Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File: sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier: PnjSCyVPY0SPzhp2Mc++QT+72EcnrCd23IKK1ckMJeM=
Subject key identifier: 21:A8:35:08:8B:1F:16:6C:81:09:A2:FA:FA:4F:57:7E:3C:62:C2:82
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer: /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial: 019510FDA94F4A09FE9B1F9FE8933F60DD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number: 0DBC
Signing time: Sun 16 Feb 2025 23:00:14 +0000
Manifest this update: Sun 16 Feb 2025 23:00:14 +0000
Manifest next update: Mon 17 Feb 2025 23:00:14 +0000
Files and hashes: 1: VXSaoq70xTeN6W3C76eUA8OC5cU.roa (hash: vEwflplyRjS2mkClV+Bpny4Bw/QU3HBBti723DFTvj4=)
2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: iPldycp/YrYO4Acg0B4Iit8BY19t1kW91MJAk7TtXOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:a9:4f:4a:09:fe:9b:1f:9f:e8:93:3f:60:dd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Validity
Not Before: Feb 16 23:00:14 2025 GMT
Not After : Feb 17 23:00:14 2025 GMT
Subject: CN=21a835088b1f166c8109a2fafa4f577e3c62c282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:f6:3a:7c:ae:79:91:0b:b8:35:cf:4b:af:
df:f7:2e:dc:0b:5c:71:f9:04:7e:28:7e:22:61:2b:
f2:41:83:4c:10:24:df:a4:fc:ab:df:ec:77:b0:00:
1b:9e:dc:c9:78:c8:c4:fe:1a:df:71:db:64:6f:ba:
96:d9:2c:e8:88:89:1c:d5:96:f9:ab:19:57:76:6e:
f7:c6:3f:d7:13:1b:cc:93:10:38:be:17:87:61:84:
07:fe:41:ab:a7:cd:a3:2e:b1:30:3b:72:db:75:66:
11:ea:18:e1:36:4d:4e:10:bf:11:25:1f:82:5f:9f:
f3:83:b9:e2:94:bf:2a:e4:86:a6:49:50:24:f9:f9:
07:c6:4f:ab:da:23:b2:00:09:07:69:7d:e6:33:36:
cc:46:b1:85:fd:56:43:8c:75:a8:2b:ec:48:76:ac:
f4:29:c5:c4:61:97:bb:b2:5d:52:ff:23:e5:eb:b5:
0e:a7:a6:10:89:49:30:7a:e3:cd:b9:ae:ba:0e:fb:
05:b5:fd:a1:18:b5:20:4e:7c:3f:aa:d5:85:16:d3:
f2:1e:b8:04:d7:c9:60:7a:6d:0f:2b:9a:90:83:fb:
fa:c9:43:68:7f:52:9c:8d:92:6d:92:fb:76:fe:f4:
43:cf:dc:0f:b9:80:8b:a9:c5:fe:d1:46:34:45:2e:
7a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A8:35:08:8B:1F:16:6C:81:09:A2:FA:FA:4F:57:7E:3C:62:C2:82
X509v3 Authority Key Identifier:
keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:23:24:f2:17:a2:e0:f8:89:d6:af:b7:75:2c:8e:27:25:b2:
87:e2:e7:ec:d2:21:a3:30:81:9f:2f:3b:fc:1b:73:56:72:1e:
d0:2a:91:9f:4d:0e:11:da:57:f1:ef:1e:6a:09:28:69:0a:e7:
2b:bc:83:fc:c4:79:e4:0d:d0:a0:c9:d8:56:bc:40:22:83:17:
f0:06:49:48:b4:24:5c:3d:7f:85:73:30:61:f0:df:b9:94:0b:
44:f3:72:b8:64:9f:45:eb:ae:0d:ad:ed:2a:cc:82:b3:3a:18:
98:06:a1:68:28:20:39:91:45:1d:0a:47:8c:3a:1a:16:86:2b:
69:3d:7d:87:fa:c1:84:25:45:b3:cb:ea:02:1a:4f:7f:3f:e8:
d6:6e:2c:f7:50:63:f4:1f:b4:6a:93:18:e5:01:84:5e:f6:86:
4e:dd:48:c0:71:d1:da:4b:d9:db:b0:65:2c:5d:33:d2:9a:f1:
2f:3a:b4:b2:e3:26:22:37:e5:05:2b:cb:93:28:f8:f2:54:36:
50:cd:59:b3:ff:b6:ef:c3:01:e4:b0:df:9e:f4:5f:bd:dc:96:
b7:4f:af:0f:16:f2:19:e7:ae:8d:e9:af:fb:6a:1a:b8:b1:cd:
32:a6:66:82:be:2f:24:1c:59:3d:3c:86:5e:61:9e:85:9a:ae:
ab:85:38:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:30 2025 by rpki-client