Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json)
Hash identifier: nFve7azS9kAI1kYMGPCIERXpSM8XA2bYfoPezQGn674=
Subject key identifier: AD:7E:9B:75:1F:7B:54:B4:F4:27:25:4D:90:82:7B:84:F0:BF:44:87
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 0194C3BE319252C7BC4D1447F660A210E596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
Manifest number: 8D
Signing time: Sat 01 Feb 2025 23:00:09 +0000
Manifest this update: Sat 01 Feb 2025 23:00:09 +0000
Manifest next update: Sun 02 Feb 2025 23:00:09 +0000
Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: uLhsNbyIYwSDf4bRlkl7N4m2VL6SBaA6sRGePWFUroY=)
2: iJ7kty974jPkWgzxQa34AvpfJzg.roa (hash: f39eViBwQsbAY89QmdcG3WCS0jbc3aqJWKGT/0jNv9U=)
3: nya5VnmImUQCPczzWGzozyYmAoM.roa (hash: qg+/w/vLW7M/opQjKzbc9S+ktTmX4UXhPUmqd4d4i7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:31:92:52:c7:bc:4d:14:47:f6:60:a2:10:e5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Feb 1 23:00:09 2025 GMT
Not After : Feb 2 23:00:09 2025 GMT
Subject: CN=ad7e9b751f7b54b4f427254d90827b84f0bf4487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:d2:36:a8:bb:0a:03:de:d5:03:97:6b:fb:
a3:b7:5f:5a:3b:ca:ee:67:ee:10:d5:14:46:f3:29:
a3:ce:01:52:36:21:fc:26:e8:7f:18:a5:0d:e3:2f:
7c:5d:74:65:23:c1:e8:c8:8d:66:11:58:81:c3:30:
42:c5:fa:17:ef:d8:ff:9d:b4:f6:88:cb:65:55:3d:
b6:b4:29:12:af:8e:52:c0:61:67:6a:55:c6:63:89:
e5:81:9e:08:a2:1c:c8:65:b5:71:20:2c:fe:79:4f:
98:43:23:22:52:58:68:97:06:dc:b5:90:76:c2:75:
d0:c6:59:ec:c7:86:a6:17:73:4e:79:12:1c:fc:ad:
6c:1b:0e:d7:8f:7b:47:2a:c2:9b:0f:ab:b0:ad:cf:
1b:98:c4:d9:a1:75:5c:79:6a:63:a2:27:fe:fc:c2:
59:8e:3e:f3:7b:d9:3b:2d:12:7c:99:75:d3:59:da:
4c:42:2a:a8:19:be:d4:38:e2:fd:a2:5e:e6:28:38:
e6:1d:f4:56:42:f4:0e:8d:da:2e:90:40:f8:fc:3c:
3b:db:ef:40:d9:fe:23:75:0b:11:2a:d5:01:7d:7f:
c9:b3:48:7f:87:61:e3:36:36:53:e4:9e:dc:f0:9e:
d2:ed:5a:71:52:c2:3a:88:6b:e3:60:9e:05:15:41:
93:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7E:9B:75:1F:7B:54:B4:F4:27:25:4D:90:82:7B:84:F0:BF:44:87
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a5:59:00:83:4a:14:01:25:c1:35:ab:e2:2a:d5:db:e8:4b:
df:7d:68:5b:cb:3b:95:25:bc:22:82:4c:95:db:44:bd:50:f0:
26:1f:8f:4c:a7:35:be:08:0e:ba:bb:74:47:fd:17:43:9b:62:
41:47:60:1b:e7:55:b6:d8:18:5e:6e:83:d4:ce:b8:97:55:1d:
0a:48:a7:02:9e:2f:5b:ba:6e:04:3b:79:b5:f9:5c:e9:e5:4b:
f3:9d:3c:9b:aa:83:69:a1:74:f2:fd:e1:9d:03:81:6c:86:ff:
8f:cf:fc:41:ac:d2:73:f7:fe:9f:7a:a6:4e:5a:51:65:c7:72:
c6:17:2f:f1:74:24:c7:d1:5a:31:81:7f:57:16:6c:f9:f4:e5:
42:79:2e:8e:ba:b2:40:b8:2d:62:75:46:92:ec:1e:6f:24:eb:
6b:f8:33:8b:67:19:ee:dc:64:78:0e:31:14:8d:c2:b9:08:5e:
f8:e0:5c:7c:c1:27:f6:d2:d9:09:f4:88:ae:eb:63:b9:ef:d3:
aa:83:b8:fd:51:f7:c8:ad:ce:be:01:08:4c:ed:3b:de:c3:f3:
26:fa:5d:35:d9:a4:a9:5e:4a:89:ce:7b:39:77:bb:87:42:2a:
3d:64:fd:05:b7:09:76:9a:36:8a:34:7d:89:33:4a:9b:0a:3f:
a9:43:17:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:05 2025 by rpki-client