Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier: nDiFxorVCxvwe2PSpZPNPPnyWD3A8XeaTGQYCuvWpG8=
Subject key identifier: FD:DE:52:B2:E2:48:D0:CA:06:DB:81:8C:8E:39:BF:B0:4D:C6:82:66
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial: 019511A27B56FD4252043F90669A8F923A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 02:00:15 +0000
Manifest this update: Mon 17 Feb 2025 02:00:15 +0000
Manifest next update: Tue 18 Feb 2025 02:00:15 +0000
Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: 7PRobVYKfu9e7a47OWt05zUiaU6+mv1MlGwGoKNiqcM=)
2: YeNb4uILFMttwTAEJ0OqaURJezM.roa (hash: TrCAXhjpMq5IYAz3anoVsFKGrU1fVwfTtHHZACZFwhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:7b:56:fd:42:52:04:3f:90:66:9a:8f:92:3a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Validity
Not Before: Feb 17 02:00:15 2025 GMT
Not After : Feb 18 02:00:15 2025 GMT
Subject: CN=fdde52b2e248d0ca06db818c8e39bfb04dc68266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:60:a0:0b:9b:ca:96:e5:1a:1f:c9:05:28:
60:d5:cf:73:8e:84:31:3e:5f:ba:5b:a8:fb:34:26:
b0:49:0c:40:90:4e:c0:67:99:2d:d0:58:d5:65:40:
97:91:47:03:84:be:52:20:65:77:fd:63:0a:4e:bb:
6e:42:2e:ea:73:24:f4:ae:64:fd:34:98:7d:70:b0:
35:fe:91:46:d3:5f:47:37:6c:cb:dc:10:72:59:00:
ad:fc:9e:94:6c:9c:db:d8:bd:b4:6b:59:ef:78:e3:
bd:ec:7b:68:3e:f4:bb:f6:50:7a:1f:64:c8:5d:04:
8e:46:99:ff:9e:89:e1:5c:7b:2c:18:ff:3b:c0:14:
2a:6f:32:68:38:48:c6:e2:a8:4c:e2:57:e6:29:48:
65:56:d5:62:2b:9f:5a:f2:f6:8d:af:b0:9d:51:7f:
5f:22:0d:b4:8f:37:f3:f9:3c:c0:dc:c0:d2:1f:67:
dc:cd:ff:87:d2:ea:c4:79:fd:29:18:a7:77:da:6d:
63:04:e5:b9:82:30:f2:29:e1:d0:12:58:16:05:0c:
6a:cb:05:c9:07:f7:ab:a9:b3:7d:72:aa:78:37:1e:
9c:88:5c:8e:87:71:ee:8d:fa:fa:b3:3f:e3:94:0c:
ac:23:c4:24:57:60:1f:33:83:23:48:50:f5:d7:f2:
e7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DE:52:B2:E2:48:D0:CA:06:DB:81:8C:8E:39:BF:B0:4D:C6:82:66
X509v3 Authority Key Identifier:
keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ee:45:05:98:9e:a3:77:a1:ec:8b:3f:29:c1:a1:c8:59:12:
18:85:a6:e7:d1:52:0e:7e:29:2c:1a:24:6f:9a:4d:40:d8:d4:
83:19:a7:90:3a:b7:55:6f:88:f5:59:80:91:7f:40:06:20:db:
45:45:76:ee:04:67:d3:ee:0f:21:30:63:e0:2c:c6:89:51:49:
c6:1e:e0:c1:d2:3f:24:4e:a3:1c:79:f0:46:78:e9:6c:d0:41:
89:16:41:51:6a:3d:c3:c3:43:e2:86:39:dd:5e:a0:11:6e:43:
64:98:0c:2c:4f:d5:52:43:83:5d:7b:cb:67:bb:b9:b4:42:78:
a1:ab:b6:70:2e:cc:ec:07:c0:a1:eb:f5:a8:9d:23:3c:5d:d1:
56:7d:9c:2a:84:fa:ea:79:d4:ac:d5:2b:b7:3b:ca:2a:c1:27:
d3:66:d1:e4:98:43:6e:15:33:1d:62:cc:aa:5e:9b:70:8f:83:
d0:73:37:90:41:27:7a:12:ea:98:bf:67:0e:cc:97:7a:38:16:
8b:30:b4:86:39:7b:cb:58:0a:87:b8:d5:b6:94:80:6b:7f:d3:
58:e1:d6:01:e8:3f:1d:8a:82:7b:f9:dc:e4:a7:4f:17:ff:59:
22:1b:a0:56:62:d6:12:c2:12:59:ec:50:99:a9:8e:2c:f4:a5:
f5:2e:85:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:57 2025 by rpki-client