Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
File: sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json)
Hash identifier: BFG4/+v1h/kzQY928NAMeLHYqRX5E5QOCmvwDCcze68=
Subject key identifier: 23:DC:E2:83:C0:64:EA:C9:75:0D:A5:6A:F1:68:D7:EB:96:16:96:54
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 019511A29E964E9EE6B5CDAC41C216647E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
Manifest number: 0EE3
Signing time: Mon 17 Feb 2025 02:00:24 +0000
Manifest this update: Mon 17 Feb 2025 02:00:24 +0000
Manifest next update: Tue 18 Feb 2025 02:00:24 +0000
Files and hashes: 1: SEy_q8yasarL4vhAyv6DcTF7WB8.roa (hash: B1SRh1WwCZtBHMAKkgvifQJ/iJUggGCgGgLLkNss5Nw=)
2: ahvH7VwsREz5RE_ZFd3kIxelgEQ.roa (hash: udwWfKom+EbN8jk91UYE1hrtLtfJILvdv1JBZTIFT0w=)
3: qFzA_pZ_xGWwQzfJMInzfWDKkuQ.roa (hash: 9OvJ6Tjvc0ybgSO+B/2T4VgdwfSjKx3tRoZuZYIdcTc=)
4: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: nATjfjiASaFStQEnf8uGH4Jn512wW1zpXNK1Gct1DUo=)
5: wZzuntLr1Qz8EEQrI8gaxN9PJzk.roa (hash: /amIoY3uoWrTi9ErwL/m7gwpV0plV6uE2N5Muk44yLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:9e:96:4e:9e:e6:b5:cd:ac:41:c2:16:64:7e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Feb 17 02:00:24 2025 GMT
Not After : Feb 18 02:00:24 2025 GMT
Subject: CN=23dce283c064eac9750da56af168d7eb96169654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:98:6c:7b:90:e5:1e:bd:ec:9d:50:04:6d:
e9:2a:7c:ae:a0:7f:6d:f6:86:e6:c0:95:a4:34:a1:
e5:d9:26:e8:b0:4a:79:97:0a:32:80:ea:00:f1:53:
8b:e9:d8:43:cc:6c:35:c8:e1:81:89:7f:6d:0f:0b:
07:17:0d:90:12:e4:fe:d0:9c:7d:9b:14:83:4f:40:
f4:96:45:43:cf:5b:ad:f3:4a:ea:c3:49:fe:f7:f0:
18:a5:9f:7e:41:77:c6:17:d8:5e:1c:61:fc:d8:b1:
c3:d6:25:47:2e:80:16:c1:8a:5c:e5:15:42:e2:67:
71:53:fc:7e:97:74:97:9a:63:96:d5:60:1f:f5:c6:
02:49:81:85:8f:dd:3b:40:dd:97:02:3a:7d:29:e2:
a8:b1:1a:17:1b:06:0b:69:c9:8c:e3:db:5d:a5:df:
11:8c:f7:46:c6:87:e0:0a:00:29:84:d0:69:9d:14:
5a:be:43:fe:32:c3:f5:a2:2a:ed:36:17:a6:fb:67:
77:09:11:1b:78:1a:8f:b5:d9:37:52:81:66:71:f6:
d3:fd:68:dc:9d:6d:bf:6b:61:12:34:f1:be:6e:a3:
cc:8d:ee:91:eb:1a:f9:57:47:8b:2f:5e:30:9c:cb:
b6:38:40:3a:7e:9c:e5:73:6c:55:00:88:95:d3:a9:
0d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DC:E2:83:C0:64:EA:C9:75:0D:A5:6A:F1:68:D7:EB:96:16:96:54
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3a:5c:0d:0f:03:b9:eb:ec:f1:02:34:0a:a4:98:9b:37:2a:
6b:c3:35:a8:9e:16:3e:b2:36:7a:53:61:80:bb:65:2d:43:55:
b6:d8:8d:4c:dc:e3:78:d5:5e:78:74:21:5c:fd:d4:e5:34:39:
f3:10:d8:fb:4e:4a:60:74:2e:32:bc:46:16:07:a9:1b:97:c6:
da:ce:d5:cb:71:6e:3a:77:8c:65:b9:f0:e7:fa:a3:f0:83:31:
af:3e:9d:09:77:61:c2:8a:bc:97:a4:8f:b1:88:8f:f1:30:3a:
c5:eb:bc:1b:8d:e7:53:d9:29:67:b6:3e:77:5b:8c:d4:cc:82:
f6:51:a3:a5:c5:2f:f2:6b:9d:92:de:b4:ff:5f:e5:c2:90:41:
69:81:86:b2:cf:1f:f0:d4:6f:04:d4:fc:55:2f:d7:f5:eb:d9:
74:64:36:d5:a5:39:fa:59:46:74:9c:31:f5:bd:5a:78:c4:47:
19:a1:ec:29:98:26:00:35:ff:bf:8b:cc:84:94:ae:f2:06:cf:
cb:c2:9a:3b:7b:fa:8c:1a:27:3c:00:19:d4:0f:85:5f:96:d2:
da:c5:94:23:dd:c1:94:45:47:1c:f3:41:eb:ed:f1:57:db:36:
65:1f:09:cb:08:78:3b:b9:d4:0a:4a:b6:fb:89:58:e9:fe:74:
18:37:ac:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:16 2025 by rpki-client