Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
File: 93n18CiJhaveCYJ-A9eHpSFJ5-w.mft (raw, json)
Hash identifier: nTPpfkjk7zTmTw+6DV5Fk1fe49e/wO5EnPCFLHOxHS4=
Subject key identifier: 2A:78:2F:59:21:42:12:F0:DC:0E:91:D1:79:00:F4:7A:67:0D:50:C5
Authority key identifier: F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
Certificate issuer: /CN=f779f5f0288985abde09827e03d787a52149e7ec
Certificate serial: 019510C7B0348E5E2987F9B0FB40575D5EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
Manifest number: 145D
Signing time: Sun 16 Feb 2025 22:01:16 +0000
Manifest this update: Sun 16 Feb 2025 22:01:16 +0000
Manifest next update: Mon 17 Feb 2025 22:01:16 +0000
Files and hashes: 1: 93n18CiJhaveCYJ-A9eHpSFJ5-w.crl (hash: 0E8HiCLSjfLSdU2uL0ZorUPswGMJxu7Haxz9B/BfC2Q=)
2: FIrgG9lOckS2whhTIp5aX9dzDrk.roa (hash: w3cwGYtOKvfw8oY9fh8sMYPgttcg8puA2TGSCPuXrrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:b0:34:8e:5e:29:87:f9:b0:fb:40:57:5d:5e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f779f5f0288985abde09827e03d787a52149e7ec
Validity
Not Before: Feb 16 22:01:16 2025 GMT
Not After : Feb 17 22:01:16 2025 GMT
Subject: CN=2a782f59214212f0dc0e91d17900f47a670d50c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:38:41:c8:98:a0:17:93:f5:eb:20:f0:01:d7:
bb:b8:9b:0f:1b:5f:2c:b5:e7:a1:41:3f:8e:da:9b:
ca:52:3d:d6:bd:92:ad:92:8d:f8:6e:af:69:ba:c1:
7a:18:a3:4b:99:3e:36:50:ec:05:05:ae:6f:07:ea:
04:e6:21:3d:79:5b:88:e8:48:5f:e1:53:99:51:6e:
0e:8e:69:85:48:80:25:62:7e:d7:1c:b4:10:fa:01:
2e:5c:04:f3:55:e5:0c:2d:b7:af:8b:50:f2:76:9a:
15:af:c5:29:c4:a7:5c:02:6b:70:59:c7:11:7e:22:
3e:e9:63:c2:f3:1b:f5:7b:7e:ba:f0:b9:91:e5:7b:
01:4a:d0:fb:35:5d:f7:65:0e:2f:ad:65:f7:6d:03:
9b:dd:4b:13:3d:5b:7f:0c:c6:2c:75:d2:f7:41:66:
31:62:0c:81:dc:65:31:04:19:22:9e:e1:7d:69:b2:
b9:e0:11:cd:73:ad:de:ba:31:e4:a0:80:bb:81:97:
9e:78:8d:c2:74:da:da:a6:0e:ae:e6:04:27:fd:64:
78:58:e5:f9:f2:64:5e:eb:12:ec:0b:c7:73:e1:03:
20:1b:ff:ea:44:6c:ae:dc:be:59:17:00:bb:b9:9c:
75:7c:81:05:bf:ac:7c:fd:3f:b5:17:f7:0a:1e:e2:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:78:2F:59:21:42:12:F0:DC:0E:91:D1:79:00:F4:7A:67:0D:50:C5
X509v3 Authority Key Identifier:
keyid:F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9c:8d:75:5f:31:4b:f5:fa:35:de:88:25:d8:4f:e9:10:0d:
73:dc:ca:03:70:92:ec:cc:e6:04:22:15:d7:a2:ce:b6:d0:f2:
91:6b:11:66:50:5a:70:9d:40:79:90:76:aa:c1:fd:7f:e5:37:
67:57:42:96:a7:a4:80:f0:cb:26:1c:d6:b7:a0:c7:3a:80:b3:
2e:e6:33:cf:87:52:f4:eb:62:90:f2:f3:21:44:a9:d4:e0:53:
9f:15:fa:fb:d5:d8:df:ff:de:44:ab:46:4e:07:1c:c1:95:72:
c2:ea:46:1f:10:5a:33:03:e9:ef:51:c8:b6:bb:e8:87:5f:ed:
e8:9f:80:66:e6:5c:bb:6f:98:e3:bb:ab:cf:3d:07:aa:5e:2f:
58:0c:79:1e:14:98:f1:6b:27:3c:ca:00:4d:d7:b2:eb:90:33:
53:57:05:2a:2a:4b:5c:35:45:55:70:b9:2f:d1:ee:9e:54:c2:
ef:08:8d:b3:e7:38:9d:3a:4a:66:01:24:e0:97:22:d6:16:03:
c3:e4:ee:a5:76:62:da:0b:e2:2e:36:9c:b7:32:c8:11:fb:5d:
01:d6:d6:f9:e1:58:8a:9b:e3:19:ba:24:73:9e:42:09:09:dd:
72:f1:b5:75:53:1c:f1:1c:2b:fb:88:fc:aa:83:98:4a:44:2a:
9b:5d:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:42 2025 by rpki-client