Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier: 7WhB0Gutpfcdj4X28018Wyjg4whVpv1CvAnQKpuD/PQ=
Subject key identifier: 8D:FF:82:C3:D9:12:17:4C:44:95:6D:26:10:43:70:58:DC:79:35:3B
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 019511A24EA1B6908BA08A855811B6C533FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 02:00:04 +0000
Manifest this update: Mon 17 Feb 2025 02:00:04 +0000
Manifest next update: Tue 18 Feb 2025 02:00:04 +0000
Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: n9C8VDoxWlXMlG9Z5bJRp9+3bHMASv6HvxdX2PuxWdM=)
2: itTVy05KXbjBfmcjzdcEDVdPSEA.roa (hash: vAulIDyKQ5KBMKkmbKEQNL7hMBKpbBIacuNshnzHl5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:4e:a1:b6:90:8b:a0:8a:85:58:11:b6:c5:33:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Feb 17 02:00:04 2025 GMT
Not After : Feb 18 02:00:04 2025 GMT
Subject: CN=8dff82c3d912174c44956d2610437058dc79353b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:a8:ed:63:0c:b8:4a:38:d7:b0:af:1c:99:
4a:ce:fc:37:e2:fa:cf:15:8b:24:e2:e2:b7:1c:2d:
35:4e:0b:cd:a1:c1:8f:5f:ad:c2:0e:ac:3f:33:bd:
83:d1:b9:34:ff:8b:0b:45:97:37:1f:13:e5:c4:ca:
5e:57:c5:70:a2:0e:83:8e:c9:bb:3a:2c:69:94:80:
08:6a:fd:07:e8:31:0e:dc:a8:0c:db:03:6b:6a:4c:
4f:9f:7b:ff:05:0d:bc:ad:cb:f4:d6:86:a4:3a:a1:
72:5c:66:4a:7e:c6:c4:a4:a5:f2:3f:39:be:ff:b9:
89:93:57:10:37:dc:7c:f5:ed:55:cc:0e:52:f2:2c:
0c:d5:93:3f:32:78:7b:e1:ee:26:2f:e2:dc:0c:85:
f5:bc:2d:fb:b2:c6:02:94:62:5b:0a:e9:9a:39:a5:
5a:86:e6:95:07:68:51:15:e2:1e:33:0a:9e:fb:e6:
f7:13:9b:40:83:49:51:1f:36:6c:23:57:6b:da:7c:
00:85:18:fd:25:c6:90:80:3b:7c:14:94:40:71:dd:
7e:65:ce:07:b1:6b:1f:06:8b:32:8d:bb:c3:fc:47:
e3:8b:7a:01:4d:8e:68:0c:54:73:29:c4:2f:6b:8e:
68:f6:0c:0a:e2:00:c5:e6:5c:0c:48:ba:36:d0:53:
ce:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FF:82:C3:D9:12:17:4C:44:95:6D:26:10:43:70:58:DC:79:35:3B
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b4:3c:c5:ab:a0:8f:47:90:e2:86:87:fa:75:05:75:33:e3:
a9:72:7f:a1:c8:ef:92:d7:58:9b:90:ac:3c:d0:d4:05:c9:5e:
b0:0a:c9:db:2c:52:a5:a7:d2:0f:e3:57:9d:44:e8:56:92:e0:
d3:c5:fa:fb:26:3a:51:1e:6e:3b:49:53:b2:ab:37:5b:b1:12:
0c:d5:14:30:d8:46:4f:12:d5:94:1f:d0:0d:6b:b4:d4:51:c6:
e6:06:bc:06:e4:44:c4:fb:7d:d1:9e:6c:31:22:1e:7a:56:61:
74:4a:8e:b8:76:8b:cc:2e:1e:41:fa:73:e0:bf:bd:96:fd:b8:
42:74:3b:ee:c3:fc:1b:81:1d:dc:3d:2e:05:35:5a:00:33:bc:
09:c8:ad:6b:5a:a1:f1:af:41:2c:f1:3f:e1:87:6a:65:00:17:
39:fd:4f:a2:c1:82:92:c3:88:c8:56:ed:4c:63:e4:c0:b2:59:
8c:2d:bb:2a:7c:57:d9:7a:38:92:56:15:4d:d2:c9:c3:ae:d3:
f3:3f:5f:9f:2c:14:f8:5b:b6:55:22:34:1c:1e:9e:a7:58:13:
56:11:20:57:59:2f:2f:36:fb:83:70:0f:d8:a2:26:30:41:b5:
bb:f3:ff:35:c7:ac:de:ff:a5:61:9c:c3:3e:d6:a2:85:e2:f7:
b3:f9:e7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:28 2025 by rpki-client