Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: 9eBv5gpcEQdlvfSH7tAvVG4RrwXvP7QDAU/3zCb2Nbg=
Subject key identifier: 7E:7B:5A:2B:2E:10:95:2E:EB:44:FE:54:5C:BD:3B:31:D5:12:A9:2C
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 019512476E00353A03BC58987E270C694CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 145F
Signing time: Mon 17 Feb 2025 05:00:25 +0000
Manifest this update: Mon 17 Feb 2025 05:00:25 +0000
Manifest next update: Tue 18 Feb 2025 05:00:25 +0000
Files and hashes: 1: TUphJ-jTdc6RyopsPbQVUooNovI.roa (hash: 5SMLcPW5pd+tHnvqH88hThCDDFketkICiSOllb1LCN8=)
2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: BC8jR47c1Uit/lIiFRJsL0w7+i4kZn+98cQR8uUBDTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:6e:00:35:3a:03:bc:58:98:7e:27:0c:69:4c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Feb 17 05:00:25 2025 GMT
Not After : Feb 18 05:00:25 2025 GMT
Subject: CN=7e7b5a2b2e10952eeb44fe545cbd3b31d512a92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:43:15:44:57:5a:00:e0:67:35:2b:c2:bd:dc:
eb:8f:d1:34:5f:2a:5c:4c:3c:eb:a2:4a:02:a1:ec:
02:3b:04:d7:cc:1f:95:60:38:dc:e4:07:83:b6:b4:
aa:55:77:dc:cf:0c:14:3b:c9:75:8b:84:3c:db:94:
49:a5:32:a1:77:8a:aa:0c:48:48:e6:8d:6e:9b:ef:
57:be:cc:f7:5c:2b:ab:00:77:09:26:43:3f:92:fe:
1c:13:69:69:d2:ed:0f:59:91:54:83:07:4d:5b:73:
9b:07:08:e1:5f:ae:4a:af:e6:00:00:64:5e:85:d0:
a5:74:d5:d4:df:90:1b:bd:b4:6d:92:93:e3:a5:30:
4e:e5:d6:e1:ad:73:ca:75:00:3c:03:29:40:31:de:
28:e3:df:10:5b:ec:cb:ea:8a:bf:cf:a2:0e:c7:0a:
73:f7:02:4c:ef:01:85:3b:f4:be:fa:06:02:f6:eb:
5a:51:a0:09:df:d9:88:11:f6:db:04:61:16:bd:4b:
fd:ee:ea:c8:cc:a8:5e:c7:08:6a:5d:95:eb:45:b6:
a8:56:25:a4:6b:c2:7f:18:00:94:c6:58:a0:ab:4c:
72:5e:51:5b:c8:78:fb:39:55:b5:4f:49:7a:20:47:
5d:2c:1b:55:a9:d6:fa:e9:55:14:a5:f4:1d:7d:55:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7B:5A:2B:2E:10:95:2E:EB:44:FE:54:5C:BD:3B:31:D5:12:A9:2C
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:dc:5b:b6:b5:1a:92:02:2d:be:93:e9:1b:01:35:78:d1:a2:
90:fc:3b:c0:4b:34:6d:b0:0a:f8:de:ee:0a:ad:28:62:55:4f:
1a:77:08:7b:61:8a:9e:c2:d7:5b:e9:52:e7:28:2d:5f:83:70:
f1:85:d7:5d:49:b2:b7:0e:c6:79:19:51:07:d8:6b:6f:a1:12:
b7:23:38:1a:0a:ee:dd:96:e9:4d:40:63:b3:25:1e:6b:af:e4:
fa:ea:36:5c:45:43:bd:05:29:e3:16:47:55:2b:b4:06:d7:89:
7e:16:d1:85:cf:f2:24:30:4c:df:5e:59:a0:3c:0a:fa:26:02:
0c:35:65:d2:fc:2a:61:13:c3:6b:27:c0:f1:a8:d8:aa:d5:ba:
c0:57:d8:49:aa:22:11:70:78:ed:e3:3d:d6:19:a7:8f:4c:e8:
45:a5:22:37:30:b5:76:49:5d:83:7d:71:28:5c:02:7d:6e:ed:
63:73:a6:a0:55:a2:a9:c3:1b:56:ce:9e:ce:62:9b:5a:84:a2:
f0:33:f8:8b:3b:38:7c:53:fa:9d:57:ad:34:80:c6:fe:05:7e:
bd:a4:dd:69:5e:52:11:a8:54:7b:cc:80:3d:af:ae:55:6c:e2:
9b:59:94:df:f8:98:22:05:b8:0e:80:fe:68:5a:c4:79:b3:1d:
34:14:d1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:23 2025 by rpki-client