMT
Subject: CN=6a0405608f19153a3df2d53d9db8fc7a0d6d9d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:66:d0:0a:9d:5a:90:a1:29:42:8d:70:d3:
e6:01:bd:ce:be:d6:71:40:40:70:0f:3c:48:80:a3:
47:7f:8a:4a:3c:31:45:0d:45:58:0f:1d:4f:d2:fa:
17:85:bd:0f:ca:fb:57:49:09:a3:1d:ee:53:7e:f6:
8d:29:9a:d3:46:23:da:e0:fa:93:9a:33:73:d6:cf:
cc:12:4b:06:de:9c:9b:54:e9:a2:43:ec:8e:ec:d0:
77:6b:f0:62:6b:d3:3b:3d:4d:9c:40:be:17:ab:c0:
70:f3:82:33:67:ba:a6:9b:45:43:c8:ac:b6:e4:d7:
ed:81:b8:fb:8b:f6:6d:13:09:4e:c9:a5:63:62:ea:
46:b3:3a:c6:93:06:4a:c0:de:ef:73:af:85:fa:b0:
19:f2:c7:7f:bf:9a:54:10:f3:e4:2c:e7:0c:16:aa:
9a:12:13:08:f5:b0:7c:24:ae:f2:52:fa:c0:b8:a5:
fb:d8:57:52:ba:66:89:ff:11:ff:0d:9e:af:9d:ad:
d3:d4:17:82:37:1b:52:7b:54:d5:46:f5:25:32:86:
83:99:74:11:6b:41:ca:de:47:3c:c0:a6:d9:ae:8d:
54:e5:df:9d:6f:f7:eb:a9:71:d5:11:b9:43:85:49:
2b:63:f2:3f:a6:aa:00:b0:26:29:64:b2:60:56:5c:
1b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:04:05:60:8F:19:15:3A:3D:F2:D5:3D:9D:B8:FC:7A:0D:6D:9D:67
X509v3 Authority Key Identifier:
keyid:8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f9:a1:6b:c9:5a:b1:5f:e0:09:aa:8f:85:a9:e8:d1:31:48:
c6:e1:69:90:86:f8:58:b2:f1:6b:58:91:9f:78:86:8c:86:c7:
f6:1a:1a:4a:09:55:1a:3f:63:b9:94:21:7d:38:82:dd:09:80:
13:8b:7b:3b:58:e6:17:0b:34:30:f2:ce:49:40:04:92:84:28:
cf:bb:f1:21:2e:b7:6a:c5:12:ad:f9:1e:48:ae:33:90:ba:bf:
58:c2:6d:f6:0b:c2:d3:64:8f:e9:26:da:7a:ed:1a:1f:af:1c:
89:4d:b6:8f:b3:a4:d8:a7:de:36:56:4b:8c:9a:34:40:e1:98:
45:2e:a5:7c:eb:1a:ce:6c:dd:25:74:d1:de:24:d6:a5:c1:9b:
22:eb:df:44:e5:e9:c5:d8:ee:08:99:e6:9a:cf:66:b0:11:c5:
7d:dc:e4:84:22:2c:3d:ab:26:12:d4:75:ec:5b:30:14:7e:5a:
75:35:f7:7d:c6:10:6d:bf:24:26:a8:22:4a:dd:3b:ef:e5:68:
fc:d3:e9:41:f9:1c:e7:03:65:24:2c:1a:1b:50:39:cd:1d:be:
49:c8:12:dd:6a:4b:66:53:54:fc:61:2a:b4:a3:6f:40:de:d2:
35:62:a2:6e:9d:6e:cd:08:6a:0c:e4:27:08:f5:6a:97:51:c7:
29:44:b6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:48 2025 by rpki-client