Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
File: Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft (raw, json)
Hash identifier: atei3fr0WIwFJjuv6F1nnXFYyC3pGQ+rgeOXgXTIxFg=
Subject key identifier: 02:5A:AC:1C:B6:EA:1F:A6:A6:D6:88:CA:42:FD:75:32:95:FB:CF:45
Authority key identifier: 4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
Certificate issuer: /CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Certificate serial: 019511D95A9522C55AE2BBF1B643144312AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 03:00:11 +0000
Manifest this update: Mon 17 Feb 2025 03:00:11 +0000
Manifest next update: Tue 18 Feb 2025 03:00:11 +0000
Files and hashes: 1: E_IIvSbgDnePwa4szd7VMD6gnys.roa (hash: XolhJaC158fPYvnn4RwApw3vI0d4xDumHbsdRnhLiB8=)
2: Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl (hash: ZHQzX1O4vKfX40Keys4bUaOXjX79vEbe3pWVzosoLD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:5a:95:22:c5:5a:e2:bb:f1:b6:43:14:43:12:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4e2cf002d45ff9ade2ab8643adbfe083ca12d0
Validity
Not Before: Feb 17 03:00:11 2025 GMT
Not After : Feb 18 03:00:11 2025 GMT
Subject: CN=025aac1cb6ea1fa6a6d688ca42fd753295fbcf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:93:e1:c3:d1:40:89:86:af:1c:ce:7e:d0:
1d:c1:f6:f0:09:54:bb:f5:b1:cf:38:9d:a4:ef:7d:
03:37:d0:42:27:b7:26:4f:88:a8:3c:7f:f6:ad:59:
a2:7b:6c:47:9f:ac:3f:8d:e6:18:7b:1b:2d:b5:96:
25:a1:b5:ca:6b:7e:e4:5b:f9:b0:d1:a4:c6:f4:6a:
7d:0f:35:54:e6:2c:9d:c1:d4:41:78:e5:df:35:e3:
bd:56:73:ae:41:3e:22:d3:66:ea:1d:22:ed:ef:73:
59:f6:ca:ae:fe:5e:4a:47:6f:01:a0:81:c5:f4:8e:
1b:94:09:42:e0:af:64:dd:2f:93:0f:a5:76:96:d5:
7f:bf:21:da:df:58:b0:fa:c1:c6:b1:d9:c6:be:fe:
31:e7:84:9e:d9:80:1b:43:69:93:c8:17:19:00:e5:
1c:92:0c:65:aa:bc:72:88:71:81:ee:91:d1:56:05:
37:bc:b3:dc:34:1a:5e:97:e3:d2:73:58:27:c1:29:
28:4c:c2:1a:b1:c3:7d:6f:a7:5f:52:47:08:66:ce:
28:af:f1:60:fa:06:65:df:5b:b6:57:1d:4a:2d:11:
86:b6:eb:82:e9:2d:6d:6e:3f:df:9e:ba:e2:98:fe:
df:b8:34:7d:0a:b2:3d:ec:30:6a:01:ec:65:e9:0c:
69:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5A:AC:1C:B6:EA:1F:A6:A6:D6:88:CA:42:FD:75:32:95:FB:CF:45
X509v3 Authority Key Identifier:
keyid:4A:4E:2C:F0:02:D4:5F:F9:AD:E2:AB:86:43:AD:BF:E0:83:CA:12:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk4s8ALUX_mt4quGQ62_4IPKEtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/30879c-9766-4a05-adbf-9ac81ef4592c/1/Sk4s8ALUX_mt4quGQ62_4IPKEtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c9:a4:90:48:0b:63:08:2f:41:18:5e:dc:a7:de:36:52:db:
80:36:cf:09:64:43:8c:41:5e:a7:10:6d:73:d4:0d:e4:4a:ea:
28:78:d4:73:45:fe:63:c9:ce:28:8c:36:6f:d5:2d:4f:9e:8e:
98:09:a3:e8:53:07:18:30:5f:6e:44:b2:e4:ee:fa:1c:2c:ce:
b6:3a:f6:0c:47:ab:6e:19:30:ee:a1:22:a1:3c:ab:13:eb:80:
7c:61:a9:99:38:40:e4:94:57:bd:86:b0:84:93:c0:e9:63:46:
a5:85:3c:5f:69:8c:d3:09:13:dd:ba:dd:82:5d:4d:38:99:35:
39:58:3c:63:a2:42:4a:d8:5c:29:8d:a8:86:c8:38:e0:22:bc:
0e:bf:53:1d:b0:fa:80:27:c1:6e:91:1d:75:35:b0:4d:dd:c7:
89:dc:24:7b:46:88:68:a2:a0:dc:6d:75:1a:2f:78:7f:56:63:
6d:57:b2:8e:33:16:59:4f:d1:32:48:94:7c:11:98:06:ed:b0:
89:65:08:7e:5c:53:bc:a6:b4:2a:9c:19:5e:4d:60:2c:bd:8d:
c6:c0:f2:8b:95:a2:6a:d9:9e:c0:50:bc:95:c5:49:cb:4c:45:
8f:f7:23:5d:01:1b:64:6a:ed:03:87:0b:af:73:4f:90:5d:24:
e9:47:d1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:07 2025 by rpki-client