Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File: myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier: 8XWuK3neIgworl3ce4U/PyUcCNoaofSO/iV2bJx/uIc=
Subject key identifier: 89:84:B8:8E:85:82:23:06:9F:6A:43:6B:B3:11:83:4C:8F:F3:18:9D
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 019511D9718CF85DCC87281E03714CA7EE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number: 145C
Signing time: Mon 17 Feb 2025 03:00:17 +0000
Manifest this update: Mon 17 Feb 2025 03:00:17 +0000
Manifest next update: Tue 18 Feb 2025 03:00:17 +0000
Files and hashes: 1: 0-dFdMQBS6PQc_H8zCEvitr9Geo.roa (hash: wf7BGdUuzEvUWE1tRs5aPe5d6Kbqkjno2v5St+tRxhA=)
2: k0CTtxTXl1I48Yds1A8KTpGHtHs.roa (hash: rvbxHdqMX6z0CUCjYmQxK28vPcZ3o/9PHD7dLaG7th4=)
3: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: loEXFiruA67qlvaanT1t88vWqxoewx03F1BWB49096Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:71:8c:f8:5d:cc:87:28:1e:03:71:4c:a7:ee:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Feb 17 03:00:17 2025 GMT
Not After : Feb 18 03:00:17 2025 GMT
Subject: CN=8984b88e858223069f6a436bb311834c8ff3189d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:cf:5e:c7:ff:da:d3:1e:d1:86:35:b0:42:
b5:ba:2e:e8:fa:24:0d:bc:ca:e5:23:2c:ed:f7:21:
b6:b4:7d:a2:22:0c:6b:05:60:2e:7a:f8:12:6a:25:
b8:22:c3:b6:fa:8c:05:cd:24:f1:74:d1:77:b6:a1:
87:0d:01:23:b2:7d:04:98:a3:9d:ad:e7:78:bd:c6:
2f:0c:d7:1c:17:ca:cd:07:38:7a:27:76:57:6c:93:
65:d9:97:97:d3:44:b5:40:87:0e:d9:9a:b9:09:f2:
27:80:d3:b7:5b:d6:3c:01:16:ab:17:95:47:61:6f:
7c:e7:5e:7b:d9:c5:57:8e:78:76:ae:33:b3:e8:0c:
8d:ce:ee:aa:76:73:74:8d:2e:43:1b:a9:6a:4b:7d:
2b:5e:15:33:51:1b:b8:32:5e:a3:ad:a1:4c:2e:26:
72:8f:ba:d1:4b:d4:63:3d:b9:43:67:18:08:56:5a:
ac:0f:72:3b:ea:2a:4f:14:90:2f:1d:ad:a8:5d:f7:
2a:37:e9:d2:9c:54:13:17:c0:f3:40:77:60:db:6d:
8a:f0:2d:69:85:c4:8c:ca:52:bb:6a:f1:7d:a2:d7:
30:63:52:11:32:24:f9:65:63:aa:15:f5:2d:18:5b:
5c:50:b2:7b:a8:94:9b:5b:f4:bb:59:4b:93:7f:b0:
07:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:84:B8:8E:85:82:23:06:9F:6A:43:6B:B3:11:83:4C:8F:F3:18:9D
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:df:bb:39:76:b1:a6:77:a1:10:45:9c:f0:14:4c:8c:98:88:
37:4c:8f:ab:d9:4f:d9:17:11:28:f0:c1:eb:21:3f:42:00:ec:
57:55:7c:94:45:1b:30:bc:dd:13:40:bb:67:f9:3c:da:32:54:
73:a7:90:40:4a:cb:ab:9f:65:12:be:3e:e5:00:c7:95:2f:cf:
49:c2:e8:d0:9b:e7:c8:a2:ed:39:9a:f1:a9:4c:1e:d7:6b:dd:
3d:57:1f:32:f1:ca:f2:11:60:95:99:a3:c6:2a:c0:39:a5:57:
9c:36:a9:c6:a5:f7:ec:38:71:ea:5f:ef:24:a2:c7:8a:9b:78:
cd:91:c5:54:37:ca:d6:7b:0b:5b:b8:e1:b6:63:e0:22:3b:97:
3b:b9:3a:24:d7:7e:86:bd:cb:11:d0:6f:7f:1a:a9:b5:2c:77:
fe:f2:d1:5b:0b:8f:f9:ce:0b:ca:ec:10:63:14:12:cd:42:3a:
f7:ea:f7:14:a8:71:bb:7d:2b:48:08:29:09:a9:08:89:06:c3:
28:19:18:d1:75:20:45:d3:b2:de:3e:3e:f3:95:5f:53:4e:d6:
f3:e8:4c:db:a7:be:bf:d6:54:99:e4:7f:f7:4d:35:73:95:f1:
02:cc:25:c9:ca:09:10:27:15:1a:a6:1f:8b:ac:ce:1d:8e:b4:
1f:4b:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:25 2025 by rpki-client