Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: oHndfs8g7bpHaiNIFAhi9isC6G7csF4yke/0hvdgh8M=
Subject key identifier: BC:C4:EB:1C:FF:14:56:0D:BE:20:92:62:76:06:BA:82:05:A4:93:BA
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 0195116BDD3948BF14CAB3630203925C5B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 115A
Signing time: Mon 17 Feb 2025 01:00:36 +0000
Manifest this update: Mon 17 Feb 2025 01:00:36 +0000
Manifest next update: Tue 18 Feb 2025 01:00:36 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: 27oz/XAEhsy945/ymEKqD3/KySSWL3MXxyxeL4k+P4I=)
2: JLTWHRuvioIZeiPuQHITq0nguEU.roa (hash: bk5yHjHsl6C1xvyULuJt1KQ0iqgopaEeKAR0yVznkzo=)
3: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (hash: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:dd:39:48:bf:14:ca:b3:63:02:03:92:5c:5b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Feb 17 01:00:36 2025 GMT
Not After : Feb 18 01:00:36 2025 GMT
Subject: CN=bcc4eb1cff14560dbe2092627606ba8205a493ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3e:29:2d:b1:a7:dc:02:94:65:5f:c6:f0:fb:
20:e4:9d:2c:73:4d:e1:5b:12:a5:2b:39:4f:97:df:
bc:f5:e7:1c:bb:57:cf:1e:0a:ce:40:c8:5b:1a:ef:
10:28:5a:e9:57:d9:8f:1d:1f:92:2b:c9:a1:d3:63:
83:c4:4d:e7:e0:c2:1b:ad:78:cb:88:f4:f1:e3:99:
26:80:41:2c:9a:56:99:e4:2a:dc:1c:ca:6d:85:60:
b9:e1:78:8d:e5:16:4d:22:2f:5a:5e:89:45:f2:b9:
0d:ca:b8:a2:c6:cd:86:69:3a:56:33:d6:32:6a:54:
1f:09:d6:72:78:d9:c2:b8:a5:37:8c:71:f3:ff:02:
03:49:8a:14:83:a9:bf:2b:7f:f9:ea:e5:d3:1b:2e:
12:4f:55:bd:16:5e:3f:10:15:50:89:3e:bc:b2:e8:
85:a4:1a:b7:a7:fa:37:51:c9:f4:51:12:c4:ce:41:
8e:0e:f4:8c:60:a2:ef:ed:89:48:64:2d:0e:0a:cb:
6a:dc:fb:c4:91:91:65:ab:bd:6e:8a:6b:8c:10:5d:
85:45:1e:0e:dd:e2:9f:72:9b:6c:e9:aa:83:de:48:
11:0e:f8:ae:d5:c8:e3:94:43:d0:82:a8:69:47:b0:
29:71:48:4a:f1:c3:11:60:1e:23:12:10:06:e6:f1:
97:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C4:EB:1C:FF:14:56:0D:BE:20:92:62:76:06:BA:82:05:A4:93:BA
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:91:90:98:14:de:45:71:9a:3b:b6:f8:96:a7:3c:56:88:fa:
0c:6a:ec:b2:0b:24:bd:8c:8b:e5:c3:61:6e:89:79:94:40:ca:
de:db:9e:9d:58:ff:9c:af:e4:12:43:27:f6:86:34:04:10:90:
09:94:2c:50:b2:8a:ef:a7:09:86:7c:56:58:fd:d3:01:c5:0c:
df:91:74:c8:2f:ad:6c:a7:63:9a:42:f9:55:2a:dc:e6:38:02:
33:19:d4:fb:1a:cb:af:e2:85:52:83:51:dc:b8:4f:68:23:ef:
1f:5a:81:f2:0d:f4:51:0d:b1:d1:68:d5:28:62:29:61:d1:c1:
79:84:7c:eb:36:a3:6d:c7:ad:b5:b7:15:8d:68:ae:ff:a0:99:
20:8b:af:58:93:0f:36:d9:98:d9:79:ec:b6:2d:a9:73:33:2e:
2a:a8:48:74:47:ef:a3:9e:60:f3:87:26:00:a0:fc:dd:60:f7:
ec:f9:5f:7e:de:23:b4:82:90:74:37:85:e1:40:e4:d2:a2:d9:
f6:35:6f:30:a4:1a:1c:df:3e:de:c9:f8:76:ea:74:d1:53:6f:
1e:e6:85:5c:5b:63:95:92:15:4b:f1:27:fd:9c:34:67:6b:cd:
fa:61:39:a4:50:06:e6:9b:cf:eb:44:b5:c1:96:a4:87:6c:a2:
91:25:53:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:23 2025 by rpki-client