Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
File: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft (raw, json)
Hash identifier: T4s09TRH9N3bpHRlctdCjZ4kQCOK7dXzhB0bx56NsR8=
Subject key identifier: BD:D8:6B:73:D7:E3:CD:FE:17:05:52:3B:C2:EC:D6:B7:CB:5C:38:58
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 019512476D675EF0DECBF82C1E9EF571616F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
Manifest number: 1467
Signing time: Mon 17 Feb 2025 05:00:25 +0000
Manifest this update: Mon 17 Feb 2025 05:00:25 +0000
Manifest next update: Tue 18 Feb 2025 05:00:25 +0000
Files and hashes: 1: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl (hash: Yx4WfsXJCNb+ZS4ybkZPnvwUxdOdNCjfEFRkxPa1buM=)
2: aT0CVuxGpAWCZRs37r9FhsfI5jc.roa (hash: 1I9hKylkwvyudsmG/eCfRN1ARD0ICRcCIn5ggjRwZmk=)
3: hn0oOL_Phy31I2IYdCocfuCMl4Y.roa (hash: pL8SqciTf3yJI1mNpTYcxXjCVmcDvB9gR79xz18ukNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:6d:67:5e:f0:de:cb:f8:2c:1e:9e:f5:71:61:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: Feb 17 05:00:25 2025 GMT
Not After : Feb 18 05:00:25 2025 GMT
Subject: CN=bdd86b73d7e3cdfe1705523bc2ecd6b7cb5c3858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:95:bc:44:23:ce:cd:5d:60:b9:b8:b2:2b:
9f:bf:0a:c1:ee:8c:29:07:c7:48:b8:16:63:4e:69:
a1:e6:3b:4c:71:2e:f1:cb:00:c9:35:89:db:94:30:
03:50:ce:be:44:a7:d6:fc:8e:a6:f2:c7:b4:74:ab:
26:d3:2f:6b:72:e9:d6:ea:7d:cd:88:85:a8:ec:c4:
41:2c:8a:b3:58:26:31:c1:2c:41:cf:19:0b:52:d3:
b3:36:bd:37:60:54:ee:0f:c1:c2:ba:41:b6:c8:3c:
bf:15:ff:b9:17:7c:26:ec:8b:94:fc:f3:20:c0:69:
2d:b3:9a:9e:ee:7e:a0:b0:74:14:28:98:a8:e6:e2:
d7:b4:b2:e8:da:98:43:b7:0c:be:48:58:3e:18:46:
bd:88:e6:1d:bc:95:d2:b7:9e:13:d8:1a:0c:ce:13:
dd:3d:72:60:4e:01:72:2e:67:c3:36:42:59:a8:3b:
54:5d:e5:5f:8c:81:34:56:0b:7f:da:33:c6:19:41:
a3:f0:cc:a5:fe:5b:04:29:0e:d9:be:7e:b6:52:08:
10:af:20:1f:f6:28:e5:4d:0b:e5:7e:97:8b:71:e7:
47:0d:6f:65:c0:52:11:a8:eb:e6:de:c6:be:2a:2b:
2a:1b:ad:2c:6d:de:6c:14:34:70:1b:10:a8:ac:89:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D8:6B:73:D7:E3:CD:FE:17:05:52:3B:C2:EC:D6:B7:CB:5C:38:58
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2e:60:20:06:f2:23:de:f8:db:a7:17:18:bf:ab:aa:a9:73:
66:78:c7:79:00:39:77:5b:79:e0:58:22:5e:95:5a:a1:31:14:
ea:e9:e6:ee:c6:02:55:d6:d8:93:cb:3e:de:f9:d2:f4:67:28:
99:d8:f4:db:bc:60:75:1e:63:05:5c:ea:64:4b:10:0e:6e:d3:
0d:8d:38:4f:e7:bf:3c:51:9e:f2:01:b5:58:e9:97:66:b0:49:
51:6d:cf:75:2d:e7:79:29:c3:02:6a:04:11:72:eb:0d:e2:33:
62:61:00:60:2d:d3:16:47:1e:f7:09:02:4b:a9:ad:f6:74:86:
0b:b5:13:a8:df:eb:57:8a:08:aa:1f:68:60:76:85:c8:47:7a:
bb:6e:19:e8:e6:89:9e:00:01:37:65:88:ea:68:f4:e9:2c:f0:
d0:90:f0:2a:e9:9b:96:3a:a6:e5:91:b1:28:6f:2c:fb:08:71:
20:d9:a5:d5:8d:d3:a2:02:98:ac:58:3c:18:95:a8:76:f2:c6:
7a:0e:cf:63:c8:d4:bc:42:da:5d:c2:a2:19:32:44:bf:44:43:
7b:95:42:ce:bb:3c:e4:e6:a6:0a:70:54:4b:4e:dc:dd:b5:a3:
91:78:95:df:98:5f:88:46:50:e5:a7:00:d7:2d:c7:ae:a3:97:
50:cc:3c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:27 2025 by rpki-client