Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
File: jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft (raw, json)
Hash identifier: hIHFbdKMeNNbKol3nvkfGa5VyJ8X3QRKr0M7oK84rJQ=
Subject key identifier: 79:90:A8:3E:6B:C1:4A:46:90:EE:19:BF:D4:B3:1A:EF:C3:CC:5F:73
Authority key identifier: 8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F
Certificate issuer: /CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
Certificate serial: 0194BA8458EAE7CD87F1964D0FEA8377A54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
Manifest number: 0260
Signing time: Fri 31 Jan 2025 04:00:23 +0000
Manifest this update: Fri 31 Jan 2025 04:00:23 +0000
Manifest next update: Sat 01 Feb 2025 04:00:23 +0000
Files and hashes: 1: jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl (hash: NpFHdsfiuI+dZdDRI95akGLRqNwv63JzUXFV0tGcXgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:58:ea:e7:cd:87:f1:96:4d:0f:ea:83:77:a5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
Validity
Not Before: Jan 31 04:00:23 2025 GMT
Not After : Feb 1 04:00:23 2025 GMT
Subject: CN=7990a83e6bc14a4690ee19bfd4b31aefc3cc5f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:76:d9:57:3d:26:c0:77:8e:90:cc:ac:12:
ed:9d:75:e4:d0:9d:cb:88:d5:65:30:51:1a:dc:7c:
a0:fe:04:b4:ce:d5:cf:94:c0:ba:08:ac:9a:9e:02:
06:a3:00:dc:34:26:f4:59:47:6c:ec:b9:d0:d3:16:
a9:5d:d8:04:10:09:e2:6e:f5:80:1b:50:24:f0:0b:
a8:1d:ca:85:3d:ac:6e:95:5a:10:a0:33:44:36:dd:
64:d3:c8:8c:db:af:b8:17:db:aa:8d:7e:ff:69:52:
85:66:c0:ee:67:91:f2:e1:ae:4a:c0:1f:05:f5:6f:
e6:20:57:5d:6d:1b:88:7b:0d:16:06:a9:b6:96:01:
d5:80:75:7a:68:44:4f:a0:1d:95:87:aa:11:78:9e:
87:62:d9:bd:3e:6c:ed:27:5c:c2:7b:56:c4:35:c7:
1a:e6:36:65:21:46:47:4a:ad:be:08:bf:dd:75:ea:
4f:7e:76:39:0b:0f:f9:d9:39:53:66:6f:0f:48:44:
42:bd:48:b7:b0:aa:46:95:ad:b1:3c:0f:24:24:94:
d0:ee:71:0e:56:e4:45:18:1e:9a:b5:a5:f3:8b:c9:
e7:7e:de:86:4f:94:e1:1b:23:c9:99:99:70:dd:fe:
c6:20:32:2c:ae:43:d1:b3:19:45:91:a8:94:7d:89:
2e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:90:A8:3E:6B:C1:4A:46:90:EE:19:BF:D4:B3:1A:EF:C3:CC:5F:73
X509v3 Authority Key Identifier:
keyid:8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:54:36:7b:eb:9c:1a:1b:5e:a0:94:76:51:a6:e4:d2:50:ea:
cc:c4:99:6b:9d:e9:45:33:e6:4d:20:66:0a:11:d6:30:dd:97:
a1:89:cd:d5:bf:ba:ee:52:bc:dd:e8:03:7c:ee:75:df:48:da:
36:5f:78:3c:7e:df:4c:fe:2a:98:1d:27:ec:46:d9:27:44:be:
1b:c7:2b:9e:f4:e6:e7:7c:c6:e9:9c:b9:5a:6b:bd:7b:91:be:
9c:37:8c:f7:d8:64:fa:d5:9b:74:26:e5:bb:d8:01:cd:4a:6e:
40:35:b7:98:39:5f:55:f1:70:21:db:cf:8d:92:57:85:cf:30:
f7:e0:35:23:90:f5:f0:3b:44:bf:4e:ae:0a:fa:27:8a:30:67:
91:c3:84:bb:0c:5b:e0:5e:31:4c:fa:07:eb:cd:0a:4a:08:36:
8f:a9:82:4e:79:7e:21:53:d5:22:6a:30:d0:03:5a:da:be:bb:
6b:5d:a5:84:5c:b7:c8:32:c2:ea:a2:83:ba:86:e6:f8:dc:d0:
d3:aa:b7:12:1b:48:9c:09:2c:4b:fe:5d:d5:d0:30:02:ec:c0:
21:c2:b6:11:4f:7f:53:67:f8:ee:9f:2d:50:55:74:5c:3c:ab:
00:28:45:78:c4:c5:ba:42:1b:61:8a:cd:b5:70:8b:00:d0:28:
e4:05:2c:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hFjq582H8ZZND+qDd6VPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOWMwN2U3ZThkZTg1OGIyZTY4MTNkMDBmOWIzOTkyZGY1
MzgyN2YwHhcNMjUwMTMxMDQwMDIzWhcNMjUwMjAxMDQwMDIzWjAzMTEwLwYDVQQD
Eyg3OTkwYTgzZTZiYzE0YTQ2OTBlZTE5YmZkNGIzMWFlZmMzY2M1ZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlit22Vc9JsB3jpDMrBLtnXXk0J3L
iNVlMFEa3Hyg/gS0ztXPlMC6CKyangIGowDcNCb0WUds7LnQ0xapXdgEEAnibvWA
G1Ak8AuoHcqFPaxulVoQoDNENt1k08iM26+4F9uqjX7/aVKFZsDuZ5Hy4a5KwB8F
9W/mIFddbRuIew0WBqm2lgHVgHV6aERPoB2Vh6oReJ6HYtm9PmztJ1zCe1bENcca
5jZlIUZHSq2+CL/ddepPfnY5Cw/52TlTZm8PSERCvUi3sKpGla2xPA8kJJTQ7nEO
VuRFGB6ataXzi8nnft6GT5ThGyPJmZlw3f7GIDIsrkPRsxlFkaiUfYkuawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmQqD5rwUpGkO4Zv9SzGu/DzF9zMB8GA1UdIwQY
MBaAFI2cB+fo3oWLLmgT0A+bOZLfU4J/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalp3SDUtamVoWXN1YUJQUUQ1czVrdDlUZ244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lMTRlMmEtYTBlYS00M2Q5LWIwNWYt
ZjM2M2M1MTM4NzAyLzEvalp3SDUtamVoWXN1YUJQUUQ1czVrdDlUZ244Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lMTRlMmEtYTBlYS00M2Q5LWIwNWYtZjM2M2M1MTM4NzAy
LzEvalp3SDUtamVoWXN1YUJQUUQ1czVrdDlUZ244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1Q2e+uc
GhteoJR2Uabk0lDqzMSZa53pRTPmTSBmChHWMN2XoYnN1b+67lK83egDfO5130ja
Nl94PH7fTP4qmB0n7EbZJ0S+G8crnvTm53zG6Zy5Wmu9e5G+nDeM99hk+tWbdCbl
u9gBzUpuQDW3mDlfVfFwIdvPjZJXhc8w9+A1I5D18DtEv06uCvonijBnkcOEuwxb
4F4xTPoH680KSgg2j6mCTnl+IVPVImow0ANa2r67a12lhFy3yDLC6qKDuobm+NzQ
06q3EhtInAksS/5d1dAwAuzAIcK2EU9/U2f47p8tUFV0XDyrAChFeMTFukIbYYrN
tXCLANAo5AUsMA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:35 2025 by rpki-client on console-fra.rpki-client.org