Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
File: S_asD7A5JnNFTDlH9DV-RZTtJm0.mft (raw, json)
Hash identifier: KAHEbYQAeBNOwJ7nJaVjhBhnoH34bCE4OfsLYpP/YDU=
Subject key identifier: 2A:B8:3A:62:32:8D:AA:68:12:E5:3F:09:2C:5D:EE:D6:9E:14:32:62
Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Certificate serial: 0194C3BE524F437B4EE7BFEA04345DCDE8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
Manifest number: 1430
Signing time: Sat 01 Feb 2025 23:00:17 +0000
Manifest this update: Sat 01 Feb 2025 23:00:17 +0000
Manifest next update: Sun 02 Feb 2025 23:00:17 +0000
Files and hashes: 1: S_asD7A5JnNFTDlH9DV-RZTtJm0.crl (hash: VXPF5Mhm14oORaxijTvCutPdz7mb9jEM+6xZW93uYO4=)
2: VTOPr5cRplB2JyRppkTR7JFS0fo.roa (hash: s4FFCpaGghq+r1WTThyqyMnDAmNVSPddYtSZUOJOGf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:52:4f:43:7b:4e:e7:bf:ea:04:34:5d:cd:e8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Validity
Not Before: Feb 1 23:00:17 2025 GMT
Not After : Feb 2 23:00:17 2025 GMT
Subject: CN=2ab83a62328daa6812e53f092c5deed69e143262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:e9:3e:bf:a6:cd:10:95:35:25:f1:64:dc:
53:2f:1e:7f:79:42:2e:ea:e1:77:0c:49:26:be:f5:
d0:55:b7:fc:6e:92:3d:0a:f6:f9:90:9d:76:93:d4:
0c:f4:87:c0:a3:57:c4:9b:20:10:49:93:e2:b8:b3:
8f:cc:8f:55:19:32:d0:cc:89:36:ab:9c:8d:2c:0a:
fe:07:93:da:9d:4b:09:f1:04:9d:39:8b:e8:e8:3e:
54:4d:e9:f3:48:20:c6:6b:43:d5:5e:42:02:1f:53:
d7:32:36:18:a2:ed:e4:4b:01:e9:c8:3c:13:be:b9:
31:bc:96:2b:1b:65:2c:53:7b:19:83:8a:62:55:7d:
af:ed:14:16:a4:22:60:fe:08:f7:0a:15:a6:98:70:
3f:bf:8e:e0:d6:df:62:37:a0:49:93:bf:2d:38:58:
1d:f9:fd:5d:d7:89:31:e6:f4:0c:b1:ce:f9:b9:8d:
ef:a4:8b:4c:52:99:6e:da:75:c4:90:d2:9d:0e:69:
93:d3:ff:31:de:21:4c:d2:fb:8e:22:84:04:fd:a6:
a7:c1:db:91:f2:d9:3a:86:dc:0f:85:15:c2:bd:88:
8a:fa:da:82:d9:32:ae:2f:8f:ef:07:5c:1f:b0:3b:
d6:5c:26:39:8a:7e:c4:c0:5e:8a:ea:62:95:31:6d:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B8:3A:62:32:8D:AA:68:12:E5:3F:09:2C:5D:EE:D6:9E:14:32:62
X509v3 Authority Key Identifier:
keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:70:a2:6a:0a:b2:dc:86:79:e8:d5:7e:d9:e1:3d:a5:9c:d6:
c7:2c:3d:a8:18:9e:6d:fe:64:f7:a2:7b:0a:02:df:b5:b4:93:
90:91:03:09:13:18:b0:b9:50:b2:46:3a:fe:77:50:8e:53:a8:
17:75:be:23:12:8b:4f:cf:e4:59:da:03:f4:fb:6f:71:db:d2:
77:4e:7c:24:bc:8c:2c:3a:50:5f:59:af:bb:33:89:f8:a3:7a:
e6:98:25:88:b8:01:80:64:6f:ff:42:e2:ba:3f:3b:4a:be:6c:
91:48:a7:0e:8a:8b:69:bc:08:92:81:ef:5f:50:02:eb:24:b6:
4c:8e:83:98:9b:ad:1a:2f:bb:1f:9f:ad:c0:9c:84:5f:97:df:
99:aa:6d:15:f2:92:42:9c:b6:9a:73:9c:f0:6e:94:90:37:59:
39:98:6a:25:63:b4:2c:43:e2:80:b6:0e:bd:ca:b6:9b:96:0b:
18:8a:07:30:b5:87:77:66:cc:49:56:f9:d5:ad:a8:00:b7:84:
2d:fc:80:b9:f0:54:39:04:5d:88:c8:57:b5:41:7e:e6:d1:86:
7f:4e:35:e5:38:07:38:2b:1f:5a:d4:69:55:32:79:5a:de:46:
51:49:2c:5c:96:8a:b8:bb:7e:a6:4f:ca:d3:9b:c6:cd:49:5c:
08:cd:8f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:54 2025 by rpki-client