Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
File: J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json)
Hash identifier: OROnSwwW+Ti5i2vHNCRpo5slAtOzav7pHeaJo/+YC0E=
Subject key identifier: 01:96:D0:9B:19:4F:35:54:81:1A:AE:F8:DA:A6:F1:B2:3C:29:2F:DB
Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Certificate issuer: /CN=279f3652e4458fa001c6738a41425b07e70c91a1
Certificate serial: 019510C6B54251A75D792C99C6B5AAACDFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
Manifest number: 10CE
Signing time: Sun 16 Feb 2025 22:00:12 +0000
Manifest this update: Sun 16 Feb 2025 22:00:12 +0000
Manifest next update: Mon 17 Feb 2025 22:00:12 +0000
Files and hashes: 1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: eLOJJGKtypCaZYS3Ai1LK5NDuiYKP2/CQhWG9PiIPcM=)
2: M2Kelg9WxvDQBMzJqioPXlZdWcE.roa (hash: mQA6DzGnOtrnPFm8tdzPvg5lmx/E+CRmFPMNFXsiBjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:b5:42:51:a7:5d:79:2c:99:c6:b5:aa:ac:df:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1
Validity
Not Before: Feb 16 22:00:12 2025 GMT
Not After : Feb 17 22:00:12 2025 GMT
Subject: CN=0196d09b194f3554811aaef8daa6f1b23c292fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:0d:43:18:09:a8:f1:9b:d9:99:56:78:93:
c1:0f:e7:97:ba:7d:4b:24:cb:19:49:5e:6c:88:a9:
d6:a1:f6:3c:71:06:f6:d0:ef:30:84:5a:c4:df:1f:
1f:2c:f0:6d:1f:7b:25:4c:cd:3b:cb:f5:88:c4:9c:
ed:06:76:9b:80:91:5a:88:7b:66:74:17:f5:c5:5a:
bd:76:4e:2f:13:f5:79:9d:45:86:f0:18:3d:15:cb:
fa:71:01:55:69:94:2f:72:a9:ff:55:c9:9c:4b:71:
97:f8:87:0b:cf:a1:95:56:90:f7:15:30:e4:69:cf:
03:8d:9f:84:2b:27:de:57:45:f7:b5:c0:da:8f:20:
ea:ef:df:e3:bd:ec:6e:d5:a8:7c:0f:18:05:9e:c9:
cb:e5:3e:6c:45:1c:2b:46:b8:55:df:0e:da:be:c0:
b2:10:c1:e1:6b:e0:b2:7b:9a:d8:4e:2e:7d:02:ba:
9f:5d:b5:a7:3a:62:74:47:67:c4:d2:19:69:b3:4f:
c1:d3:21:85:cd:16:a5:fa:9b:5b:c8:e8:c5:f0:0f:
26:8a:09:31:0f:8a:9c:6d:c5:9b:c4:65:ea:56:8a:
f4:52:c6:04:c1:b9:71:af:79:e0:37:90:e7:5d:f0:
40:06:0b:ed:f2:1c:7a:d3:7a:ae:7f:d4:34:00:35:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:96:D0:9B:19:4F:35:54:81:1A:AE:F8:DA:A6:F1:B2:3C:29:2F:DB
X509v3 Authority Key Identifier:
keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a9:d2:19:a5:6f:49:36:0e:11:3b:e9:d8:6c:65:96:99:4d:
fa:a7:3f:95:4e:76:cc:e7:ed:d5:b7:a9:be:e2:03:5f:2c:1e:
05:3a:fd:66:52:36:5b:76:b5:5b:a8:60:9a:ab:63:40:a1:b0:
fd:12:ec:39:80:37:be:f0:81:f1:54:a5:57:1b:4a:35:de:33:
55:61:57:5b:a2:97:10:1a:23:77:ac:4e:1e:06:f2:2d:57:b0:
43:3a:2c:81:98:b1:de:53:44:7c:5f:3a:07:9e:a0:85:7a:01:
e9:cb:c9:42:9d:5c:2c:08:4e:bc:ba:6b:4a:b4:ef:ed:e0:4e:
1c:8b:6b:c5:f1:b1:1b:f4:f1:e5:31:1e:54:55:d1:f3:6d:a7:
38:2f:93:b0:86:95:df:d3:5a:ae:e0:cd:79:a1:35:21:5e:c3:
b4:5e:f3:64:9e:75:26:03:95:bb:f0:07:16:c0:d9:48:84:10:
6f:02:45:65:f2:cd:7c:01:51:a3:43:3e:80:c2:93:07:d0:35:
4f:c9:de:1d:87:57:c6:a6:69:9b:64:a5:c1:2f:95:07:77:d9:
0b:56:f2:58:d7:1a:a7:9d:e9:c3:48:72:6f:ee:65:2f:c1:1c:
38:10:8e:de:6c:92:ec:4c:f5:3e:37:87:3a:48:b9:98:6b:06:
02:99:9c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:11 2025 by rpki-client