Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
File: 1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json)
Hash identifier: Nh2W4jtYV4kw/Znrz+eHGmNkGDIl1pD/7L5OfcNVaOE=
Subject key identifier: 67:65:FF:DD:6F:1D:BC:ED:7E:91:5F:FA:13:81:FC:67:A2:3E:89:7C
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial: 0195108FE72B64654116DF8248C4794E23FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
Manifest number: 1455
Signing time: Sun 16 Feb 2025 21:00:21 +0000
Manifest this update: Sun 16 Feb 2025 21:00:21 +0000
Manifest next update: Mon 17 Feb 2025 21:00:21 +0000
Files and hashes: 1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: 81JxFcU41IBTxjAyEVFpFVFwCAOJg1l16qqOJfrunh4=)
2: jnyTmD1DxoXGsX8QKO4GFLyk0hU.roa (hash: VHKaN5/CfBmdBMdYUm6aa5suZnMbN/eE/uaYAJ9tsUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:e7:2b:64:65:41:16:df:82:48:c4:79:4e:23:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Validity
Not Before: Feb 16 21:00:21 2025 GMT
Not After : Feb 17 21:00:21 2025 GMT
Subject: CN=6765ffdd6f1dbced7e915ffa1381fc67a23e897c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a7:61:fc:be:0e:51:b6:b5:a4:df:c3:cb:09:
13:f8:e3:18:7d:9d:3e:8a:64:b8:90:bd:f4:df:62:
0f:46:43:0b:ed:d9:6b:3a:c8:03:cf:3f:46:7e:e8:
d7:b2:b3:4c:8f:65:1a:6c:ae:23:7e:38:a2:b3:d3:
8a:b4:18:0e:80:f1:50:bb:77:8a:65:6f:ed:22:e4:
a6:e2:ad:92:61:d4:24:80:e3:db:02:7f:a9:70:fd:
90:bf:23:c5:f8:a0:51:03:de:25:3e:49:8e:d3:45:
3d:d0:34:f9:6e:7a:9e:51:df:01:5b:fb:cd:03:3f:
55:63:c7:ea:25:f0:48:94:a1:d1:a9:ce:7e:07:94:
29:66:2f:25:0c:46:bc:b8:3c:06:a1:41:e8:70:da:
e9:d3:f1:68:5f:26:89:dc:5c:36:0c:02:9c:8f:a0:
15:c8:d0:fc:85:eb:f3:48:91:6b:cd:f3:85:5e:60:
70:f0:30:9f:a0:5b:70:c5:7a:d7:a6:bf:ca:14:1f:
30:a0:94:a1:91:2b:2d:5a:94:d0:8a:0a:ca:80:57:
c8:03:c2:70:a3:ce:92:46:ca:58:1c:67:88:1c:f7:
26:37:8b:d2:37:52:5f:0c:cd:af:43:a0:a4:93:9a:
bb:92:b6:b4:d0:09:c8:f7:e9:b2:14:fd:df:7a:45:
51:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:65:FF:DD:6F:1D:BC:ED:7E:91:5F:FA:13:81:FC:67:A2:3E:89:7C
X509v3 Authority Key Identifier:
keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3e:c0:dd:95:ee:af:11:ef:00:5d:0a:36:f8:d3:ba:6c:11:
17:48:fe:c6:1a:f3:27:c1:d8:54:db:8c:e1:6e:4d:d0:7a:cc:
5c:28:6e:7f:3b:b6:40:38:1f:ec:de:c6:3b:6c:b2:43:82:b6:
b4:b4:8c:bc:d3:2e:74:f0:3f:a7:2d:43:30:76:3e:a3:35:7f:
5b:76:7b:45:9e:35:ea:67:37:56:91:d1:f9:4b:b9:ff:b2:90:
b2:3f:ea:a4:5c:7c:ff:52:41:ed:31:f7:a6:d4:aa:a8:77:9f:
ad:d6:ef:45:58:4c:6e:21:30:87:a0:6c:7c:86:0b:3e:8b:8c:
9b:9c:16:4d:66:39:ea:ec:4a:be:1f:54:ef:2b:30:30:a2:2b:
e8:9f:1c:ca:f4:a2:85:a4:b0:6f:f4:d2:3a:cc:49:10:a8:46:
aa:61:0d:6b:a3:d6:59:ee:d4:6b:05:fa:73:89:72:6c:6e:e1:
1a:26:d2:c0:6f:b5:fc:eb:a6:70:9f:86:0b:c3:21:24:3a:a4:
1b:d8:1a:34:5f:ae:e0:63:47:4a:84:34:f1:03:8e:03:eb:1d:
49:e5:4d:5f:d8:22:91:7c:4e:cc:31:7f:e7:ce:2f:1c:40:cc:
c8:67:80:bf:d1:60:2d:ff:97:ec:8e:51:49:33:32:3b:8e:df:
3a:2b:d3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:40 2025 by rpki-client