Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File: i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier: pRaL8JSVrUfXXpSsPQAYRr06v7u+a31H/L9V7RqqTsE=
Subject key identifier: 02:9F:A4:C8:23:E8:28:1C:F7:EB:02:E8:FA:07:55:5A:CA:51:C9:B6
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer: /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial: 019512479F264EA8AC7C38C855D3A83D665C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number: 031A
Signing time: Mon 17 Feb 2025 05:00:38 +0000
Manifest this update: Mon 17 Feb 2025 05:00:38 +0000
Manifest next update: Tue 18 Feb 2025 05:00:38 +0000
Files and hashes: 1: L3ocwI9skWdmpza9Qr_soDnI5iA.roa (hash: 9lUp3ywFYQ08BYq4aJkqYCgUsr8TmtCB3L7KRcDWSOM=)
2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: Voy5ZALsv8ys0S+l/UiHLxmruudSox3TQu4bx6pghuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:9f:26:4e:a8:ac:7c:38:c8:55:d3:a8:3d:66:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Validity
Not Before: Feb 17 05:00:38 2025 GMT
Not After : Feb 18 05:00:38 2025 GMT
Subject: CN=029fa4c823e8281cf7eb02e8fa07555aca51c9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:59:12:da:1f:2c:3a:f1:ac:a0:7e:3b:45:2e:
30:43:72:3a:17:2a:45:b6:9d:69:18:85:ec:3d:64:
4f:bd:2a:80:7e:c2:75:b0:e3:2e:7a:59:4a:35:9f:
28:87:7d:68:5f:df:f6:58:79:d6:bc:ce:31:fd:28:
b7:23:c6:42:08:12:22:2d:23:38:79:e8:07:38:32:
c8:7b:7c:88:21:c4:aa:35:99:f6:62:6c:c9:a4:cf:
92:32:62:bd:e1:ab:52:ea:41:ed:2d:26:d2:96:d9:
03:6e:3f:75:50:2e:a0:49:78:db:07:85:f7:a6:a9:
b3:8d:67:d6:32:86:e9:da:28:24:54:19:1a:3f:31:
55:0f:9c:c6:f5:57:8f:3f:cc:52:5d:ea:04:fb:23:
27:00:3c:3b:e9:4e:eb:df:0d:ce:50:98:00:5c:8d:
58:7a:7e:e2:e6:3c:5c:d9:9b:30:70:0b:15:a7:e7:
53:e5:e3:b2:ea:d5:22:c8:d9:20:46:40:d5:88:95:
f6:59:04:e2:7c:56:1f:89:77:fb:cc:af:9b:2c:40:
2b:55:b7:49:e5:d4:42:d5:66:93:ad:8f:fb:67:22:
ca:72:15:fd:df:fe:7c:ac:e7:ce:7b:76:81:df:fb:
e3:f8:fe:b0:e4:45:ef:cc:32:6a:ee:6a:9c:8b:39:
45:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9F:A4:C8:23:E8:28:1C:F7:EB:02:E8:FA:07:55:5A:CA:51:C9:B6
X509v3 Authority Key Identifier:
keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8f:3d:f0:4d:3c:3a:6e:62:50:09:47:0d:2c:20:1a:e7:9d:
2b:a6:9b:09:7e:27:d6:d3:aa:41:38:87:30:a9:62:8a:57:c6:
f0:be:3c:7a:f1:78:dc:9d:3c:2b:b7:1a:f6:25:06:a2:c5:31:
79:04:08:6f:58:f8:63:bc:eb:3f:ed:87:1a:10:94:52:3d:70:
ff:75:d2:44:f3:94:ee:2c:58:b2:f1:f4:94:8c:32:a1:67:64:
7c:4c:a8:c1:6d:db:e8:60:d7:ae:5a:88:9c:18:f2:f8:d3:b8:
1c:a1:5b:38:6e:16:22:2a:cc:d8:67:04:1e:a1:23:3f:b6:15:
47:ee:8e:2b:bb:d9:e8:ee:49:01:ae:bd:71:02:b1:00:ca:a0:
e5:12:b8:28:36:b2:f8:8c:98:5b:8b:a7:ee:38:f5:ba:c5:c8:
fc:33:29:8d:b7:b6:4f:d2:8e:8c:a8:f8:8a:41:30:89:ce:f1:
f2:6d:27:a0:77:3a:9e:fc:7a:cc:15:5d:b8:a6:4e:f5:1c:06:
7d:e8:3e:79:1a:5c:ca:25:8d:3b:2b:c4:0b:8d:13:b2:db:1a:
21:40:20:32:81:db:88:6c:77:7d:9f:95:17:c4:16:ee:bf:71:
36:50:80:a8:25:2e:f8:fd:4f:7e:0d:bf:af:d7:76:bd:d5:8c:
dc:7b:0a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:19 2025 by rpki-client