Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
File: JwBs1Oq8VbNskwifFND6bg-gzG0.mft (raw, json)
Hash identifier: 4RkAQzS1khOBu1Z7wNyFhnR9Ai20eiogr/Xlidbym5Q=
Subject key identifier: B4:98:0E:7E:8D:E6:16:D7:4A:8F:FC:1B:5E:72:91:66:BB:6C:8A:E3
Authority key identifier: 27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
Certificate issuer: /CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Certificate serial: 0194BABBC7A2369906D9539AA805FD6D8056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
Manifest number: 0F2A
Signing time: Fri 31 Jan 2025 05:00:56 +0000
Manifest this update: Fri 31 Jan 2025 05:00:56 +0000
Manifest next update: Sat 01 Feb 2025 05:00:56 +0000
Files and hashes: 1: JwBs1Oq8VbNskwifFND6bg-gzG0.crl (hash: bdT17wIYHu54UHOPhIJMSNPw7tvsbcnqIhQDAFumiXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:c7:a2:36:99:06:d9:53:9a:a8:05:fd:6d:80:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Validity
Not Before: Jan 31 05:00:56 2025 GMT
Not After : Feb 1 05:00:56 2025 GMT
Subject: CN=b4980e7e8de616d74a8ffc1b5e729166bb6c8ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:33:2d:56:08:8d:33:25:4b:80:3c:47:db:
44:83:9f:69:5e:a5:06:a4:d1:41:30:69:66:a4:7f:
7c:f7:49:e5:ac:d2:30:33:f7:2e:18:99:f1:98:51:
93:03:1a:05:df:57:ee:60:4b:6d:61:ff:b6:7d:ca:
ce:71:93:19:55:7c:4d:9a:fc:08:88:31:ec:78:4e:
b6:1a:7d:03:d6:ae:a4:fc:03:0c:07:29:e2:65:29:
ba:6a:b6:c5:03:47:03:b4:fc:14:43:7e:a5:c7:d1:
c8:b9:a7:c0:fa:5c:39:9f:4c:84:ed:3e:af:58:96:
1f:8d:7a:a2:1b:1f:42:61:1a:31:14:16:56:34:5a:
49:32:77:84:d8:11:3d:d6:1c:48:06:e7:a6:5f:42:
47:af:d6:ee:9d:51:5d:31:2e:b4:bc:e2:0a:3d:f7:
ea:86:f4:ed:fe:d5:d8:c1:1a:3a:93:5a:64:36:32:
f1:bc:4a:f5:00:1c:75:44:73:1a:53:2f:d1:4b:61:
03:b1:96:13:0e:00:de:63:8d:40:23:b9:6c:57:27:
c0:65:38:a8:44:e6:70:8b:cc:da:22:f5:5a:5e:6d:
fd:5b:9f:8f:10:bc:5d:df:7d:3e:62:f5:da:fc:90:
11:ed:0d:0f:9f:25:01:ff:bb:fc:c4:0e:8a:58:18:
4d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:98:0E:7E:8D:E6:16:D7:4A:8F:FC:1B:5E:72:91:66:BB:6C:8A:E3
X509v3 Authority Key Identifier:
keyid:27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0c:ff:2c:4c:ed:f7:9e:eb:70:aa:65:20:4e:77:8b:b7:62:
9d:c5:b8:a8:20:5b:c2:ea:ed:ac:f0:3a:00:d1:74:c0:01:91:
d0:c9:ab:bc:c4:8d:43:55:e2:08:fa:2c:c4:5a:5a:fb:e3:11:
36:d9:1f:f0:bd:a8:e3:95:0a:82:88:8d:14:05:f5:4c:4c:5e:
11:73:e5:83:7e:25:04:d0:f7:0b:e3:e2:b5:05:02:28:ad:ed:
de:39:9c:c2:e9:48:70:b6:03:e2:fb:43:8b:d0:9f:de:9f:f5:
e3:3e:14:ea:72:36:ca:6b:ab:29:34:80:f9:34:e7:88:5f:a6:
96:3a:00:98:af:e0:6c:cc:cb:cb:96:a7:72:f1:3c:5e:8c:ea:
66:ca:56:06:99:d2:b1:8a:4c:74:75:e4:cc:c4:ae:7e:49:90:
95:60:bd:30:45:1d:0a:cc:8c:51:1f:17:e4:dd:a1:b8:39:4f:
cf:84:60:06:1c:0f:df:60:c2:5e:2c:c3:e7:15:52:80:50:50:
8e:9a:1a:d1:19:07:23:4f:54:82:a8:06:01:0e:7c:65:fa:d0:
33:19:20:5b:ee:ae:cb:26:f4:3f:72:7a:ef:e5:2f:41:dd:82:
06:42:0b:21:44:12:09:15:65:f2:28:b0:6a:9b:20:13:12:a8:
a1:ca:b0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:45 2025 by rpki-client on console-fra.rpki-client.org