Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
File: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft (raw, json)
Hash identifier: /j1apQwFcJONRkyFCX4qI5lmOo3j5E4I/mOrhaqpODw=
Subject key identifier: 0A:71:F9:78:B7:68:72:C0:4B:95:E1:CC:0A:CE:23:F7:22:C7:A0:72
Authority key identifier: 25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
Certificate issuer: /CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Certificate serial: 0194BAF282B3768ED8DC0BD2CEE0A233A506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
Manifest number: 0AE2
Signing time: Fri 31 Jan 2025 06:00:42 +0000
Manifest this update: Fri 31 Jan 2025 06:00:42 +0000
Manifest next update: Sat 01 Feb 2025 06:00:42 +0000
Files and hashes: 1: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl (hash: bEOxEmf/fy7CKm/hvDiocAHw/ndJgmwkCWKFkB6ebDQ=)
2: onIKXkQooL-gKM4FNa_iPOCUh28.roa (hash: p9VhepPylQixNxjdmUg1Yw/ZjccT3GaAzNYioyvMSo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:82:b3:76:8e:d8:dc:0b:d2:ce:e0:a2:33:a5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Validity
Not Before: Jan 31 06:00:42 2025 GMT
Not After : Feb 1 06:00:42 2025 GMT
Subject: CN=0a71f978b76872c04b95e1cc0ace23f722c7a072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7b:9f:2b:1e:bd:5f:cf:d0:f7:4f:72:97:d6:
b6:bf:04:8c:aa:60:1b:7f:04:00:12:3d:0d:fc:4c:
f1:eb:05:54:f2:3e:53:9b:98:38:88:f8:50:a2:49:
01:ae:ac:00:14:34:57:68:94:87:6c:72:55:7b:3d:
05:e4:ae:d4:02:e8:e0:cf:c3:13:aa:20:ce:08:fa:
f7:0a:d5:c0:83:b5:f8:79:ab:2a:fc:74:cf:e8:fb:
74:c6:84:e7:55:37:91:bc:55:bd:3e:23:4b:25:0a:
d2:20:7c:45:77:db:b3:6d:c4:1f:5f:b4:49:ec:b9:
9d:4c:0b:11:7f:5b:90:37:36:28:73:d4:6a:70:a9:
86:39:0f:11:4e:63:d7:aa:07:28:2e:d9:cf:c5:ef:
00:bb:4d:4e:fd:e4:8e:c1:d1:91:f4:ea:17:f1:63:
3f:67:39:5f:4d:9a:f8:ef:84:44:dd:ef:e0:2c:a3:
a9:7b:c1:ce:a5:16:5e:9c:ca:c5:6e:b0:3b:fb:71:
16:13:c2:6d:a8:4d:da:f5:39:f0:81:d2:d0:1c:0e:
94:6b:1b:e7:47:84:df:22:fe:ba:73:eb:66:d3:c0:
59:7d:61:04:d2:af:0e:08:07:6c:83:ca:3a:7e:58:
49:d7:2c:32:06:1b:c8:e9:ba:71:7c:77:85:95:b0:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:71:F9:78:B7:68:72:C0:4B:95:E1:CC:0A:CE:23:F7:22:C7:A0:72
X509v3 Authority Key Identifier:
keyid:25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:67:db:51:ed:a9:b2:6a:08:2c:d5:f5:7d:e9:db:84:28:bd:
86:a1:dd:a1:7d:62:57:d5:82:83:62:da:1c:07:fa:2b:6e:a0:
ba:a4:81:57:72:ae:6f:85:42:92:61:7e:64:03:c3:1e:4f:ee:
74:08:1e:2b:8c:56:aa:cf:d6:cb:29:6c:fc:1e:f4:39:02:35:
30:3b:0a:f3:69:0e:d6:0e:8b:4a:69:2d:6b:8d:0b:50:63:d1:
2a:36:10:3f:0d:5f:67:d9:17:30:59:0f:6c:b7:4f:0d:d3:2e:
41:14:76:b4:28:1b:43:42:e6:e5:f4:dc:d7:56:0a:89:74:ce:
16:15:c0:1c:4b:af:d3:04:d1:aa:05:16:b0:6a:dd:9e:1f:71:
99:55:47:3b:ee:4d:71:36:9b:e6:2f:87:7f:ea:9d:85:6a:fb:
5e:37:32:90:35:31:81:15:27:f8:d7:a4:e1:c6:a8:64:28:97:
e6:16:c6:86:0a:a8:35:05:96:4c:24:77:ce:1b:15:72:80:60:
80:31:53:13:8c:53:53:d0:b5:a0:0a:d6:1e:a4:78:a3:1f:c5:
f4:ee:1a:9c:b5:90:9b:c6:20:99:f3:31:e8:b1:17:77:29:cf:
3e:31:01:78:57:6d:5a:99:c6:f9:f1:82:91:81:b4:bf:9b:48:
45:6e:9f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:27 2025 by rpki-client on console-fra.rpki-client.org