Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
File: 0luQuJgbWR11p-k14TBKdAdWAv0.mft (raw, json)
Hash identifier: g4BsDF0Nx//lfUSoJjdG1FkjGQzF2QR+JTnVveQRYZU=
Subject key identifier: 2F:6B:8F:B9:91:C3:37:25:AD:1A:76:AF:68:35:BF:AF:25:3F:E4:AD
Authority key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
Certificate issuer: /CN=d25b90b8981b591d75a7e935e1304a74075602fd
Certificate serial: 019511A29F1167178908F06F3346D38FD177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
Manifest number: 1330
Signing time: Mon 17 Feb 2025 02:00:24 +0000
Manifest this update: Mon 17 Feb 2025 02:00:24 +0000
Manifest next update: Tue 18 Feb 2025 02:00:24 +0000
Files and hashes: 1: 0luQuJgbWR11p-k14TBKdAdWAv0.crl (hash: rRjEQ6I+XJk5YfxzP+3tNmFkHAw0JJMkvPsERsU+IpI=)
2: n6mO0jwfMCGtBTJz4z0BBFhaaaw.roa (hash: depvn6FAlXY00NO5eAYz1KXbUInLhBp+Jz+PGCqafeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:9f:11:67:17:89:08:f0:6f:33:46:d3:8f:d1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25b90b8981b591d75a7e935e1304a74075602fd
Validity
Not Before: Feb 17 02:00:24 2025 GMT
Not After : Feb 18 02:00:24 2025 GMT
Subject: CN=2f6b8fb991c33725ad1a76af6835bfaf253fe4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:ba:8a:b7:97:be:20:20:af:b9:c6:9c:69:
00:83:89:81:31:ac:b7:dd:db:36:5e:0c:56:63:17:
fd:90:76:cf:18:10:84:0c:44:68:c8:b8:f6:79:f1:
ce:df:7f:d2:4c:e1:93:2a:dc:66:3d:cc:d8:66:1c:
bb:a6:5e:16:b6:da:6b:d7:66:3a:71:5a:d1:5b:83:
d3:9d:8f:8b:be:5f:1e:5d:ce:e7:48:c7:bc:37:27:
f2:9e:5d:af:ea:73:aa:70:f2:d0:f1:5b:06:2b:6d:
8e:b4:e4:fa:ab:13:68:d9:04:24:b7:a5:4b:71:b1:
b7:1d:1e:09:97:64:44:fa:3f:e2:ad:5a:67:46:20:
1d:9d:e1:af:7a:bc:3f:8e:45:42:42:41:9a:16:ee:
e7:ba:42:a4:5e:c5:7e:37:52:0f:b2:e2:3e:24:2e:
48:a6:86:bb:cc:65:d7:5c:e4:5b:e7:46:02:6d:56:
e5:3d:ef:2b:18:ed:90:64:5d:31:5f:39:5a:02:62:
78:23:98:33:d8:e0:52:d6:e4:58:a8:74:71:e7:f6:
de:85:e3:14:9b:bf:a5:6a:17:e0:e6:69:23:14:6f:
19:ea:b9:83:09:d4:5c:67:b9:c8:e6:4e:3a:57:0c:
9e:aa:f9:12:e0:88:fb:fa:3c:cb:af:6f:d2:29:38:
c5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6B:8F:B9:91:C3:37:25:AD:1A:76:AF:68:35:BF:AF:25:3F:E4:AD
X509v3 Authority Key Identifier:
keyid:D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:14:2d:03:57:a0:8b:43:24:34:25:8a:ea:6a:b6:fe:c3:39:
08:33:28:65:b1:b4:32:e3:80:9b:86:4b:50:ca:e4:e3:ec:3a:
06:ce:b4:50:d0:23:1c:4c:7f:78:62:ba:a4:9d:13:32:57:97:
31:3a:ad:4a:ee:fb:77:88:c0:53:91:87:f1:a1:73:97:da:3e:
1b:be:08:58:4f:ba:61:a2:64:ec:4b:e9:7f:7c:62:d8:59:bd:
c2:43:44:c2:ce:28:c8:2e:29:ba:ad:ec:78:55:01:a3:d5:02:
55:85:51:98:44:8b:ec:59:40:1c:7b:36:50:0b:36:a3:43:34:
06:67:d4:b2:d6:97:dc:fa:11:98:3e:38:0e:b1:73:4d:d7:fb:
7c:94:54:d5:2f:b3:31:f5:99:24:0f:5d:7d:fe:2c:dc:e6:8b:
f1:59:08:54:9c:51:99:fc:01:18:3a:a8:e1:dd:0a:b5:a6:da:
57:af:9e:d8:f6:11:e5:87:ee:d4:85:e7:39:a9:c1:39:88:4e:
1f:81:22:5f:80:81:4b:b0:c7:9c:d2:62:2b:66:e7:af:96:cd:
5f:b7:1c:91:0a:4c:1b:3e:9d:d3:51:05:64:c8:46:9a:d4:b9:
16:b5:eb:24:8f:87:bc:7c:25:4a:61:e4:7b:3c:7e:85:8c:4e:
e6:71:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:36 2025 by rpki-client