Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: BRpgg/zf68V1WKgIj64SyO6V2LFbouvROXlSJ0lXnx8=
Subject key identifier: 33:81:15:3C:F5:2C:2E:CD:BF:74:5C:5A:0C:F5:E7:3B:E5:62:F8:10
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 019511A2F1291B61EBB2CA22B3CE8CAD4F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 02:00:45 +0000
Manifest this update: Mon 17 Feb 2025 02:00:45 +0000
Manifest next update: Tue 18 Feb 2025 02:00:45 +0000
Files and hashes: 1: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: 5GW12EqWN5pJCka+4qwfA1xsHz8DB3h45F0FA7aOtUs=)
2: TfDOBJVmJoj40V_l3LjkaTEjm8g.roa (hash: ReTHm2rRZcfjOGQDNdmXkBd+jk6YyXS+LSWab0KtASc=)
3: v50wWhyCI7hTEJpByG9mHooOhqA.roa (hash: E6PQDvh39GUQ1c6SbkD744Bu9C+vTY8Ul4lMsKxnnNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:f1:29:1b:61:eb:b2:ca:22:b3:ce:8c:ad:4f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Feb 17 02:00:45 2025 GMT
Not After : Feb 18 02:00:45 2025 GMT
Subject: CN=3381153cf52c2ecdbf745c5a0cf5e73be562f810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5a:aa:c1:ce:b4:64:e5:65:05:86:ad:a3:97:
b1:90:db:dc:4a:75:96:25:8d:2d:7c:47:97:7f:ea:
93:55:25:f3:d1:16:6b:fb:2d:fc:ec:46:5a:b3:02:
8b:23:8c:46:62:4e:0b:30:9b:f5:1e:e0:68:d8:62:
ab:6e:2e:84:9b:fc:39:ac:7a:97:27:8b:2b:92:d9:
c7:ff:16:3e:81:a7:d7:09:17:ea:90:07:8b:c5:cc:
09:cd:6c:03:52:0a:b6:79:c3:f8:f7:2f:cc:4b:16:
80:2d:23:c4:69:1e:2a:bf:d3:09:d7:f6:89:a4:bd:
fb:60:78:a5:68:77:f6:06:13:ba:c5:a7:00:45:ef:
87:94:22:bb:fa:d1:b2:7d:61:24:4c:2b:14:2b:72:
9d:97:6b:0e:a6:31:8f:26:00:a2:67:c3:af:78:b2:
c5:e9:8c:b6:48:e2:bd:04:b0:94:fe:01:e3:10:0d:
c1:dd:cd:14:84:dc:3e:99:f3:a4:f8:fa:67:d2:95:
fd:1f:d7:e6:11:79:7e:fc:43:f5:4d:a0:85:1a:1c:
b0:25:45:6b:ff:bf:eb:79:3e:9f:d2:5c:2a:97:ae:
12:cb:34:4a:59:72:6b:29:1f:a7:a3:a9:84:52:2e:
64:d6:1e:b9:2c:20:18:e0:cf:da:f2:0f:19:56:4d:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:81:15:3C:F5:2C:2E:CD:BF:74:5C:5A:0C:F5:E7:3B:E5:62:F8:10
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fb:ef:b4:6a:aa:c1:18:63:30:d9:06:9b:26:47:70:ce:a1:
4f:76:5c:ca:a4:f6:b7:8d:11:c3:a0:9f:93:1d:45:77:95:e6:
42:56:1a:20:c0:5f:2d:b6:d6:e2:9f:67:da:44:bc:bf:d3:90:
56:6a:fc:5b:56:63:2a:22:63:e9:be:2f:b1:2f:1c:a4:7e:d7:
7f:d2:dd:0d:8f:fe:0f:43:07:2b:84:18:cd:70:27:1c:4c:a3:
86:70:14:90:dd:58:86:0f:4f:a8:f9:6e:81:ba:2a:43:c5:cf:
cd:46:07:79:29:03:6b:0d:be:56:29:2c:f1:cc:a8:da:6d:69:
b7:70:d6:e2:70:05:a2:00:74:9c:54:38:dd:d8:a8:70:24:77:
f4:21:93:a3:be:c6:d7:9a:7f:31:e6:b6:79:2b:07:d7:26:97:
6d:d2:16:e1:27:65:86:79:f6:d8:d7:8a:5f:0b:61:76:69:79:
1c:38:f9:21:53:c2:2c:10:3f:98:15:f4:27:77:6b:c6:05:ca:
b0:07:0e:c4:bd:71:a2:dc:0b:0b:63:cf:7c:91:b0:15:21:1b:
a5:7f:bd:b4:54:07:f8:60:99:30:d9:6a:e0:15:77:71:9f:8c:
60:f8:2a:ed:3b:ad:65:9f:f9:3c:17:81:f9:fb:7c:1c:dc:5b:
3a:16:11:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:47 2025 by rpki-client