Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: hFIrAnrMKQF4eu+3hEBNeWpdwfpRiwFIZ5rxNcK7+fA=
Subject key identifier: 32:FE:C5:4F:64:2C:A9:3D:5F:AD:60:51:39:7E:13:10:E6:3F:4D:C9
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 01951247422ADE7D71265E8E4B9372E54635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 0D58
Signing time: Mon 17 Feb 2025 05:00:14 +0000
Manifest this update: Mon 17 Feb 2025 05:00:14 +0000
Manifest next update: Tue 18 Feb 2025 05:00:14 +0000
Files and hashes: 1: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: xWy/5ebvqXwZ5AGk8g9/GQUgxvwCTblHQyT7egH5VXA=)
2: evdpU8RxaI_pbdRiidwVOCapui0.roa (hash: gmEXsktEnud6XxBSpR/JYtLPKpbESxZW8V98Ytskm+o=)
3: zC0DwQFXhSD9GmfEt7gqZels6ME.roa (hash: Cq4uPzMv6jZuo+s6z3yPpwudom0heKSg9U70MId82ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:42:2a:de:7d:71:26:5e:8e:4b:93:72:e5:46:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Feb 17 05:00:14 2025 GMT
Not After : Feb 18 05:00:14 2025 GMT
Subject: CN=32fec54f642ca93d5fad6051397e1310e63f4dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:27:e4:91:08:d2:2f:18:3a:3b:db:25:dd:
a8:11:58:9a:94:41:de:32:b3:7d:ea:01:e9:78:66:
44:0e:a5:7f:95:ac:b5:97:03:23:e4:c2:4c:5f:64:
53:fd:20:d1:20:1f:e3:17:af:86:b0:66:0e:d0:57:
98:a7:46:42:3f:44:4e:de:23:3d:f6:08:8a:8a:1a:
ac:e0:a0:b5:59:ed:1c:78:4a:a2:1e:7d:50:d9:59:
14:90:eb:b2:4c:b6:cd:1c:7e:48:26:c4:ac:3c:30:
55:fa:be:31:ac:23:c3:b7:48:4e:d4:61:e6:d8:cc:
7d:9f:51:ed:6b:16:44:54:a3:12:1b:87:a8:f6:47:
a5:61:bf:1b:3b:e2:50:2a:6d:1c:38:a9:b8:5e:ea:
53:55:2e:0b:fc:82:f0:33:40:d5:55:e0:db:96:1d:
e5:7e:b9:3f:a3:7e:5d:2a:b1:6a:2c:b5:ab:8f:01:
14:da:8b:8f:c0:40:62:36:94:bd:d8:55:1d:a1:0d:
f6:d8:8a:8c:fb:af:02:ea:07:c2:d7:27:4a:f3:c8:
28:65:8c:c8:77:00:5e:c3:1f:db:de:da:73:cb:1d:
71:40:34:11:f4:a9:8b:a4:71:8b:ae:2d:c2:93:9a:
76:fd:79:50:eb:04:b4:94:83:47:17:ab:7f:dd:d4:
bf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FE:C5:4F:64:2C:A9:3D:5F:AD:60:51:39:7E:13:10:E6:3F:4D:C9
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:17:86:ac:95:01:b0:70:80:fc:34:23:2d:c4:2c:0f:02:ab:
c1:22:2c:c7:b8:e5:30:fc:ea:e9:31:e8:f6:bb:52:ec:89:04:
82:06:ef:d2:ca:fd:1e:a7:a5:d2:80:45:12:3c:d5:07:2f:fe:
63:dd:b9:98:92:d0:98:ac:e4:fc:70:18:aa:ec:3f:44:d9:f3:
6b:21:17:57:dc:cb:91:de:6b:a2:bc:26:29:bd:e3:48:5f:00:
b0:55:85:df:e1:01:8f:72:7d:58:4d:cd:79:21:0d:16:a5:8d:
75:9d:e1:37:5f:9e:af:6e:bb:30:ad:72:d3:60:80:cb:8f:6e:
2d:c8:e5:89:c4:ae:97:16:ca:4e:d1:18:0c:2b:1d:29:a7:09:
51:73:e7:62:cc:3a:a7:53:19:ab:f2:06:3b:d7:1f:bf:bf:d0:
77:8b:d6:09:09:fb:5a:3c:2c:cf:9d:ce:54:92:c2:bb:48:6f:
03:af:aa:fd:8c:2a:a4:88:72:c6:4b:4e:49:83:88:f8:3d:94:
22:48:cf:5c:12:b4:c5:0c:04:ff:29:fd:be:c9:31:f7:21:db:
75:17:ed:7b:a5:43:da:95:c7:f4:69:41:c8:39:78:e8:0e:7f:
2a:2c:0a:be:f6:8a:5f:62:61:e0:cf:53:8b:66:d1:05:e7:83:
88:c3:91:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:04 2025 by rpki-client