Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
File: Cr193OT9cDvD-8r8G11Xfhp1dXU.mft (raw, json)
Hash identifier: c9wrAFPnCqADz3tM60VG7Sd4gkGnXU4zS/WhtZJhc5E=
Subject key identifier: 54:49:19:98:4C:60:DA:09:DF:15:F6:27:7E:A4:17:9B:B3:DE:7E:83
Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
Certificate issuer: /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Certificate serial: 0195116C36DFA4A6FA938E09BD527993A60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
Manifest number: 121D
Signing time: Mon 17 Feb 2025 01:00:59 +0000
Manifest this update: Mon 17 Feb 2025 01:00:59 +0000
Manifest next update: Tue 18 Feb 2025 01:00:59 +0000
Files and hashes: 1: AWRVDrJmsEsB9Z159jyFngqyGLE.roa (hash: DirE8id/agwWNhmtyshobBEdAnWhXbNRd3+Zdg4CPc0=)
2: Cr193OT9cDvD-8r8G11Xfhp1dXU.crl (hash: 0JD2/iw6wUppZ8VL0vABSjWLXKTn71a4lqLQCJuxirw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:36:df:a4:a6:fa:93:8e:09:bd:52:79:93:a6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Validity
Not Before: Feb 17 01:00:59 2025 GMT
Not After : Feb 18 01:00:59 2025 GMT
Subject: CN=544919984c60da09df15f6277ea4179bb3de7e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:df:2e:a6:69:12:2c:2d:81:9f:9e:bf:20:cf:
c9:44:87:c1:b8:79:bd:55:c5:17:47:63:74:f8:91:
c8:04:a5:4b:c0:82:3d:b5:80:84:36:55:fd:f9:8d:
fd:a3:2f:ed:ab:0d:ba:30:7d:62:78:08:8a:19:a1:
dd:c8:84:3a:6a:42:05:84:ab:06:c7:2f:48:7e:17:
9b:43:88:2d:43:78:35:30:c6:c7:b9:5b:e0:7d:fd:
27:51:54:d0:fa:96:00:22:76:c8:34:6b:86:78:f4:
93:dd:7d:14:1f:a2:71:14:54:d9:66:c4:9a:8f:b5:
50:89:f2:ca:f5:c6:ad:80:21:06:a9:c1:f6:cf:40:
91:ae:8d:d5:68:39:b9:bb:b7:d2:60:7f:0e:5e:f2:
13:81:2d:eb:ba:1c:bb:8c:25:a4:fe:6b:49:75:b4:
ad:e0:7a:38:d2:b0:75:f2:6a:85:df:4f:76:5b:e8:
e1:cb:57:16:02:6c:e2:9b:c3:d2:3e:b3:f6:15:02:
27:c9:6b:c3:98:b3:7e:80:da:46:ab:58:a5:f5:3f:
62:5b:03:b3:92:97:91:b3:5b:f4:6b:68:f9:65:59:
21:59:11:51:18:4e:1b:5c:b0:4f:25:05:16:31:ab:
42:93:20:28:79:91:f1:e7:59:15:55:61:2f:26:e0:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:49:19:98:4C:60:DA:09:DF:15:F6:27:7E:A4:17:9B:B3:DE:7E:83
X509v3 Authority Key Identifier:
keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:68:2c:f5:03:c2:88:0b:30:5b:56:40:92:0c:4e:fb:29:d9:
45:85:f4:4f:70:8c:cf:36:60:4e:ed:9d:95:93:2b:08:c3:3d:
e9:07:7c:5e:16:5d:fa:1b:fd:39:fe:45:46:f1:26:cc:43:d0:
cf:b2:11:1b:9e:78:82:09:88:45:e5:9f:5a:42:fc:ca:ab:bb:
04:47:50:62:ba:73:ae:b4:02:4a:bc:a1:1d:6c:7a:c4:50:4b:
b1:f7:47:b5:3a:00:cb:2a:de:32:d0:bb:1e:c7:f0:04:1e:7d:
67:3c:82:e6:8b:40:23:c7:dc:f6:61:49:5b:b8:77:98:21:dc:
39:6a:48:e3:88:50:7e:2e:1d:31:eb:ce:c0:1e:61:80:6a:88:
72:59:97:d1:cf:7f:d6:f8:38:e9:30:c4:a5:dd:c4:89:8b:a1:
78:32:ff:f1:3b:ac:c1:ec:c6:ce:6b:71:c7:e1:bf:79:e7:9e:
05:e5:9d:36:43:a4:3c:32:35:a5:44:38:ca:a3:34:5e:00:33:
17:1a:38:1b:0c:a9:c7:74:6c:55:fb:be:d1:62:c0:76:39:41:
4d:b8:07:33:86:83:cf:86:91:05:02:fe:d4:3e:d5:91:df:de:
d9:d1:12:68:dd:3c:5c:7f:99:3e:da:d1:76:4d:4c:ab:30:bb:
92:a1:42:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:43 2025 by rpki-client