Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
File: rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft (raw, json)
Hash identifier: ffl8xOi2HXruYFGCqWMBif4Ihs70cdlKu8dK9755jUQ=
Subject key identifier: CE:AE:6E:5E:C3:A1:E2:48:5A:F5:B3:08:71:C4:0D:02:1B:95:C8:31
Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Certificate issuer: /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Certificate serial: 01951134E4A86AF5D3AB30E6E32B126C4266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
Manifest number: 10D0
Signing time: Mon 17 Feb 2025 00:00:33 +0000
Manifest this update: Mon 17 Feb 2025 00:00:33 +0000
Manifest next update: Tue 18 Feb 2025 00:00:33 +0000
Files and hashes: 1: r6C99vK2TllFCTWcqpJRSg5MRPM.roa (hash: 3+br3Wh/zPJPiW24ubp7XOxLj4qW7AeahE4kU9GEl1U=)
2: rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl (hash: 7cgijXj26bu4sVSHLrCYxDxtVF/S91U757LwpZsNY68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:e4:a8:6a:f5:d3:ab:30:e6:e3:2b:12:6c:42:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Validity
Not Before: Feb 17 00:00:33 2025 GMT
Not After : Feb 18 00:00:33 2025 GMT
Subject: CN=ceae6e5ec3a1e2485af5b30871c40d021b95c831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:34:e2:96:1f:1c:0d:e7:99:fc:ab:9e:d4:
a8:ec:db:f2:7d:66:d2:3d:29:96:9a:88:b6:1d:f7:
d7:e3:91:63:3f:95:91:35:49:d6:7f:15:07:2f:6a:
b4:31:a1:c6:09:d7:ea:af:0f:56:e8:42:2a:bd:a4:
7e:42:86:3d:0a:96:d0:a8:e4:df:e7:51:c6:78:5e:
c2:6b:8b:68:a7:e5:62:99:ec:06:b1:0f:2f:8d:6e:
6d:80:d9:d4:3a:d4:3d:c7:cd:19:30:d7:ae:ca:fe:
ac:69:e9:18:86:5c:66:8c:c9:4a:d0:3b:cd:c5:b0:
51:94:90:df:57:b6:b0:ae:1c:c6:1d:46:21:58:6d:
fd:a9:10:19:34:0e:ce:93:a8:2f:54:bf:c7:10:4c:
a1:6c:50:45:3a:15:ad:b6:70:83:ff:75:31:e6:b2:
0a:bd:c1:3e:36:b8:46:f4:1e:86:af:77:42:01:97:
5b:2b:82:7a:5a:c1:bb:01:df:bb:d0:7d:51:d5:bf:
6a:e8:fe:a8:0f:b5:73:39:73:1a:28:3a:84:66:62:
0a:12:bc:f1:91:cb:05:a8:b9:5e:cf:4d:47:81:8b:
eb:d8:5c:d5:43:3c:76:a5:55:ea:1d:fd:48:b9:f4:
17:78:7e:87:3a:14:21:46:14:c5:2e:1f:0d:6b:92:
d0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AE:6E:5E:C3:A1:E2:48:5A:F5:B3:08:71:C4:0D:02:1B:95:C8:31
X509v3 Authority Key Identifier:
keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:51:94:62:a9:21:dd:a6:c3:08:42:04:84:e4:99:4e:3e:b5:
c8:e6:21:8e:c8:35:03:0c:b3:4d:e8:ba:5a:93:23:1a:5c:d0:
5c:03:ca:3c:1b:71:35:12:96:04:91:a8:fd:3e:fd:8c:21:22:
40:c9:0a:de:02:41:e7:43:e4:1d:56:8e:cb:16:ea:8d:e8:4d:
b7:5d:f2:bb:a9:80:a2:9a:aa:a9:cd:e9:fc:b4:e7:55:11:f2:
59:30:34:3d:22:6b:85:6c:3a:62:b4:5d:8b:28:06:14:b2:a8:
44:e0:4a:a8:40:95:73:1b:b7:d4:a5:d7:3a:fe:6b:cd:46:a3:
53:3e:72:0e:37:15:11:67:ce:66:32:82:45:6c:a2:1f:ae:aa:
4f:49:3f:6e:e1:e9:54:ac:e9:19:d6:29:24:47:06:f6:8d:7f:
d6:76:f0:fd:cf:a6:d7:14:56:58:4d:11:3a:f0:2e:64:b3:e2:
07:f0:6d:85:4a:ba:ec:a6:12:6b:f5:95:e7:1c:ac:f7:b0:76:
52:40:40:c1:cd:e6:c3:a5:cd:6c:46:fd:d4:dd:d8:91:5c:fc:
55:fc:39:8a:ce:20:54:38:a3:fd:87:40:83:e7:a7:ff:b7:c6:
be:c5:8a:9f:34:e2:37:00:8e:90:18:7b:55:f1:0c:80:32:19:
e4:86:c8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:49 2025 by rpki-client