Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
File: JTYSS5962om34iZByFbTBTA8H3w.mft (raw, json)
Hash identifier: dNTD7H5j69xFK16uVOAWLMP+YxmnPMjgho8l/idshOE=
Subject key identifier: 02:C1:0B:3C:56:4D:5C:6F:45:74:59:04:F1:27:BC:31:AF:F1:C7:D0
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Certificate issuer: /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial: 0194BA845DC9ADE4BBB39E1C060C5741F2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 04:00:24 +0000
Manifest this update: Fri 31 Jan 2025 04:00:24 +0000
Manifest next update: Sat 01 Feb 2025 04:00:24 +0000
Files and hashes: 1: JTYSS5962om34iZByFbTBTA8H3w.crl (hash: dXHLUG0lJfVgK14Y55HIBVKY/Udhbgx3GYVn7CEF75E=)
2: Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa (hash: rTcAf8Y3zE28zXssf3PZGZt9Ygw2dFFGFW0xU85GA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:5d:c9:ad:e4:bb:b3:9e:1c:06:0c:57:41:f2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Validity
Not Before: Jan 31 04:00:24 2025 GMT
Not After : Feb 1 04:00:24 2025 GMT
Subject: CN=02c10b3c564d5c6f45745904f127bc31aff1c7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:e4:59:88:05:a9:d9:8a:a5:60:7f:d3:f9:
cc:d4:63:3a:3b:2a:8f:ef:2e:54:3e:b7:92:9c:52:
16:92:a0:e2:f3:53:fb:a7:be:dd:06:d2:bf:65:6e:
1f:e3:18:5a:b4:3d:cd:ea:f9:9e:07:fe:00:1d:29:
9c:79:4a:28:9b:87:a7:77:cb:e5:e0:2c:dc:fe:c4:
27:ca:d3:55:25:c0:d3:84:3a:51:d9:05:71:e0:2b:
e1:a6:ba:83:7d:42:e4:1a:7d:69:fe:ac:dd:38:b4:
60:6c:fd:c0:0e:0b:a0:e0:33:dd:b8:2a:fe:44:28:
9a:30:3e:28:d6:33:be:13:41:79:0b:31:1a:9a:23:
85:ac:84:2d:98:78:2f:77:9e:5a:98:8f:c7:38:9b:
12:73:71:0a:0e:ad:d0:2d:8a:a1:9d:ce:68:c1:83:
76:e6:60:16:5c:2b:3c:25:98:7b:93:b4:68:d0:6f:
0b:e5:d1:79:3f:8f:eb:b4:f5:54:7c:28:87:6d:f6:
18:da:95:b4:ef:cf:70:a4:31:f5:9d:7c:1f:f5:54:
23:43:2d:e6:d3:fe:77:72:2c:b7:10:09:94:6d:58:
8d:2e:ac:92:74:30:50:3e:d2:e9:fe:93:0e:2c:e0:
de:01:10:74:e8:e6:98:d3:15:fa:89:02:fc:a8:09:
08:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C1:0B:3C:56:4D:5C:6F:45:74:59:04:F1:27:BC:31:AF:F1:C7:D0
X509v3 Authority Key Identifier:
keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:29:c0:da:2a:45:5f:2a:39:4d:23:74:b2:2f:09:9b:0e:75:
2a:28:8a:5e:5e:5e:a6:11:83:9b:e5:8a:a6:e5:7e:89:9c:f6:
22:10:64:01:32:f9:ef:9f:1f:85:33:62:1c:f7:11:a5:4c:cd:
80:db:8d:9a:9d:fa:5b:07:37:23:6a:30:b8:db:64:50:b6:ad:
60:52:be:60:f2:4b:74:dc:51:c4:4e:a9:24:db:e9:3c:e6:4a:
b3:61:96:0e:b1:8f:52:fa:dd:b2:c0:c9:b2:e2:53:08:c3:9e:
24:e2:cd:7d:59:30:df:98:eb:2b:64:ad:b9:16:db:98:e3:10:
40:95:fa:69:a1:62:f3:d2:3b:62:33:8f:a2:30:aa:af:ba:6d:
61:5c:d7:eb:11:37:59:0b:8e:e1:4c:ef:34:a3:05:41:40:12:
fb:2e:bc:ab:79:0f:26:54:73:d0:1f:a9:af:d1:fb:cc:d3:c5:
b8:71:73:fb:c8:11:7a:45:9b:35:b3:57:51:43:03:d9:72:75:
f5:a7:29:d3:8f:e6:25:d6:d8:25:83:c7:53:07:a9:cd:21:10:
72:5c:66:b3:24:f3:87:62:f0:34:d6:da:a5:8d:77:0f:90:06:
aa:13:5c:44:13:b1:6c:09:75:42:20:11:c2:2c:72:d2:fa:2b:
a9:c6:9f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:50 2025 by rpki-client on console-fra.rpki-client.org