Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
File: uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft (raw, json)
Hash identifier: ZaeWyRXjWocZLzIT/SGtDx6jrYVPd1z2C0KQJWWHeFs=
Subject key identifier: 81:F2:42:2A:24:84:E6:F3:C9:43:13:BF:97:F7:5C:55:7F:EC:A8:E3
Authority key identifier: BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
Certificate issuer: /CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Certificate serial: 019510FDDA625ADB5B364AB0DACC2358AF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
Manifest number: 02D3
Signing time: Sun 16 Feb 2025 23:00:26 +0000
Manifest this update: Sun 16 Feb 2025 23:00:26 +0000
Manifest next update: Mon 17 Feb 2025 23:00:26 +0000
Files and hashes: 1: AHKOzgYDCyvjAkh-ui4tIs6DkuE.roa (hash: 4hfOmwMTypbmuLmMH8Qfr5/pQbm/yaKEh2rP/ouR/uE=)
2: uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl (hash: qjORvGjLLMqzXpjqgkH5B6P1M47lWg8XQKDIcnzI800=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:da:62:5a:db:5b:36:4a:b0:da:cc:23:58:af:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Validity
Not Before: Feb 16 23:00:26 2025 GMT
Not After : Feb 17 23:00:26 2025 GMT
Subject: CN=81f2422a2484e6f3c94313bf97f75c557feca8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:de:8a:19:2e:76:36:39:cc:e7:73:12:23:38:
19:c7:4a:23:e9:59:cc:1b:04:30:77:9e:e6:bf:10:
d0:ca:5a:43:34:6a:05:60:3c:76:92:56:bc:3e:34:
e2:68:f5:2f:04:50:58:1f:25:aa:f8:e4:08:32:8b:
66:45:02:6f:ab:5f:84:30:86:35:e8:85:bc:09:52:
5b:de:2b:bd:ea:bf:af:a8:4c:da:79:a5:8b:fe:68:
03:3d:01:04:4d:bf:0f:58:71:2c:64:84:00:2a:88:
e1:80:75:e2:9f:f9:66:a3:2b:e0:68:16:65:f1:dd:
af:b6:60:b1:7b:8b:0e:60:10:2d:7d:e2:87:a3:23:
aa:8f:9b:ce:5b:5a:3c:10:a6:29:46:e6:39:65:57:
2a:dc:3c:82:9c:f6:5c:6f:b6:b5:89:f3:8f:25:c9:
11:7a:3d:f1:ef:25:b9:a4:b4:51:c6:ac:7a:25:26:
27:17:98:d7:6c:84:7c:dd:36:e4:91:7a:72:7c:4f:
00:21:6d:70:35:19:8a:c1:7d:f2:56:9e:53:bb:4a:
53:4f:11:9f:33:cd:ba:5f:5c:4b:65:70:9d:f7:9e:
22:d2:bd:65:85:f6:61:2c:28:bf:b5:97:75:d9:ae:
d6:aa:03:c0:4a:f5:a1:18:c2:5b:9a:d9:b0:b0:54:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F2:42:2A:24:84:E6:F3:C9:43:13:BF:97:F7:5C:55:7F:EC:A8:E3
X509v3 Authority Key Identifier:
keyid:BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d5:eb:e5:6f:a0:8d:b2:e1:f3:24:e7:a4:70:d5:ce:53:e2:
8d:81:41:c9:7f:10:e1:be:fa:51:88:7d:5b:66:03:b3:d8:79:
c9:38:22:0c:42:ab:32:c8:6f:65:7b:0b:d0:07:8c:46:2c:66:
a9:9f:d2:5a:91:ba:ff:0c:7e:b0:35:df:a4:1b:6f:0e:91:36:
0a:bb:21:44:3e:9e:7f:34:25:13:9a:77:b8:1c:9e:f5:34:06:
da:c3:08:7e:2e:b7:cd:c3:c6:b5:18:76:65:ed:a3:22:9c:64:
3d:9a:1f:9e:d8:f5:84:e1:cd:e6:48:90:18:a0:e9:b5:3d:bd:
66:e7:71:55:56:f0:23:26:88:48:0c:76:8c:53:6f:9a:f2:f4:
5e:d6:f5:f7:da:f3:04:f3:4e:d7:8e:ac:40:c1:0e:4e:06:65:
04:25:c5:b3:2c:01:a1:ce:51:78:52:96:f5:86:72:81:39:0e:
f3:af:d8:bc:90:93:1e:44:52:e9:8f:55:3c:6c:c9:23:46:75:
b4:26:3d:bc:36:db:9e:4b:94:98:06:a3:a5:1f:02:c7:c7:ed:
f8:0e:e7:5e:fb:19:96:e3:e7:40:99:f1:ae:2b:e8:8a:2a:dd:
41:7f:f8:11:ac:52:a6:4b:59:67:dc:2d:af:79:95:03:14:25:
3a:89:75:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:01 2025 by rpki-client