Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.mft
File: JAy7mUeWHigo2EdLysoem5FVZWA.mft (raw, json)
Hash identifier: /vkrSq4HM0YtJveu1jnBF/Gdzhr8G1iiqd45KzbHBGk=
Subject key identifier: 94:CB:1F:58:12:11:4F:07:89:05:41:D5:EC:B0:57:EC:BF:72:CE:D2
Authority key identifier: 24:0C:BB:99:47:96:1E:28:28:D8:47:4B:CA:CA:1E:9B:91:55:65:60
Certificate issuer: /CN=240cbb9947961e2828d8474bcaca1e9b91556560
Certificate serial: 0194BB2910297BE4D48FA23B30C6DE3C8D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAy7mUeWHigo2EdLysoem5FVZWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.mft
Manifest number: 1165
Signing time: Fri 31 Jan 2025 07:00:17 +0000
Manifest this update: Fri 31 Jan 2025 07:00:17 +0000
Manifest next update: Sat 01 Feb 2025 07:00:17 +0000
Files and hashes: 1: JAy7mUeWHigo2EdLysoem5FVZWA.crl (hash: LSXKgOtravio2IkF5CoY0ccjMVqL0YNL1/1b4wKgi8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAy7mUeWHigo2EdLysoem5FVZWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:10:29:7b:e4:d4:8f:a2:3b:30:c6:de:3c:8d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240cbb9947961e2828d8474bcaca1e9b91556560
Validity
Not Before: Jan 31 07:00:17 2025 GMT
Not After : Feb 1 07:00:17 2025 GMT
Subject: CN=94cb1f5812114f07890541d5ecb057ecbf72ced2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:44:8c:97:4c:0b:ce:0a:ae:83:39:8c:61:
83:58:ef:4e:e8:9e:8b:35:8a:b5:29:cc:e4:19:65:
58:f5:c0:6b:ed:9f:89:11:12:2b:25:04:6f:32:50:
cc:84:ef:00:59:19:5a:74:c9:9d:b6:d5:12:e5:c5:
64:9b:bd:6e:8c:79:16:13:c7:fe:5f:55:ff:f9:8c:
2a:0b:e2:9c:65:71:3f:ea:2f:f5:f7:d5:d3:9c:96:
73:77:0b:a3:a7:3b:5b:85:6c:6d:54:f2:28:86:49:
ef:c8:c4:fc:cc:9c:61:10:67:d4:f0:6e:61:ad:7b:
f9:2c:a4:d8:ec:6c:f1:53:d5:3b:cc:d3:15:82:32:
29:3b:3e:d0:df:f4:b3:e0:eb:75:ca:8c:16:24:ef:
41:03:63:f2:4a:8e:09:e2:67:c9:db:d2:02:5e:37:
f3:ad:6e:9c:70:4a:50:b2:05:f5:e6:6c:e4:79:8b:
b2:56:1f:4d:6f:07:0d:7b:32:68:a3:c0:34:ba:f2:
10:d2:0f:f1:3c:70:19:77:43:67:22:3a:94:cf:04:
66:37:66:6f:77:55:1c:8c:eb:39:7d:a8:eb:ee:fb:
5f:7d:d5:8d:11:c7:f1:e9:c2:dd:cf:9e:37:eb:a0:
88:1f:6a:da:db:53:6d:4b:83:a5:03:8b:a9:64:a7:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CB:1F:58:12:11:4F:07:89:05:41:D5:EC:B0:57:EC:BF:72:CE:D2
X509v3 Authority Key Identifier:
keyid:24:0C:BB:99:47:96:1E:28:28:D8:47:4B:CA:CA:1E:9B:91:55:65:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAy7mUeWHigo2EdLysoem5FVZWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4f:d4:2b:e7:5a:92:84:3a:02:5d:77:16:5d:55:a8:0f:da:
de:28:d1:6e:cd:ce:6a:cf:a2:82:73:5a:3f:b3:69:89:73:66:
2a:5c:1e:e2:43:b9:8d:cf:e3:4a:61:19:94:ad:5d:c3:74:d9:
47:ef:f0:18:f8:77:ef:2c:7d:2c:fb:ac:d1:d7:93:84:51:0d:
e9:29:da:11:2e:ae:44:40:36:c7:d7:2d:82:2e:3b:bc:30:ec:
ae:6e:17:9e:c7:f7:98:59:f2:a4:5e:5b:41:7b:15:23:41:eb:
51:e6:d1:d5:59:40:8f:e9:8b:dd:5c:73:51:1b:7d:88:d4:91:
73:b2:0c:b3:14:d1:1c:a2:8d:b1:a8:cf:09:ef:64:98:e3:79:
e8:13:0c:7c:59:e4:89:03:c6:23:32:cb:6d:29:fa:2a:c2:81:
81:14:ec:7c:50:76:cf:ef:0d:bd:2c:cf:98:4a:db:10:f1:01:
f0:12:c1:66:d5:76:4c:d9:19:ef:1d:46:52:01:03:a5:bb:b1:
37:98:ad:ea:fb:d1:68:06:30:3c:b9:e6:74:9e:f5:fc:14:88:
15:87:f8:42:24:eb:2c:24:27:6f:71:75:5c:b8:09:da:55:b9:
cf:37:39:02:26:1c:81:2d:99:72:c7:2b:3e:66:39:9c:04:62:
6f:5e:16:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:30 2025 by rpki-client on console-fra.rpki-client.org