Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
File: SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft (raw, json)
Hash identifier: BHXaCvTyT9HJRfYbB2MNFQYao/kga7C1DRWiR5NSKXY=
Subject key identifier: BA:DE:DA:5F:0E:8E:BC:18:86:FB:DB:1E:5D:94:F0:AF:10:A2:43:55
Authority key identifier: 4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
Certificate issuer: /CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Certificate serial: 0194BABBBB5C7A4A119CE70B861720BA48EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
Manifest number: 0A07
Signing time: Fri 31 Jan 2025 05:00:52 +0000
Manifest this update: Fri 31 Jan 2025 05:00:52 +0000
Manifest next update: Sat 01 Feb 2025 05:00:52 +0000
Files and hashes: 1: SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl (hash: 4Y9NXb+jApr9kxG2nmxYQ+r5AV5V/HsgSScWdYBO9PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:bb:5c:7a:4a:11:9c:e7:0b:86:17:20:ba:48:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Validity
Not Before: Jan 31 05:00:52 2025 GMT
Not After : Feb 1 05:00:52 2025 GMT
Subject: CN=badeda5f0e8ebc1886fbdb1e5d94f0af10a24355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:1a:3f:30:43:29:ca:2a:1c:63:b1:14:ad:
a4:93:03:d5:93:77:71:a9:d2:6e:1d:f1:d1:4b:c5:
d9:c8:03:8f:b6:b1:76:1e:a0:18:fa:65:f1:06:f8:
be:a9:65:58:fb:35:2d:54:db:09:fc:f6:55:97:b1:
4b:f2:04:7f:3b:09:45:13:8c:08:d3:33:2a:3f:95:
42:64:ba:aa:af:83:9f:74:c6:53:7d:f4:d6:f8:a6:
28:d1:6c:17:4a:25:87:ec:46:14:d9:97:e8:12:16:
66:b3:fe:2e:39:b2:3e:90:9f:b6:bc:12:41:0e:70:
1a:f2:ff:18:99:8d:a2:ac:4f:89:99:b2:e5:4a:ac:
68:80:e9:af:17:1b:7b:3a:0e:dc:6d:0f:86:22:2a:
fd:85:d6:a7:3a:da:5d:07:37:05:98:41:c0:f9:14:
1a:61:b2:ae:03:14:6d:3d:6d:90:17:28:51:b4:9c:
3d:f3:40:b0:48:c0:76:3c:f2:c2:c3:a7:c9:35:54:
c9:5c:1a:d8:e4:ba:98:24:1f:5e:db:1c:22:70:80:
5a:81:1b:64:19:09:04:8c:0a:3d:fe:3a:84:2f:a0:
dc:3e:c2:2b:a0:f0:99:c4:23:c3:d8:4c:3c:cd:03:
c8:ba:68:20:78:9f:ee:e3:f1:dd:50:93:6b:30:08:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DE:DA:5F:0E:8E:BC:18:86:FB:DB:1E:5D:94:F0:AF:10:A2:43:55
X509v3 Authority Key Identifier:
keyid:4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:86:26:12:ff:f7:3d:b9:77:6c:dd:7f:4c:27:6f:cf:53:87:
8c:b4:72:e5:77:d7:a6:94:4a:b7:9d:ce:f1:b0:1e:ba:b9:e4:
5b:bf:69:16:80:0e:61:b2:d9:b0:af:4a:9d:54:9f:28:1a:50:
72:05:ab:d3:dd:44:0c:15:c5:2f:5f:f8:56:53:c9:ce:f2:3a:
9a:ce:8a:27:43:0e:6f:7e:66:60:88:d3:36:45:11:6e:31:a3:
40:83:8a:56:dd:be:94:fc:b4:b4:b8:c0:c2:c9:dd:e3:d9:f0:
2f:67:91:ec:a9:d9:a5:62:0f:a2:a7:d3:e7:e8:1e:2b:fe:8c:
3b:52:fd:d8:63:35:68:42:30:4a:b2:89:57:ae:78:c8:00:8b:
4b:9a:cd:25:1b:29:62:e9:9c:24:78:3e:32:f0:b1:2c:c3:e3:
32:b0:d6:16:90:44:54:63:43:cd:4b:6f:76:31:f2:a5:dd:9b:
8a:62:a4:e0:06:fc:fa:f9:26:b3:71:52:ca:98:36:27:e1:d1:
9f:4d:c2:b4:51:39:c3:61:65:3a:aa:0f:40:5d:6a:97:ba:4e:
4d:c6:94:9b:6a:c5:66:6f:56:67:15:b0:ae:d8:a0:4f:8d:6e:
e9:9a:e1:30:3a:5d:d2:d8:1a:a8:5c:ca:22:26:f8:bd:0b:d6:
9c:6b:0e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:10 2025 by rpki-client on console-fra.rpki-client.org