Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
File: S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json)
Hash identifier: nqjScj6DPIXRqQ57VkAfwOcAJs7EPl/ScSmmH0a/j3o=
Subject key identifier: 48:65:1F:E8:07:33:AB:01:53:0E:1C:77:D5:FC:F5:A9:78:32:89:9C
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial: 0195127E3DE6D996C71923B27F1C8BFF5B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
Manifest number: 132A
Signing time: Mon 17 Feb 2025 06:00:18 +0000
Manifest this update: Mon 17 Feb 2025 06:00:18 +0000
Manifest next update: Tue 18 Feb 2025 06:00:18 +0000
Files and hashes: 1: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: xkUAhIO5HYnRjFzWvMNIx1xEcOfOyI52RZATEQdaWLQ=)
2: oeCxzVDUfHaJOXyvnKDzLrak4gk.roa (hash: IomvdIa0fgMjIoUuc5morX/DBZMfwMxLqyV3hq96Pqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:3d:e6:d9:96:c7:19:23:b2:7f:1c:8b:ff:5b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Validity
Not Before: Feb 17 06:00:18 2025 GMT
Not After : Feb 18 06:00:18 2025 GMT
Subject: CN=48651fe80733ab01530e1c77d5fcf5a97832899c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ca:ee:54:70:1c:a2:db:13:e5:90:7d:34:e9:
5d:30:c0:32:c2:98:fd:72:06:f9:1f:24:bf:39:9a:
30:49:0d:5b:5d:b9:3b:f4:af:73:dc:9d:40:8a:9a:
f0:b7:80:00:b0:66:8c:e8:ce:d9:0b:8c:91:22:13:
52:fb:23:d7:a1:cd:e2:cc:a8:ac:97:e5:e2:ec:50:
32:00:14:ac:06:e2:ec:da:5c:39:b6:24:30:05:c2:
5d:d5:9b:13:d6:50:dd:07:77:40:d6:e3:22:0f:42:
22:03:d3:52:0b:d3:4a:8c:fd:0e:16:e4:46:96:fc:
b8:05:ea:ef:26:99:73:ec:a1:be:4f:71:19:16:7e:
9c:bc:10:7a:c7:95:38:6b:4f:de:7e:25:ee:dc:7d:
5c:82:84:45:96:ce:26:17:46:57:e9:66:57:5c:f7:
07:26:c8:a9:fe:90:03:30:d4:97:fd:a8:d7:b5:84:
c5:fc:b2:30:ad:77:b9:63:80:63:35:0c:04:35:4c:
af:b4:c4:2b:fb:af:43:1a:fd:c5:44:09:ef:bb:71:
48:5a:61:c5:42:85:4a:21:9f:da:12:98:d2:6c:d9:
85:4f:bd:01:f5:8a:5e:0f:b7:0a:ee:7f:0f:45:c1:
35:8d:e0:8d:71:03:ab:ba:e8:18:a5:b8:99:6f:ae:
45:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:65:1F:E8:07:33:AB:01:53:0E:1C:77:D5:FC:F5:A9:78:32:89:9C
X509v3 Authority Key Identifier:
keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7b:f3:7b:43:b2:e3:a0:19:fa:7a:b8:51:26:79:a4:17:35:
c4:6b:d8:9c:8d:92:14:a2:01:34:11:b7:f8:db:fe:ed:17:2f:
95:ed:b0:e9:dd:07:1c:76:28:c5:e2:6b:0b:5b:07:eb:29:f8:
b9:a9:db:98:89:4d:77:50:98:2a:2f:b1:d6:60:5b:4f:b3:f7:
a2:a9:d1:e5:6f:50:c0:1d:c1:c6:64:d8:de:eb:02:95:a2:23:
5c:45:4a:fa:64:84:d4:93:e8:c5:76:ff:74:49:16:45:1e:cb:
e4:fa:55:f5:81:c8:22:56:44:a0:43:d6:ae:d1:ea:dc:db:7c:
25:52:7e:33:22:32:39:37:81:c8:04:7b:42:cc:8b:9e:c6:24:
46:ed:10:8c:24:a6:e7:2d:a1:83:fd:20:e2:33:cc:ca:cf:54:
09:3a:ae:09:af:ed:91:43:48:c4:2e:b6:5d:dd:3c:bd:86:9e:
b2:6b:d7:f9:38:b7:da:f2:a3:05:f4:ec:80:c0:4d:bf:ab:13:
6f:ef:f4:e4:01:10:89:f9:84:fe:d8:2c:5a:a3:6f:e3:d3:8d:
74:cd:b5:26:ce:83:08:b2:2e:4d:48:5b:bb:10:5a:d3:a3:93:
d6:de:02:c7:52:59:77:4d:de:a6:9e:0a:51:47:4b:7a:13:5f:
f3:db:bf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:20 2025 by rpki-client