Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File: x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier: 60ZXNrtVzq2bDjGeh5JRLmDMpehy8DiCSqIWl/+OHT8=
Subject key identifier: 1E:F0:57:01:2B:6E:2C:27:9A:59:0C:6B:6A:EE:AA:F2:B3:6D:FA:7F
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer: /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial: 0195108FD913317C44A438F5C99AFC7D8E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number: 1457
Signing time: Sun 16 Feb 2025 21:00:17 +0000
Manifest this update: Sun 16 Feb 2025 21:00:17 +0000
Manifest next update: Mon 17 Feb 2025 21:00:17 +0000
Files and hashes: 1: Hspj5PzkfsluTEqLIOwJGoQGOOc.roa (hash: gOBFADglYE5G0b4X+8zSKnsYq9fnevgLZFWvJSsuL9M=)
2: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: Tl2wt6fMnYlZ3o0hnrj5FNRZpWXD5vJQ1omOx6EpFPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:d9:13:31:7c:44:a4:38:f5:c9:9a:fc:7d:8e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
Validity
Not Before: Feb 16 21:00:17 2025 GMT
Not After : Feb 17 21:00:17 2025 GMT
Subject: CN=1ef057012b6e2c279a590c6b6aeeaaf2b36dfa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:f8:57:ae:a6:84:9b:b2:06:07:5d:d2:e9:
77:98:cd:87:a2:5f:5c:3f:ad:9a:66:45:9c:d5:d4:
e7:72:de:a1:de:be:3d:5a:4b:2e:e0:a2:2c:ee:0a:
19:af:37:7f:36:af:dc:ee:ec:3f:02:91:0c:52:44:
fc:39:42:66:11:91:8e:03:91:7d:20:0d:0c:a8:fa:
1d:65:fd:bb:b2:62:63:ce:d7:00:4e:dc:f3:63:06:
37:a8:a4:48:20:4c:aa:96:c8:3d:96:6e:41:06:85:
54:95:ba:41:f1:94:2a:a7:70:5e:13:85:e3:08:49:
69:19:bc:37:dc:33:4f:c0:af:ad:97:c6:37:21:f2:
c7:d1:3d:6c:56:41:55:15:38:df:a2:a4:f1:8e:90:
62:54:d4:60:91:79:f0:44:4d:9e:1f:7e:7b:b9:40:
63:a8:a2:8a:d7:17:63:69:3c:91:68:3e:33:9c:7a:
9b:46:4d:95:c5:95:10:7b:67:bd:77:e7:c8:28:30:
a1:b1:56:a9:22:2d:c7:4e:6c:59:e8:97:fd:81:52:
15:22:52:eb:02:f3:ae:a0:4b:6d:2e:5f:36:92:ab:
c2:9e:ef:1f:36:2a:6b:1e:94:e4:7e:9c:e8:2c:b2:
4e:2d:a5:ea:ae:2e:3a:2b:db:7f:7d:5d:dc:e5:49:
e2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F0:57:01:2B:6E:2C:27:9A:59:0C:6B:6A:EE:AA:F2:B3:6D:FA:7F
X509v3 Authority Key Identifier:
keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9e:6e:1f:50:c3:cb:13:60:34:27:62:92:e9:1e:ed:db:f3:
fc:fa:f3:4a:c5:f2:c7:43:30:08:4a:a4:c6:22:85:d5:51:e4:
f4:8e:f5:aa:3c:aa:8e:87:74:00:76:d2:64:22:8c:e4:ce:54:
47:f0:f0:32:02:dd:4d:82:28:34:25:10:ec:e2:0b:ad:df:92:
3f:bf:e4:82:68:78:9a:d6:40:3f:68:47:b0:81:71:ea:11:48:
b9:5c:a6:b9:ce:7b:89:86:ae:91:01:24:85:69:73:fc:97:d4:
a0:52:74:a4:74:a8:d1:21:c7:d2:ae:30:a1:e7:48:82:c1:f1:
01:de:77:12:73:60:a7:fe:33:24:7a:ab:ff:a6:95:3c:05:8f:
05:5e:9c:47:e2:3a:28:ed:60:4f:ce:0a:a3:5f:c2:3c:c6:38:
22:15:a6:6c:c7:94:04:88:79:d9:3d:dc:90:c0:14:ea:21:d9:
66:17:0b:da:c4:ca:ed:c8:27:4a:fb:e3:ad:88:25:4b:b0:64:
cc:a5:da:6a:2f:1c:14:e8:59:43:a1:c4:ec:a2:58:c0:b1:40:
f8:77:0c:be:5b:0c:67:1b:57:40:85:ca:a9:4c:96:38:5d:0e:
e8:df:5d:ae:b8:30:20:8d:24:8b:ad:9e:ec:ee:2b:51:59:28:
2f:46:63:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:56 2025 by rpki-client