Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File: 1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier: uDvofF7Mqx8+1765UdWinRPo9iyR2a92zrqDk725DL0=
Subject key identifier: E8:0D:C5:03:B3:44:8A:88:3B:30:DA:1D:69:E6:7B:B8:69:D3:9C:E0
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer: /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial: 01951247387D52052A2456BE479F938A5CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number: 123C
Signing time: Mon 17 Feb 2025 05:00:12 +0000
Manifest this update: Mon 17 Feb 2025 05:00:12 +0000
Manifest next update: Tue 18 Feb 2025 05:00:12 +0000
Files and hashes: 1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: +6gF9PAUQtHdSjPVjON29gfAulCaex6eH5SNJTS6OtY=)
2: pBQcYACEJFgZkwBTNup11LKnTk8.roa (hash: Y8ti6NLIY+LJpCwKrSvXBDtmqYcWgUzXZKj2i28mql4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:38:7d:52:05:2a:24:56:be:47:9f:93:8a:5c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Validity
Not Before: Feb 17 05:00:12 2025 GMT
Not After : Feb 18 05:00:12 2025 GMT
Subject: CN=e80dc503b3448a883b30da1d69e67bb869d39ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:cd:cc:46:94:95:93:09:a1:c4:6b:10:d9:
8c:94:f9:a2:ed:e7:70:db:c0:82:91:d1:d5:b7:9a:
00:f6:ec:c0:05:19:c0:1f:a5:0b:38:15:3b:aa:c3:
f7:67:70:d7:d0:1b:ac:d6:14:9a:e1:00:2d:b6:db:
c2:19:8b:e1:65:09:28:82:ee:8d:91:0a:9d:25:10:
bf:89:5f:16:e2:97:8b:bd:ab:65:cf:da:a4:f0:44:
74:7f:31:78:2d:23:45:c6:6f:5d:db:3d:64:b9:e0:
37:be:f1:5a:8e:5a:9a:40:14:bd:d3:ae:e4:56:1d:
9e:41:0b:6f:71:05:d7:cf:82:d1:af:e8:e6:d6:9e:
08:2c:8a:c4:98:95:29:95:c7:4a:4d:6b:2e:55:05:
9e:36:55:e2:32:c6:1b:9e:6d:42:7a:c1:52:53:41:
1a:7d:30:ce:f2:2a:11:a1:55:61:0a:eb:4e:0f:d4:
94:09:6a:84:3d:1b:cb:3c:49:9c:35:85:6e:5c:0e:
38:32:28:c9:fd:30:46:50:28:ed:7e:7c:0b:35:72:
5b:70:e1:5a:38:07:b0:c7:5d:22:b3:4d:cd:9a:82:
ec:a3:ab:b9:be:63:82:a4:c8:54:79:cc:df:67:e4:
ac:e4:ce:c2:b7:d2:72:dc:5d:32:43:49:38:87:15:
ce:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0D:C5:03:B3:44:8A:88:3B:30:DA:1D:69:E6:7B:B8:69:D3:9C:E0
X509v3 Authority Key Identifier:
keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f3:0b:c3:7f:16:8c:c2:64:88:21:92:63:76:05:9c:e9:55:
4e:c8:61:69:7c:49:d8:32:20:b3:4a:6e:39:dd:fe:1c:93:db:
86:05:07:5c:6e:1f:28:db:ff:64:45:6a:8a:68:ee:3f:b3:ac:
4a:a3:62:5f:98:29:7d:06:4d:37:df:a3:3f:35:13:04:8f:89:
f2:a1:39:5f:6a:45:8a:eb:d4:d2:00:d8:47:a3:70:8d:c3:82:
39:91:c3:cd:85:5c:2e:7d:67:af:c5:db:84:34:11:f5:74:f1:
e6:a2:07:23:20:ae:ab:d8:60:b9:cc:18:90:1b:e4:95:ed:f3:
73:a9:ff:ba:1b:f8:e5:0a:ef:07:4e:28:2d:a5:41:b5:30:11:
19:ec:8d:9b:77:7e:21:b0:5b:2a:3b:19:ae:e1:68:64:62:66:
d2:67:c4:e4:e8:77:86:ea:53:97:d5:79:eb:d0:3b:f5:58:14:
af:89:55:cb:d1:68:4b:1c:b1:cc:13:d5:af:61:9c:e4:63:97:
7a:11:9e:52:91:b8:84:5b:5a:d3:9a:5d:39:77:70:d0:ee:e1:
b7:91:9d:f0:2b:5a:5b:e2:1d:d3:60:32:2e:3f:bc:6a:05:18:
a3:73:4a:dc:4f:65:60:7d:4e:f2:16:a0:c5:24:5a:3b:28:a5:
c3:a6:22:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:01 2025 by rpki-client