Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
File: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json)
Hash identifier: I6hR1ImQFZqhd7QD75lLAana4Sx58fO2MZoSYh8lP8Y=
Subject key identifier: 39:BF:86:84:0B:16:C2:B8:33:08:57:9D:CC:DE:68:D5:7C:4D:04:F9
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Certificate issuer: /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial: 019511D9D1B3EEF898411A96B1FB1CCDA18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
Manifest number: 120A
Signing time: Mon 17 Feb 2025 03:00:42 +0000
Manifest this update: Mon 17 Feb 2025 03:00:42 +0000
Manifest next update: Tue 18 Feb 2025 03:00:42 +0000
Files and hashes: 1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: ELSf4aOjCJC5m+1vF2D44+9wyzz2AKXgb9Ep1dHAeJ4=)
2: OkXBNJnUgokPx0Xxs8AUPN40aT4.roa (hash: E/UomHj5ST+3/lio4VV13yWumaIvNp+hYEYFZLaJR7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:d1:b3:ee:f8:98:41:1a:96:b1:fb:1c:cd:a1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Validity
Not Before: Feb 17 03:00:42 2025 GMT
Not After : Feb 18 03:00:42 2025 GMT
Subject: CN=39bf86840b16c2b83308579dccde68d57c4d04f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:27:30:2d:c6:10:26:24:9c:f1:19:bd:5b:
93:bd:60:10:93:96:fa:e1:b1:c1:a2:b7:df:77:d4:
30:ea:b9:36:38:06:09:a7:91:6d:f7:38:04:c1:39:
19:46:56:d2:f6:b1:e7:41:98:52:a8:db:8a:6a:a7:
34:41:cc:7c:f3:94:b4:a3:87:93:9f:a9:5e:ae:88:
f2:2a:2f:09:a3:6f:9c:35:6a:6f:56:a3:ba:7f:a4:
7f:b2:cf:a2:18:89:98:d3:ca:07:70:cf:45:20:3d:
1d:17:30:a2:4b:79:99:eb:d1:b1:84:69:2d:08:38:
e7:b3:46:d3:69:ea:5d:73:05:84:f1:51:52:7f:90:
21:74:1c:b3:74:4c:a2:2a:79:92:21:84:00:e5:fd:
d0:aa:b8:0d:65:08:f8:82:a1:81:23:b6:c0:d2:5a:
8b:78:75:43:e8:05:00:33:1c:de:01:34:9a:7e:54:
0e:18:6c:ec:08:be:ec:48:34:33:cb:d2:2c:4d:69:
1c:bb:35:fc:d7:a2:2d:93:4f:cd:40:b7:a8:b3:83:
c0:d6:43:d5:76:39:ef:2b:3b:67:99:0e:bc:07:b7:
fa:10:29:82:f3:55:9b:8a:e3:d3:d1:d3:20:97:18:
e5:24:58:d5:cc:b6:e8:ce:e6:ce:80:b9:87:ba:b5:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BF:86:84:0B:16:C2:B8:33:08:57:9D:CC:DE:68:D5:7C:4D:04:F9
X509v3 Authority Key Identifier:
keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:44:3a:92:e9:63:38:49:0e:2b:94:b4:77:8d:68:04:cf:b6:
5b:fa:a7:e2:89:0e:37:e7:d5:46:8d:f2:d8:06:c0:a9:7c:c0:
43:3a:25:ae:59:e2:a1:b7:24:ac:53:63:10:7a:ce:da:af:9a:
2e:ef:47:16:31:29:a6:ba:c2:b0:4b:31:1f:b6:ec:9b:ba:38:
d5:55:c8:f6:57:d6:e6:dc:de:dc:c7:0b:c6:42:cc:42:c9:72:
67:cb:5e:fd:fc:50:be:91:9e:e7:39:5b:f6:56:92:a0:7f:3f:
73:18:91:4e:34:9a:bd:7c:1b:7d:a0:0f:93:3e:d7:95:fe:36:
e4:66:c9:1a:be:3b:22:69:f8:9a:75:d9:57:9a:b5:5c:8f:11:
f2:ad:3d:11:58:ff:44:4c:a1:eb:b9:1f:53:29:d2:16:85:ef:
e7:0b:1d:23:36:2c:67:f5:71:fa:f5:84:9f:6c:ce:98:0b:d9:
94:dc:7c:fe:28:2c:0c:55:7d:2c:7a:e3:61:58:97:2f:61:27:
4c:07:b8:08:fe:e9:0c:3b:5d:79:6c:ce:04:04:34:fd:a9:ef:
33:c1:c6:cf:39:e3:e0:41:f6:fd:0d:28:8e:65:72:75:c5:66:
3b:b1:0c:ba:9c:6e:d9:c6:80:f8:ad:12:76:d6:87:eb:35:27:
bb:a3:50:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:22 2025 by rpki-client