Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File: JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier: 99pxAO72N9V/tEGDu30rJCD/k6y3trIeXcKJzx52gRA=
Subject key identifier: 7A:08:56:40:FE:82:E4:10:F4:6A:58:FD:2B:80:86:58:34:05:66:3F
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial: 0194BABBBED3DD3E72180543FDB5F83C8123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number: 0503
Signing time: Fri 31 Jan 2025 05:00:53 +0000
Manifest this update: Fri 31 Jan 2025 05:00:53 +0000
Manifest next update: Sat 01 Feb 2025 05:00:53 +0000
Files and hashes: 1: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: h9Ac0L0HgOeNv4PWRkyHFuHofJ8hoBlen46L9wuX7As=)
2: fLXiRPdHI-7ZXM738GnPEvoiyOc.roa (hash: mxOqTfa0/eUKhzvYGP8+UstSP5NK5/GLU01oehfJvC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:be:d3:dd:3e:72:18:05:43:fd:b5:f8:3c:81:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Validity
Not Before: Jan 31 05:00:53 2025 GMT
Not After : Feb 1 05:00:53 2025 GMT
Subject: CN=7a085640fe82e410f46a58fd2b8086583405663f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:af:f7:66:0c:e0:a8:12:cf:e3:85:b3:9b:
d8:5f:84:e3:e9:e5:94:6f:11:f2:ad:7a:0a:8b:52:
b5:ab:94:8f:22:5f:cb:75:1e:75:5e:72:b9:46:2f:
8b:51:5e:89:7c:80:85:81:8b:f1:87:4a:2f:ed:a5:
d4:66:2e:c2:f3:72:49:6f:4c:c1:0d:8e:ac:5a:03:
6a:a0:aa:3f:bc:cd:6e:f3:1d:a8:3b:82:dc:eb:99:
70:4d:23:34:ed:2f:b7:51:52:79:0f:d1:13:0a:a7:
d5:ef:ae:14:e7:86:5c:94:1a:a1:95:2f:01:19:af:
0e:f0:51:1f:66:bf:23:ed:bc:53:0b:e4:48:b3:e6:
d0:78:0f:b4:db:01:75:3a:0c:38:87:33:c1:8f:fa:
a5:63:7d:ee:0b:48:fd:ab:b4:36:91:c5:1d:40:c9:
5a:b7:23:4e:4f:4c:78:8d:82:7e:75:e2:38:56:9d:
34:c3:98:3d:5d:d8:76:da:3b:e4:1b:15:d0:24:9e:
20:7f:2e:d2:e8:7c:dc:b0:c2:60:bf:d1:a7:0c:a1:
37:5c:ec:3c:3a:20:a1:f1:0b:50:dc:71:2a:34:be:
bb:b0:45:56:ca:72:21:32:d3:e3:71:59:dc:71:08:
b0:e0:3a:5f:87:b0:e6:50:56:03:af:08:7a:75:db:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:08:56:40:FE:82:E4:10:F4:6A:58:FD:2B:80:86:58:34:05:66:3F
X509v3 Authority Key Identifier:
keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fd:41:4a:ae:95:ae:c7:59:cf:d5:3c:d0:00:ed:cb:e7:e5:
ea:0f:b8:75:3c:02:e7:8d:29:8c:a9:dc:88:41:16:01:27:91:
b1:74:49:50:24:b6:5d:06:ab:fb:1d:a5:3e:56:83:66:19:45:
de:d5:c3:12:85:bc:b3:d4:99:ab:5a:6f:b0:7a:dd:29:5e:07:
3f:62:95:df:e8:bc:08:f9:de:6f:97:1a:88:5b:eb:33:1b:fa:
2b:49:f4:7e:62:87:eb:15:ad:4e:81:af:df:23:e5:a7:e4:97:
68:fe:83:3f:2f:68:1a:8d:f5:e3:24:66:3e:4a:17:2a:16:d4:
4c:3f:33:88:6e:49:d1:32:fa:6d:16:54:fa:f4:1b:51:8a:0f:
8e:7e:62:cd:db:5b:ba:9f:56:12:0b:b3:11:54:58:d6:8e:95:
03:93:d9:a1:d8:9f:d2:3a:8e:30:16:26:4e:5b:c3:8b:52:65:
1f:c2:0d:10:4e:c0:6e:75:61:9b:4b:23:48:b6:37:06:55:f0:
c1:89:02:df:c8:02:6e:b5:95:55:29:0d:c4:d9:af:76:a9:cc:
b0:d6:53:20:17:4b:95:eb:01:a3:a1:a7:4f:fb:63:d8:b5:70:
f1:33:36:9c:d1:2a:29:3b:68:a3:73:44:84:0c:e4:36:63:ac:
37:68:88:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:24 2025 by rpki-client on console-fra.rpki-client.org