Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File: jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier: Yip3JagBbH4upRt0qGmiA1Bq90vqyq8pN5Hz8Rdy4VU=
Subject key identifier: 43:AD:D6:9A:C9:03:4C:CC:55:1D:B3:CD:79:B3:DE:86:2A:34:FD:73
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer: /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial: 0194BA843001308D2264106D5A55FBE1A971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number: 9F
Signing time: Fri 31 Jan 2025 04:00:12 +0000
Manifest this update: Fri 31 Jan 2025 04:00:12 +0000
Manifest next update: Sat 01 Feb 2025 04:00:12 +0000
Files and hashes: 1: NFgVIk3I0OB4aAQE--Yl_E4ZfQE.roa (hash: tZx/juHJjFsZtx/TprO+Ju+VpXMKoq0o38hFCwQ+O44=)
2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: fQVX2x/uYr+QVD7PTDMuypuvtWe7TpCKDZwLWa3xHds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:30:01:30:8d:22:64:10:6d:5a:55:fb:e1:a9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Validity
Not Before: Jan 31 04:00:12 2025 GMT
Not After : Feb 1 04:00:12 2025 GMT
Subject: CN=43add69ac9034ccc551db3cd79b3de862a34fd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dc:fb:a4:0f:15:48:d6:b8:b3:1f:3f:23:68:
c2:28:7a:6f:6e:c8:17:5a:42:91:6e:91:7d:39:fe:
d4:e5:77:33:18:13:34:4a:34:1d:b0:b6:6c:04:ef:
0d:5d:5d:03:45:6e:e0:d8:77:b5:84:1c:b3:c0:ad:
64:59:54:18:17:b4:40:75:c1:54:8c:f0:ce:cb:70:
1e:92:d1:92:60:0c:f0:ac:43:20:fe:52:ed:d2:e1:
98:6d:a1:91:2c:21:d1:21:46:71:90:04:14:bb:da:
ce:4a:0c:b1:6f:5b:47:97:3d:7b:2d:4b:0d:20:8c:
78:00:4c:c6:a6:cd:ef:75:ce:33:0b:38:bb:a2:67:
93:bb:de:77:c5:06:ed:43:a2:52:d4:3f:e5:6b:2d:
fb:4b:90:d7:61:e0:35:b9:81:32:01:bd:d2:03:14:
fc:ec:19:76:94:f6:8f:e5:8d:a5:d5:3d:ba:f9:ae:
ce:40:e4:64:6d:bf:ae:c1:32:88:28:e6:27:01:37:
e4:b3:da:15:96:d0:d2:c2:42:76:c2:ca:7a:4e:4d:
36:86:36:4d:d4:2d:d5:2e:99:30:c0:41:7a:ce:80:
fb:8b:55:4e:44:64:b2:8e:99:b8:67:03:c6:16:26:
f7:af:0f:70:1f:74:f2:b8:b0:f6:02:aa:5b:a4:32:
57:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AD:D6:9A:C9:03:4C:CC:55:1D:B3:CD:79:B3:DE:86:2A:34:FD:73
X509v3 Authority Key Identifier:
keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8f:dd:6c:b4:27:87:34:6f:1e:15:b0:b2:7e:a0:81:3f:44:
46:0e:41:3e:c1:ff:be:ff:19:c4:5b:9f:17:8b:23:56:39:c0:
6c:cb:3a:82:75:a1:4b:b8:01:23:25:5f:ff:76:fd:92:dd:e7:
8a:ba:8c:15:9f:54:20:b1:25:41:c2:1f:17:83:a7:b7:05:54:
8c:14:50:29:f3:35:dc:cc:a5:6b:b2:40:4e:cd:cf:60:b0:19:
fc:96:ab:78:e3:a1:e0:89:d5:95:4c:7b:52:0e:40:bb:7a:b0:
a4:43:30:7f:3c:83:66:5a:67:66:06:b3:f1:58:66:73:01:d1:
17:f4:ae:24:05:4d:07:72:59:b2:73:7c:e1:40:79:a5:23:50:
a2:69:b6:36:9a:60:fe:84:27:10:47:0c:f3:f2:13:91:f7:3b:
6a:0b:bd:e3:61:b3:60:6b:0d:8b:2a:92:d4:b2:09:3c:22:29:
b3:12:6b:d7:9b:52:9c:f7:bd:ef:b1:86:7e:0c:63:79:a0:89:
43:fc:96:53:78:ff:03:24:2d:01:ed:bd:c9:f4:11:50:1f:76:
28:0f:e8:46:b0:ca:a6:5c:93:02:1a:7c:b9:b5:9a:0b:f7:64:
d8:a3:11:19:92:d2:fb:0f:15:57:a0:34:4f:ff:5d:32:8d:a0:
d2:a8:74:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:40 2025 by rpki-client on console-fra.rpki-client.org