Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: 1nWK6+hINd35s/cR4nhYUxdaA6NKb+m4VgF5rdrF7nI=
Subject key identifier: 21:CE:55:EA:36:49:11:AA:72:2F:52:4B:66:E1:87:99:85:B9:45:AA
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 019511A29ABF5C811BE346B7A12B148292B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 03D9
Signing time: Mon 17 Feb 2025 02:00:23 +0000
Manifest this update: Mon 17 Feb 2025 02:00:23 +0000
Manifest next update: Tue 18 Feb 2025 02:00:23 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: Jh/fqixeQLMqva26MZhwXz+GvDhJnIQXX2/Awb7lGec=)
2: MODcJVbQ7tIyULkAi32tBDPkIQ0.roa (hash: b4XxIhCxRBgha/DwCew59vKJiKvbCmMkhqVHdTGJTgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:9a:bf:5c:81:1b:e3:46:b7:a1:2b:14:82:92:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: Feb 17 02:00:23 2025 GMT
Not After : Feb 18 02:00:23 2025 GMT
Subject: CN=21ce55ea364911aa722f524b66e1879985b945aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:88:57:46:fc:2f:81:e1:7f:f3:9e:7c:cf:3c:
ab:6d:6a:ee:e8:84:b5:90:12:f2:9b:8b:82:79:69:
9f:34:b1:cf:1f:48:36:ba:71:c2:08:e8:c2:3f:08:
e1:db:99:50:4d:cc:bf:3c:73:d4:ca:40:3a:a6:df:
db:cc:9e:ed:7f:e2:ab:96:23:f1:f3:b5:cc:6c:5b:
e2:c6:01:e3:64:6c:d8:bc:37:32:98:d1:f7:52:e0:
d4:97:e7:17:e8:0b:ab:62:3c:6e:ec:34:e7:72:27:
78:73:88:b7:a5:26:48:b9:5f:ce:75:d0:b4:b0:a2:
8e:5a:ea:6b:5a:93:c7:89:c8:98:48:6b:19:c2:f0:
66:5b:12:82:0f:14:2a:2c:ec:ae:78:6a:ae:a8:1c:
39:fb:8f:c1:64:28:4f:e5:5c:a1:3f:4e:1c:d6:2e:
71:26:15:f8:38:7f:0a:35:29:d8:81:18:84:ea:b9:
be:a8:d7:aa:9f:62:95:d9:ba:18:c9:6f:8a:17:ab:
15:87:43:5d:4f:60:8e:a8:de:48:ee:75:d7:f9:00:
b4:4a:08:84:05:13:a3:b7:7f:7a:bb:14:43:68:53:
04:9b:a2:e1:00:b4:a8:08:47:7d:78:ee:67:52:44:
a2:7a:35:24:a2:7f:2f:c3:cb:a8:5d:2a:01:57:db:
67:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CE:55:EA:36:49:11:AA:72:2F:52:4B:66:E1:87:99:85:B9:45:AA
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:14:47:e3:71:c2:ce:6c:90:74:68:ac:fc:a5:54:68:a8:dd:
5d:e0:28:be:33:94:b1:13:27:41:09:73:da:21:18:14:fa:4e:
77:65:f6:3d:74:dc:b4:16:7f:44:f1:33:0d:f4:a8:e9:5b:79:
d7:18:3b:03:98:81:71:ed:38:2b:bb:8e:9a:4b:09:76:91:fe:
86:55:16:3d:f3:d8:16:9a:91:27:ad:14:87:b2:e5:a8:c7:82:
ae:a8:8b:01:2a:29:a2:ac:a2:34:26:0e:c9:fe:c5:1d:46:6c:
9e:0f:a7:84:3e:84:74:52:0f:5f:2a:3f:ce:70:64:4f:d6:12:
38:52:3f:05:24:2c:20:c8:62:67:e1:35:96:29:48:26:95:3c:
1e:55:87:85:08:6b:db:0b:d9:59:b3:10:97:7d:87:48:80:dd:
49:20:5a:29:72:98:0b:62:29:3e:83:2d:ae:d4:c3:ac:24:d9:
dc:1c:f2:23:bb:9b:f3:b6:a5:a3:0e:69:f7:1e:8e:06:a8:1a:
8d:b5:ca:8c:9e:ad:ec:cb:81:34:5c:cf:d1:b4:3c:da:75:ae:
86:dd:48:24:05:ab:5a:ad:ea:8f:8c:6b:21:be:63:88:37:8b:
28:d0:02:7d:1d:32:7a:98:d9:60:4f:f0:11:f9:2f:de:05:bf:
26:06:c9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:51 2025 by rpki-client