Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File: JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier: 2OPGxUzYixlkFd3rD+QGeWAX5V93s4EOCxZxoHyGr40=
Subject key identifier: B3:02:A8:12:58:6F:53:BB:1A:FD:AB:F8:E8:82:5B:FB:75:46:A5:F9
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 0194BB295F9B2D308E53C305C77758953130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number: 0C0F
Signing time: Fri 31 Jan 2025 07:00:38 +0000
Manifest this update: Fri 31 Jan 2025 07:00:38 +0000
Manifest next update: Sat 01 Feb 2025 07:00:38 +0000
Files and hashes: 1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: /S4r6ZZ1BKGxshqxV4qRNHT0s9DwIWoO0jVSntEZ8TE=)
2: NxEFYabQ1De2D9MRDvZOgIu0R4g.roa (hash: lAojMYDzIDb75W7SBnvnLzGQZua9BCv398UHDwqthXo=)
3: uBhMU8FaL6yzEgI8KXo0amRkPt0.roa (hash: rZaJZ+vs9poyZNeTB4YM94eOiwwWluQ2wWx8JrMOGHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:5f:9b:2d:30:8e:53:c3:05:c7:77:58:95:31:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: Jan 31 07:00:38 2025 GMT
Not After : Feb 1 07:00:38 2025 GMT
Subject: CN=b302a812586f53bb1afdabf8e8825bfb7546a5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:e6:10:a1:c4:a0:72:99:6d:2a:49:e9:d0:
ca:c5:4e:07:7c:bb:be:03:2f:8d:86:d0:f0:b5:55:
c7:13:8a:e7:b3:33:e8:d0:84:c6:45:2d:f2:7d:f2:
dc:66:e0:67:b2:f1:26:75:b2:af:a5:a0:92:6c:d3:
9a:48:f0:09:27:69:20:43:cd:61:4f:b9:bd:bc:69:
c4:1a:2b:6d:ca:b2:18:aa:9b:02:b9:d2:66:a1:4d:
92:52:17:6c:f2:ac:2e:cb:30:8a:5a:7b:5d:5a:d3:
77:d2:af:3d:01:08:8b:25:e8:d6:44:53:fe:6d:a0:
13:55:6f:65:98:56:11:f6:0f:b7:54:1d:18:6c:fe:
c8:e7:6b:25:53:68:1c:6a:66:f7:8c:f5:2a:0b:04:
c5:08:74:3f:6a:a8:62:a8:63:11:61:46:04:53:67:
48:58:60:e3:71:34:4c:ff:cc:71:c4:94:e4:ce:3f:
a6:aa:ba:e7:9a:c3:d3:a7:4f:a1:de:7c:d6:86:23:
4b:31:31:88:7f:de:d6:17:91:15:9b:20:11:82:9d:
39:67:e3:b0:53:b0:f9:78:e5:64:52:92:e8:c9:84:
4f:14:a2:b4:28:14:81:0f:53:ce:ad:d7:75:27:a5:
de:d5:00:18:24:e9:3b:c7:0e:fd:ad:d6:76:23:10:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:02:A8:12:58:6F:53:BB:1A:FD:AB:F8:E8:82:5B:FB:75:46:A5:F9
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:05:08:29:47:27:93:aa:b8:82:ff:90:a2:8f:34:0f:6d:6e:
30:d4:8d:21:e5:51:5c:7a:ef:a6:d6:3a:d4:f0:d6:a4:ed:73:
49:3a:9c:ff:77:a1:89:10:d0:85:cd:49:e8:2f:42:80:83:08:
ea:a4:0e:67:34:a7:20:4f:c6:e5:09:2a:b5:ea:47:16:41:70:
6c:3c:de:7b:b9:8c:6f:1c:88:9f:7a:29:04:9e:04:be:8e:5d:
2e:57:ad:4e:a8:87:9d:ed:8b:40:e9:0a:b3:47:c5:3e:04:f2:
af:41:65:1c:bf:42:90:bf:23:71:6d:f8:cc:b2:9a:de:04:c1:
0a:6a:98:b1:9d:70:14:9f:f9:33:58:77:1a:50:f9:55:c6:4e:
ca:ad:00:42:34:e2:1d:01:79:cf:37:c5:4c:38:e2:c7:42:75:
0c:ec:23:3f:f5:4a:a5:58:a8:47:c5:81:d9:fb:10:43:63:37:
7f:76:0a:96:36:90:aa:fd:14:b1:73:31:41:49:d8:76:ac:ed:
4c:e0:58:81:78:58:4d:69:20:ee:b6:7b:32:e4:3f:e0:e8:78:
f9:24:6a:3f:91:46:ea:d8:c4:be:f5:0e:70:f0:4e:a0:67:16:
4d:af:3e:da:4c:e0:bb:e0:a1:72:36:db:83:f0:ea:58:77:94:
9f:0f:49:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:43 2025 by rpki-client on console-fra.rpki-client.org