Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: xWxeZCATZcGHxL6bx39ICCXf2Td6N1NSuplwsEmUvzs=
Subject key identifier: 33:5A:2B:C7:3C:1C:86:AE:51:B3:FE:DC:AB:5C:D2:1F:58:6C:67:F2
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 01951210B4B6CDCFB72A07211605B8CAF017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 11FE
Signing time: Mon 17 Feb 2025 04:00:39 +0000
Manifest this update: Mon 17 Feb 2025 04:00:39 +0000
Manifest next update: Tue 18 Feb 2025 04:00:39 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: T4bQv0+eXsiNjQLnZwRWHdnliCVOeGVcJLnMQhs9dNc=)
2: JYVK5YIo9oFduSfdge32BhR1llk.roa (hash: MLgxgkj7xVD4j08JzP+4k7sw1diRLF6XHz+tW1zn9ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:b4:b6:cd:cf:b7:2a:07:21:16:05:b8:ca:f0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Feb 17 04:00:39 2025 GMT
Not After : Feb 18 04:00:39 2025 GMT
Subject: CN=335a2bc73c1c86ae51b3fedcab5cd21f586c67f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:b0:45:a1:3b:d2:24:99:da:0b:ff:d8:ca:
7f:0d:bc:9f:52:0d:d6:46:e8:49:61:e0:45:88:d0:
17:8a:ee:32:57:d6:a1:66:dc:1a:e4:9d:ed:99:24:
9b:2c:a5:e7:0a:7c:29:63:3b:b1:5a:d8:22:da:88:
bb:02:bc:2e:a7:91:f3:75:7d:ef:f0:28:7a:ea:23:
ff:ca:f2:0c:28:08:05:6b:e0:0a:29:8b:07:69:86:
92:2d:f2:f6:7e:da:9d:ab:38:66:5e:49:c5:4e:5c:
dd:fa:92:a5:2e:c7:51:bc:1e:11:70:1d:f2:64:e3:
60:20:08:9e:9a:bc:bb:88:c1:39:3b:84:99:a9:07:
c0:58:f7:5c:00:14:b8:c2:be:1b:46:08:11:d2:18:
b5:e5:1a:b6:bd:81:6e:40:41:44:21:f4:04:d2:3f:
5c:b6:e9:9f:2d:c9:bb:70:90:3e:9b:6d:7a:54:8a:
a1:39:76:9a:8a:ed:6e:06:81:10:7c:e3:a0:97:af:
8c:89:24:e9:bf:bb:f7:94:2d:44:dd:35:6c:6e:2b:
9a:31:50:c6:26:3c:6d:9c:37:a9:99:02:91:27:d8:
07:44:5d:3c:6c:45:b0:bd:9c:76:fe:00:08:e1:68:
f5:f3:69:8c:27:e1:b1:2d:f4:f2:60:01:18:45:fc:
fe:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5A:2B:C7:3C:1C:86:AE:51:B3:FE:DC:AB:5C:D2:1F:58:6C:67:F2
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:9b:4c:51:93:34:a1:47:68:a3:8b:a3:01:da:b6:7f:c1:d4:
e4:00:ef:64:d2:77:04:35:3b:82:88:73:48:bf:08:b6:d1:67:
88:0d:77:fd:54:13:ab:3f:34:90:67:02:2c:a5:fd:4f:7a:88:
5c:0f:88:d3:83:50:ca:65:61:cf:85:24:cc:db:9c:b1:5d:50:
fc:1d:c5:cd:2b:d3:8c:23:58:cf:e5:6f:66:5d:9a:fe:c0:8a:
0c:de:91:b1:7a:d3:4f:d7:20:06:2a:74:72:ee:eb:04:17:ee:
ba:60:14:2f:b5:a5:15:0e:6b:54:2c:d4:23:87:e7:46:6b:4e:
f1:95:67:8d:c2:78:90:da:4e:cc:25:11:63:2c:6e:cf:d7:05:
b4:e7:ae:2a:cd:82:6b:a9:be:9b:79:97:3d:00:02:20:3b:66:
30:5c:75:ac:27:c6:62:77:72:f0:cf:66:d7:11:43:f0:98:93:
ea:3c:14:4d:97:74:e5:c0:60:03:c4:5a:c9:61:97:3c:5f:52:
6f:66:8b:82:d3:03:44:2d:10:5f:3c:dc:f8:7b:63:4e:5a:2b:
82:56:5a:2e:99:2e:12:df:7e:74:99:09:07:92:19:a2:09:09:
fd:a3:c8:46:f7:15:ce:d8:f4:60:38:b5:dd:ad:f1:fa:87:d2:
21:74:af:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:46 2025 by rpki-client