Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier: GPnD9bUGcFe6CH4/HpZ110lKZWSsiHqsIgch6uNyIKM=
Subject key identifier: C1:AF:F8:7A:F3:A2:03:90:4D:02:A2:6D:20:51:54:DC:35:21:7B:56
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 0195109031C85E05F5868653D2D4E0F50391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number: 1455
Signing time: Sun 16 Feb 2025 21:00:40 +0000
Manifest this update: Sun 16 Feb 2025 21:00:40 +0000
Manifest next update: Mon 17 Feb 2025 21:00:40 +0000
Files and hashes: 1: kYc1gtOr0PTFQ2gYPT0GRKJOtNs.roa (hash: Jh3vTnZ3BASMX35rtVJIhlA72LY16bLBZs3GxE20F90=)
2: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: zcVT7/5WeDu6leap2CVmXHYufvoi3TgcpDWVU89OmI4=)
3: yYPs8r5YH3ZUhnb-tH8hNPFRP3k.roa (hash: oqr96EpWpl0SR82NHdTiNdunGc2ZUGnDoW9Ug/N3aIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:31:c8:5e:05:f5:86:86:53:d2:d4:e0:f5:03:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Feb 16 21:00:40 2025 GMT
Not After : Feb 17 21:00:40 2025 GMT
Subject: CN=c1aff87af3a203904d02a26d205154dc35217b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:83:2f:25:6a:31:74:09:fa:7a:6c:8b:ed:
1f:11:55:a7:5d:fb:41:f8:f8:55:10:54:aa:7b:98:
1f:3e:71:f4:05:0e:3e:bf:c8:73:d7:79:1f:34:91:
9a:4c:1f:b7:4e:95:82:e9:03:b3:2c:a0:88:5b:c7:
ef:4f:43:bb:82:6d:07:3a:e2:ea:6e:90:e9:b2:90:
79:33:ed:36:9e:52:14:d4:3e:26:55:14:c9:3d:6b:
fd:2b:29:3d:75:23:67:c6:47:b6:b0:a0:45:4a:77:
bf:4f:f4:b3:70:3a:6a:9e:37:cf:e3:3c:3a:9a:c1:
c2:43:9e:1d:51:31:86:f6:5f:93:97:4b:cb:99:58:
40:fc:f6:2a:54:52:28:16:04:fc:ed:b8:8b:b9:ea:
53:b0:26:fe:95:34:d4:fa:1e:c4:5f:63:cd:b7:ee:
42:ef:67:e2:10:21:4c:03:6d:58:c9:ad:a7:68:bd:
93:b7:fb:33:7d:a9:c1:05:5a:d0:9c:bd:69:49:e7:
99:02:2e:99:38:65:1d:7e:da:5e:07:ea:f2:0d:96:
e4:d0:d9:18:96:ac:9c:8b:7a:32:31:4a:ac:dc:95:
de:a9:e7:19:e6:b9:a8:47:37:ad:1d:8f:1b:8e:97:
81:d5:33:99:f8:d3:e0:d0:cc:97:b2:c8:b7:49:d0:
49:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:F8:7A:F3:A2:03:90:4D:02:A2:6D:20:51:54:DC:35:21:7B:56
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:00:26:93:00:34:b9:5a:44:23:72:b7:f0:57:d2:41:d7:7b:
e6:f3:a7:7c:cf:70:f4:79:60:2e:1a:7f:9a:c6:04:b8:67:3f:
c0:25:29:72:ce:88:b5:f7:bd:41:aa:46:39:60:ea:94:64:31:
6d:1c:27:6c:19:68:06:43:a0:cc:3c:08:ae:b6:00:30:a7:e0:
85:a0:43:50:9d:68:ee:de:d1:82:a9:a1:d3:ca:cd:d0:a1:b8:
0a:56:2a:a4:e1:5a:bf:3b:c8:78:a0:4d:01:f0:ec:cc:76:25:
e1:85:61:15:ea:85:bc:9d:e4:a1:73:da:80:7e:88:19:05:9c:
41:e4:cd:f1:3e:df:13:51:bd:ff:33:e1:13:3d:ee:c8:4f:55:
68:ee:30:61:92:2a:ab:bf:9e:84:a7:86:41:c0:1a:da:24:70:
5a:23:2b:93:71:c1:dd:04:99:a2:6a:36:be:c2:d1:d4:35:81:
53:c8:57:55:13:61:80:0a:78:9a:65:03:5f:88:c6:d6:3f:c6:
a3:76:78:61:35:bb:24:d1:b7:54:31:c1:21:ee:6c:55:c9:36:
a7:22:d4:7e:c4:78:e3:2a:93:32:e7:c9:f3:1d:45:a0:0a:20:
fa:3f:0f:3e:0f:31:e7:54:a1:7d:9c:1d:1b:31:0b:b3:4b:78:
11:68:5a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:51 2025 by rpki-client