Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier: mGsEme69Ige2NaNSSIiMHXaaQLwsO9ipv5z9O9X0dB0=
Subject key identifier: BF:74:3A:0E:D9:55:1A:35:80:1A:C8:AD:B5:E8:A0:10:81:8C:C0:99
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 019512103FC15E718C8061324AB41348505D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 04:00:09 +0000
Manifest this update: Mon 17 Feb 2025 04:00:09 +0000
Manifest next update: Tue 18 Feb 2025 04:00:09 +0000
Files and hashes: 1: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: qKIDRxZYvQlgp15xU/1jfXyv+n3FPYI1k0ClmNoneZQ=)
2: lEn451-XXHlherUNQr8Rc0JmU5c.roa (hash: kIpdRfZGgcVE/RkoYxVB/7zTwiZiv41Cisi6L8BZjv8=)
3: z-VHazRi4J3dfaKu9uPEdEUaUxE.roa (hash: d/YBGA/H3W0HjGNcA5bYsjIVUAEfDekBGnTdNyMczFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:3f:c1:5e:71:8c:80:61:32:4a:b4:13:48:50:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Feb 17 04:00:09 2025 GMT
Not After : Feb 18 04:00:09 2025 GMT
Subject: CN=bf743a0ed9551a35801ac8adb5e8a010818cc099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:3c:aa:9b:c5:ad:34:d6:7f:b2:25:5a:fd:
17:ef:3e:f0:36:7c:6e:62:2c:0e:88:40:81:ec:23:
bd:09:e9:73:37:74:9f:35:d7:97:5e:0d:b8:83:0d:
f3:ce:90:12:41:4a:65:5a:c1:bd:0a:d2:eb:c3:81:
73:56:cb:38:c7:26:07:e0:ac:e4:ff:11:01:e3:19:
55:24:7a:be:ad:8f:44:7c:bd:82:c8:66:90:50:70:
e2:80:5b:b0:f8:1d:15:bf:04:48:f5:7e:f0:b0:21:
9f:4d:04:1b:45:76:3a:ff:fa:71:e7:fd:1f:37:59:
c5:8d:13:b9:86:21:b7:25:87:c8:3d:97:6b:d7:fa:
02:c1:48:c1:11:36:e9:41:0c:92:0b:e2:fb:d5:9c:
2d:76:bd:4e:9d:58:6c:64:91:6f:7a:d5:ae:ad:9b:
61:2b:21:0a:20:67:1c:29:f9:e0:ba:81:74:a6:25:
65:24:ec:07:f3:81:c2:e6:23:25:a5:0a:a9:59:c0:
84:47:c4:b9:51:ae:9b:0e:13:12:13:e1:0a:81:66:
fd:d5:d6:fe:d4:d8:90:77:b1:e7:51:da:10:6c:1b:
3c:f8:5e:84:6d:02:bc:65:3b:1d:50:1f:21:28:1f:
fe:27:87:7c:c7:9e:e4:cf:9a:40:a1:e0:58:2b:2b:
54:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:74:3A:0E:D9:55:1A:35:80:1A:C8:AD:B5:E8:A0:10:81:8C:C0:99
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:64:ea:88:99:7b:30:27:61:18:7d:7c:bc:bc:e5:93:3b:0e:
88:ab:59:a7:86:90:cd:6e:68:45:3b:5c:6d:fc:ee:f4:c5:56:
07:03:7e:bf:b6:bd:4b:d7:74:10:e8:29:d7:65:ed:e4:b9:cd:
23:54:fe:74:53:3c:4e:4b:cc:cb:0a:2e:2b:56:01:9e:7a:52:
f1:28:6a:40:0b:a4:af:06:53:2f:b0:91:2e:04:37:b2:f7:e2:
63:7f:0b:a3:47:38:8f:08:c0:21:ac:64:4e:c5:27:d3:10:92:
91:c0:65:83:68:ec:4f:7e:40:77:b8:0b:6b:20:97:87:8e:0a:
65:2f:69:e5:11:19:2d:d8:ba:9f:85:a4:63:27:90:31:40:01:
10:02:d6:e9:b7:74:2a:a4:12:c7:a2:a6:8e:b5:63:5a:95:db:
fd:0c:b3:42:d8:d9:63:89:15:59:c9:6c:29:f8:eb:71:5f:90:
ad:d8:10:36:2a:59:60:e5:9d:89:d9:23:85:44:02:2b:3e:29:
42:05:8f:52:68:af:54:83:dd:ba:42:10:f9:17:6b:74:ba:20:
a2:66:e4:e6:ec:48:7f:7a:82:29:4d:4c:69:4a:8b:92:16:56:
fc:2b:c1:52:47:e6:02:fe:0e:25:07:15:55:41:52:2c:1f:f0:
98:67:b5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:37 2025 by rpki-client