Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
File: tF5iJw0g-UZ6avx4lj28-4D79So.mft (raw, json)
Hash identifier: qmavDSlgPdPNsAmLiT8U6T410XXR8842xWjjfP4tb3w=
Subject key identifier: 9F:23:F0:0C:01:55:AB:18:50:9A:CF:D4:93:B8:BE:07:41:D7:E6:2E
Authority key identifier: B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
Certificate issuer: /CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Certificate serial: 0194C388777E4C5CBA3BE70CBE40800AF896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
Manifest number: 0BAD
Signing time: Sat 01 Feb 2025 22:01:28 +0000
Manifest this update: Sat 01 Feb 2025 22:01:28 +0000
Manifest next update: Sun 02 Feb 2025 22:01:28 +0000
Files and hashes: 1: tF5iJw0g-UZ6avx4lj28-4D79So.crl (hash: d8JjOLYaYTQr7/gqa+xFlK3xInMMT38BmpX7Am1CcxQ=)
2: uvCFX9itk7RPxPZl6lvvghFjg1E.roa (hash: P3N8o135VPbcqFaS3kCnXkMSVi3GCBY96T9QuQyMyig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:77:7e:4c:5c:ba:3b:e7:0c:be:40:80:0a:f8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Validity
Not Before: Feb 1 22:01:28 2025 GMT
Not After : Feb 2 22:01:28 2025 GMT
Subject: CN=9f23f00c0155ab18509acfd493b8be0741d7e62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2f:07:14:ca:29:ec:c5:73:03:8c:51:ef:f7:
29:54:22:5e:6b:a7:58:ce:9d:60:0c:71:7b:a9:5b:
15:5f:1f:bc:9a:8e:f0:1c:1b:a7:53:c7:f8:6a:bc:
d2:c2:78:2d:2a:92:f1:f5:cb:92:b9:b7:b2:eb:c8:
8d:6f:b5:bb:72:3d:d9:a9:3b:22:0f:69:ae:00:67:
82:14:42:6f:20:81:23:e8:d2:96:3d:3c:45:af:6a:
e4:65:ff:cb:e8:c9:ec:d1:32:0d:c6:8e:76:0d:c6:
f3:c6:a2:3f:d1:1e:3f:1b:8d:6a:fc:34:ac:03:79:
39:98:2c:17:5c:ad:74:2e:8a:02:6e:02:82:5e:b7:
d5:24:a2:8d:e8:7f:d7:bc:69:c5:6d:40:fd:e8:da:
f8:5e:dd:8a:75:cd:19:21:6b:04:ad:0c:b2:8f:b9:
a4:37:f9:8c:6b:28:d4:d2:73:00:63:04:03:18:d0:
79:09:93:43:6e:b2:b6:bc:20:3e:a4:7a:a9:a8:9c:
6b:e0:6e:cf:a6:53:67:df:0c:a6:a7:56:da:7b:1d:
34:83:d0:89:32:5f:5d:0c:41:64:72:e7:39:ad:b2:
6c:dc:03:0d:e7:3c:93:c2:84:e5:9f:ca:87:d4:07:
1d:94:fa:b3:88:70:28:98:99:13:52:5d:f1:e3:c8:
54:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:23:F0:0C:01:55:AB:18:50:9A:CF:D4:93:B8:BE:07:41:D7:E6:2E
X509v3 Authority Key Identifier:
keyid:B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:10:1e:d3:79:67:aa:b9:26:d8:7f:8a:0e:fc:b6:6c:ce:1d:
66:17:62:4a:19:20:a6:ed:b8:77:fa:bb:6f:c3:94:9e:08:3b:
c8:ce:55:3b:45:70:ec:c6:99:29:6c:82:9a:e8:76:a2:58:b8:
de:11:a6:12:f6:c4:f5:a2:6e:6e:3a:17:b6:6f:fe:e7:2c:9b:
06:09:0b:e5:07:fd:4e:6c:7c:83:f9:29:59:95:e5:2b:b2:df:
df:84:cc:b5:92:72:a2:6c:ab:03:8e:ec:64:c0:d1:56:63:aa:
99:b3:86:b6:c9:92:23:ac:ef:41:2f:c2:c1:5f:4c:40:62:5c:
58:a1:29:96:ea:a5:e9:51:62:61:a5:81:d4:30:d9:9e:c6:da:
83:2f:9c:be:e3:bb:8e:3e:9c:b3:d1:e7:7b:c2:e7:3f:3a:83:
09:0b:d7:32:e8:bb:25:71:77:5a:87:96:5a:fc:08:ae:07:e5:
00:a6:00:00:18:fc:28:82:6b:17:fe:d8:3c:d5:fa:b5:e9:85:
39:a4:b2:cd:18:d0:72:e6:ec:cd:68:78:5a:56:ca:10:f2:73:
1b:e3:db:e5:09:e6:ae:51:77:4a:91:6f:df:2e:36:17:00:a2:
eb:1a:3e:5f:2a:b7:33:cc:54:70:8c:01:4a:b3:9a:dc:8a:15:
61:bc:95:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:10 2025 by rpki-client