Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
File: JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft (raw, json)
Hash identifier: uZVXXULJ3JpDjn0KhQHhLQ1uhKZRDkpJSQxD6rDd/hI=
Subject key identifier: 3E:63:E8:AE:2E:A7:6D:BD:63:12:19:2B:00:07:31:51:4E:92:A2:0A
Authority key identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
Certificate issuer: /CN=241ed58e426975e299875897caff9552640d9c09
Certificate serial: 0194BB2949D4D15D35AD3778C92198E53939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
Manifest number: 0F0A
Signing time: Fri 31 Jan 2025 07:00:32 +0000
Manifest this update: Fri 31 Jan 2025 07:00:32 +0000
Manifest next update: Sat 01 Feb 2025 07:00:32 +0000
Files and hashes: 1: 0UtAAwuWtglJuf67yxMctPzPq7I.roa (hash: noP3LEoxbmhVQLjGw4L6WYe7t8jyaSHbnOdoEAZKAiw=)
2: JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl (hash: kppY4IdOfuMamEtCrT8BZNY62UyfgSQmbap5XA9SwaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:49:d4:d1:5d:35:ad:37:78:c9:21:98:e5:39:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=241ed58e426975e299875897caff9552640d9c09
Validity
Not Before: Jan 31 07:00:32 2025 GMT
Not After : Feb 1 07:00:32 2025 GMT
Subject: CN=3e63e8ae2ea76dbd6312192b000731514e92a20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:51:78:f3:eb:30:c8:1f:c4:9c:47:39:e6:
d3:08:8b:29:81:e9:a8:70:e0:4c:40:c8:81:4c:81:
2c:4b:1a:a6:c4:89:ad:40:b9:ac:3a:a5:95:fa:8b:
69:03:9e:f7:c9:e1:f1:ed:99:5a:21:cf:1f:dc:d2:
68:d2:af:53:3f:21:6d:17:da:bb:a9:51:d2:7d:26:
4d:d2:da:e9:e3:a1:09:d5:49:30:7f:31:9b:b3:23:
24:f0:58:01:42:ed:18:81:b4:f7:bc:a5:5a:b1:89:
3c:50:89:41:88:b3:db:5f:1c:7c:8e:60:06:d7:ef:
aa:f1:06:5c:57:c7:ce:16:ba:6d:34:88:66:cf:0b:
a4:95:97:cb:19:64:f8:64:eb:25:86:4e:23:e8:03:
59:4d:32:19:59:ec:ee:bc:f8:2d:3f:62:63:06:42:
f3:bd:09:a5:cf:8a:ec:ca:06:00:57:41:e4:c6:c7:
95:c1:e2:d1:8b:aa:38:1f:db:c8:9a:0e:83:c4:67:
b9:50:9a:d7:c1:62:bc:94:93:70:87:3c:49:13:7d:
b0:98:79:c5:cb:b2:70:e0:f3:4b:64:24:98:91:bd:
ff:dc:68:15:c7:7b:d2:8e:91:03:1b:8b:ff:43:c1:
c2:53:ec:d1:c9:5b:10:5c:6f:61:fc:a3:b8:0b:3c:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:63:E8:AE:2E:A7:6D:BD:63:12:19:2B:00:07:31:51:4E:92:A2:0A
X509v3 Authority Key Identifier:
keyid:24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:63:3e:0a:04:8e:ee:7b:e6:f0:a5:86:b7:43:26:fc:8a:3d:
77:9e:3d:c2:61:78:fd:ba:2d:e1:ad:3f:0c:ef:26:6c:39:48:
cd:20:20:9a:9d:2a:7b:6f:4a:7c:4b:eb:20:0e:29:fb:e6:fe:
82:cf:67:a4:9c:cb:86:4f:b4:db:03:3c:29:cf:5e:b2:4c:64:
d3:c2:c8:b8:27:6e:65:05:df:a6:7b:c9:ed:e9:25:63:c6:d7:
aa:4f:05:fb:d8:f4:e5:40:35:17:eb:e7:d3:15:3b:13:7e:d9:
0d:c2:f3:b7:1a:3b:62:d5:af:f4:3c:ad:cd:d5:d5:c3:c6:a5:
9e:ef:a9:04:fc:d8:ec:a7:16:c1:d8:32:aa:f3:3b:8a:c7:70:
8a:a9:4b:19:85:93:70:28:99:3c:05:e5:f6:51:37:74:63:7f:
de:06:24:5c:1f:6e:b2:26:cb:6a:1b:a8:67:cb:df:fe:8c:a7:
40:3a:23:67:0a:96:61:9f:87:92:72:4b:6b:a1:d4:d9:a3:c9:
28:cb:e6:97:c3:14:65:80:50:fa:19:98:4b:4c:98:18:30:cf:
3a:dc:e6:2e:93:b0:36:08:d1:cc:a2:c9:d0:4d:14:79:10:7b:
37:99:da:e8:fb:66:0b:94:ec:54:23:7a:63:76:40:2e:b5:28:
c4:23:da:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:28 2025 by rpki-client on console-fra.rpki-client.org