Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File: JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier: XydMWyTFiK8eCV873gPcbZqglH5uMTpK27wVvPH+DUw=
Subject key identifier: CB:52:2C:17:EE:60:30:3F:38:0D:F1:5E:0F:D8:DC:74:5D:5D:28:AA
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer: /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial: 0194BB604929870D23386ACEAC2F82909CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number: 05BA
Signing time: Fri 31 Jan 2025 08:00:36 +0000
Manifest this update: Fri 31 Jan 2025 08:00:36 +0000
Manifest next update: Sat 01 Feb 2025 08:00:36 +0000
Files and hashes: 1: 1714kp0cfca_poPK5-VjFlBE8Bk.roa (hash: j4eVSfOj5HVSdHjC10lxDRGeLnqFO2C+nkquqN7eUhM=)
2: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: bJ8WZL/1UrXaly9BAdf5s8Fz+YdkdPxJXBdOv6CFO9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:49:29:87:0d:23:38:6a:ce:ac:2f:82:90:9c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Validity
Not Before: Jan 31 08:00:36 2025 GMT
Not After : Feb 1 08:00:36 2025 GMT
Subject: CN=cb522c17ee60303f380df15e0fd8dc745d5d28aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:09:86:26:95:bd:60:1d:2a:3a:f8:03:83:
7f:1d:e0:41:70:1b:36:2a:73:94:a8:ac:0d:f7:6e:
6e:c0:34:37:fe:ec:d7:0c:ac:56:71:97:f4:52:15:
9f:36:06:55:e4:d1:fb:16:81:c4:d7:d7:3d:d2:d8:
db:a9:dd:98:26:24:22:ca:49:19:1d:3d:8b:b6:c1:
90:de:6b:65:25:68:a8:52:62:48:c4:1a:e7:e4:f4:
c1:eb:c9:18:46:4c:35:7a:b4:6d:d1:54:18:a3:16:
1d:ab:d1:2d:29:a5:04:c0:9b:ef:eb:f6:d1:c1:42:
7a:48:dc:bd:8b:7e:80:fc:e7:b6:96:3c:38:9c:28:
f3:6f:a7:58:47:a3:a7:74:ed:0b:b8:41:85:c2:b1:
2c:f0:fe:5c:4a:9c:e8:a6:a3:f4:4e:9c:9c:6a:27:
61:02:cf:45:65:64:7e:84:c3:03:1a:07:42:76:ef:
aa:8d:32:92:92:e6:08:0c:56:7b:0f:af:ed:aa:d2:
78:9e:e4:c7:7c:2c:6e:a4:f6:3c:e8:ca:48:aa:d2:
78:c4:d7:2c:a3:a6:86:bf:37:b1:e9:bb:cb:86:6e:
91:93:c1:bf:16:1b:41:82:10:87:7e:50:8e:8b:19:
f5:e7:3b:a7:39:46:5c:85:db:e8:a7:4a:79:d1:87:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:52:2C:17:EE:60:30:3F:38:0D:F1:5E:0F:D8:DC:74:5D:5D:28:AA
X509v3 Authority Key Identifier:
keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:be:79:b3:05:9a:c6:bb:75:b3:c0:9f:d1:47:aa:a1:24:87:
92:17:58:d7:cb:b5:ed:7f:8b:0b:b8:d0:fc:76:89:a6:6a:36:
30:c0:c0:dc:bc:ca:ed:dd:66:ca:a8:87:76:43:e7:21:f8:10:
c5:0f:20:3a:ba:fc:be:67:42:d7:98:fa:d0:91:74:b3:f8:1e:
47:b5:6a:2e:e5:e8:b9:03:79:fd:1f:6f:97:1b:5e:d3:ea:fa:
d3:d7:fc:fe:00:d7:df:f9:f8:d6:dd:36:b7:32:5a:de:c1:7f:
9b:30:13:bb:f0:d6:c0:d8:02:da:e6:32:0d:41:11:c9:33:e6:
b4:4a:f3:42:44:78:38:6c:de:f2:26:2e:21:1a:d8:67:cc:20:
41:62:10:92:06:0d:06:66:bb:58:42:ff:b1:51:8b:6c:64:05:
5d:53:01:ed:cb:07:a1:3c:e5:9d:53:98:67:35:a0:1a:9d:74:
da:31:70:44:c4:4c:a0:06:2b:21:2f:bb:2c:41:12:19:fd:27:
3a:e3:5e:ad:70:02:55:b4:57:89:d8:9d:75:3a:1e:10:f3:70:
98:60:3c:e7:08:86:99:37:b6:4d:72:83:8b:aa:e4:1f:73:15:
b6:57:79:e3:7f:f3:6a:28:d1:2e:ca:8e:e7:25:65:7d:f1:f1:
b5:fd:65:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:58 2025 by rpki-client on console-fra.rpki-client.org