Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier: crvQh4igTmMm657nLHeTGlx/ZXL3mFKD5Bd61QVxIGA=
Subject key identifier: E2:49:76:45:31:D0:5D:AA:0A:89:0D:D4:FF:69:41:51:BC:3C:6E:CA
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial: 019511355DE63FF950797E1A3F27943D60F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 00:01:04 +0000
Manifest this update: Mon 17 Feb 2025 00:01:04 +0000
Manifest next update: Tue 18 Feb 2025 00:01:04 +0000
Files and hashes: 1: 0LP5ahEEWvnMaK30aMTVzU6uXkA.roa (hash: lB/VdYravFr8twO2oC/vGE6G8jo6civSr7gweO3k+0U=)
2: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: GNLJbkbZFmZVDmtA4rucs7wX2CJFoEFX8ctq8eGTLF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:5d:e6:3f:f9:50:79:7e:1a:3f:27:94:3d:60:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Validity
Not Before: Feb 17 00:01:04 2025 GMT
Not After : Feb 18 00:01:04 2025 GMT
Subject: CN=e249764531d05daa0a890dd4ff694151bc3c6eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:fe:3e:fd:98:dd:42:50:8a:39:b4:d6:01:
5a:e7:8e:42:08:d6:e8:bb:23:76:9d:96:a7:46:8b:
8e:c5:e8:d6:5c:e2:75:47:f8:71:e0:73:f2:9a:01:
bb:8e:d9:07:2a:6b:7b:12:0f:61:a6:05:34:f2:4b:
ed:ba:d5:c5:1c:e0:44:3d:5c:61:1b:31:e2:dc:82:
01:5b:66:d5:3b:6b:24:00:d8:39:84:96:ea:1d:40:
51:97:d7:34:1d:8b:c0:4d:f5:2d:3d:71:83:ee:90:
b1:23:1d:d9:49:e4:2c:da:27:a0:fc:d1:f5:dd:7f:
c2:b1:f2:29:f0:49:dd:37:30:60:03:f7:56:91:50:
0b:e6:c6:e7:e0:86:20:0c:7c:12:a6:d9:4b:15:5e:
0c:9c:2e:59:9a:30:49:ef:77:17:91:c0:b7:c9:99:
50:fb:dc:1c:74:87:b7:3a:ad:9d:a7:e4:6f:42:0f:
95:ef:34:ba:b6:75:f8:10:ac:39:77:8f:a5:85:96:
33:f5:86:13:4a:2f:c2:67:ef:24:8f:5f:c9:60:66:
f9:01:cd:56:0b:8d:2d:6a:d5:50:93:cd:88:39:35:
9b:cb:cb:e4:38:83:84:bd:9d:fd:1e:b0:45:9f:26:
08:4a:f5:92:9e:d5:b5:35:50:26:b5:97:41:8c:57:
dd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:49:76:45:31:D0:5D:AA:0A:89:0D:D4:FF:69:41:51:BC:3C:6E:CA
X509v3 Authority Key Identifier:
keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:04:3c:ec:f2:2b:fb:8a:b8:99:3d:d0:70:c7:55:10:8f:6f:
47:71:82:75:1a:07:22:f4:6a:1f:f3:87:45:aa:2d:4d:85:d4:
2b:34:e0:8e:48:a6:b0:a5:cc:a7:12:cc:3c:6a:c5:be:27:1b:
a4:47:61:5f:5d:49:6a:c1:22:d7:80:66:41:e5:ec:77:7e:a4:
38:7f:6d:13:78:eb:c7:aa:6a:e3:1f:fd:c7:60:12:9e:ef:68:
8d:ad:36:10:c5:37:0d:fa:a6:9c:63:e1:e3:e9:ef:c9:58:28:
e7:c9:64:77:42:2a:2b:ca:73:8e:46:f9:3e:77:c9:ca:7c:0d:
4a:28:de:86:6e:2b:45:60:ff:0e:a8:5c:64:5c:a5:bc:0d:0a:
6e:11:9c:dd:f0:a9:82:7a:70:6d:7a:e2:1c:02:fc:c6:2c:cf:
a2:25:90:d2:14:e0:c8:a2:38:71:82:fe:df:2b:64:7e:bd:8e:
01:8d:1c:e2:69:0c:f3:7e:fe:44:7e:c8:d4:e5:c1:f2:ed:e3:
3a:73:a7:bb:ad:c3:6d:67:d1:08:c6:5b:ea:44:bb:58:d1:0e:
4b:0a:88:aa:7c:c0:b3:f2:58:94:c5:22:69:4e:16:2b:83:82:
83:a2:32:d2:6a:6c:3d:06:ca:aa:36:1a:0a:39:e9:75:6c:78:
91:57:51:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:56 2025 by rpki-client