Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
File: RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft (raw, json)
Hash identifier: 8l0jbnCd3V6T8DZFrBbEzxm1JMSSLXnrPXVR5riL0SI=
Subject key identifier: BE:89:2B:BC:4C:55:7E:47:D0:3F:56:B0:50:8B:9D:9E:7B:96:97:68
Authority key identifier: 46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
Certificate issuer: /CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Certificate serial: 0194C350EFB714DBAC6A88C5B29ED186D6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
Manifest number: 94
Signing time: Sat 01 Feb 2025 21:00:48 +0000
Manifest this update: Sat 01 Feb 2025 21:00:48 +0000
Manifest next update: Sun 02 Feb 2025 21:00:48 +0000
Files and hashes: 1: 1-LEezNtaqjy169gIk46UkSGODnI.roa (hash: FRFupvefU0HUQnLO8y2fwT4i2INskAlpIVZPmaI9wtE=)
2: IrF-9wkj7eNtv0srLfHPyI1GtTA.roa (hash: mAMlIob8u84HdQAxB78nZwUMGcefLJXlEaHY1RBkM0I=)
3: RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl (hash: wvs+kSmL9DxZXVkk0af0OcbqGRu1dUP84Ew1AXOocjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:ef:b7:14:db:ac:6a:88:c5:b2:9e:d1:86:d6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fbcfc13d4d5ff6d37c226f11e121204c367d17
Validity
Not Before: Feb 1 21:00:48 2025 GMT
Not After : Feb 2 21:00:48 2025 GMT
Subject: CN=be892bbc4c557e47d03f56b0508b9d9e7b969768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:5a:bd:1c:0a:e4:8c:17:08:1b:30:52:b5:
5e:c9:53:bd:5f:dd:47:59:fd:c2:5b:15:63:ec:2d:
ad:eb:18:8e:8e:6a:8d:9c:47:47:d8:c2:a3:5c:8b:
7d:7a:54:bd:39:65:40:41:3e:4e:8d:18:ce:11:91:
a3:8f:7f:5c:c9:42:ce:6e:18:08:47:6c:a5:81:23:
08:bc:17:aa:20:5a:24:35:fe:91:1d:b0:30:c2:26:
43:64:5b:31:7a:2b:0d:d3:c1:e8:81:47:a9:e6:f6:
42:a2:10:dc:07:68:06:11:2a:72:9a:b5:56:19:50:
9e:89:ef:0b:37:1a:c9:76:cb:8a:03:52:98:cd:78:
f5:3a:08:8e:3a:4c:c7:d1:2d:b8:b4:ef:fd:aa:11:
64:8e:c2:5e:6d:72:44:59:13:e8:b7:22:80:11:aa:
7d:8b:ce:b2:10:41:a0:f4:ab:cf:0a:4b:3c:9b:ac:
27:2a:17:b1:a7:1f:36:64:03:2a:53:a3:e6:c4:dc:
2c:a7:a7:f6:4f:08:d4:1d:83:37:98:70:9b:5a:85:
65:7e:c6:28:46:70:a0:c2:16:bd:72:3d:95:b5:f0:
9c:55:02:30:dd:39:4c:90:56:39:4a:c9:b0:53:53:
83:73:94:2f:9a:35:fa:2c:81:26:0c:54:27:65:91:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:89:2B:BC:4C:55:7E:47:D0:3F:56:B0:50:8B:9D:9E:7B:96:97:68
X509v3 Authority Key Identifier:
keyid:46:FB:CF:C1:3D:4D:5F:F6:D3:7C:22:6F:11:E1:21:20:4C:36:7D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvvPwT1NX_bTfCJvEeEhIEw2fRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e935b-2340-4806-b33b-faca0eb3357d/1/RvvPwT1NX_bTfCJvEeEhIEw2fRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8c:e9:c3:0c:19:3f:a7:0d:e7:55:03:03:3a:65:01:b7:35:
97:55:56:e1:60:06:38:63:2e:fa:2c:d9:9e:26:ff:c8:58:d7:
10:1a:16:31:b0:8c:bd:c7:28:7b:0a:55:77:3f:b8:b8:5d:be:
a0:f5:6a:32:44:31:af:b2:bf:30:3d:c8:ae:6a:af:b8:10:69:
e0:65:2b:7c:c2:eb:b0:fe:b5:77:96:13:c7:a9:c0:4e:1f:55:
bf:07:13:c0:32:fa:c1:70:32:1e:6c:93:8c:ea:c2:88:eb:91:
83:b7:61:f6:29:35:37:24:15:99:79:fd:37:a2:27:9d:fc:1c:
10:e5:72:27:95:69:c6:1e:9b:0d:be:f7:c3:28:d2:7b:c2:9c:
5e:f3:c5:8b:9f:12:bc:87:fa:f5:1b:2b:d4:a9:56:f4:34:bb:
99:54:10:ae:fc:63:7e:88:2f:ba:c9:c2:88:35:74:b1:69:24:
9e:5d:cf:5d:ea:a1:ea:9b:f7:ee:50:91:4a:28:36:22:58:74:
94:86:2c:d8:92:17:14:7d:6a:62:1c:cc:1b:5d:2a:6b:ac:90:
ef:6f:6b:be:b0:a5:50:fa:61:47:dd:dc:8d:27:7c:5e:4b:d7:
5b:25:61:19:3b:15:ad:ca:a9:11:c8:e7:77:03:62:db:b3:9f:
c7:68:f4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:50:06 2025 by rpki-client