Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
File: C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json)
Hash identifier: fTPyzPrKynWx0wShPZvMy4qtWCR/4GNNnAGYGVQazoc=
Subject key identifier: 50:7A:A9:2E:F5:D6:7B:00:4C:CA:97:4C:FB:87:AF:24:83:A3:9D:FE
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial: 01950F46613C9259D0AE6EDAF58BEAC977AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
Manifest number: 1457
Signing time: Sun 16 Feb 2025 15:00:25 +0000
Manifest this update: Sun 16 Feb 2025 15:00:25 +0000
Manifest next update: Mon 17 Feb 2025 15:00:25 +0000
Files and hashes: 1: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: L2Kwg2Es32X/mNYoWQeURQi6buHED1Qf54cdHunVTAw=)
2: Knfth6txiDF12eWnRVMBTSZ3N7E.roa (hash: Erv1kSG7AIiPjVidT056wHHSwG5zaW2OWLCIEkBM0Dk=)
3: Wsb9iLccMA3IkT_2bsufbfAmx6s.roa (hash: EeNg1ELWa5JeZ0r5s7rlId0eyflaNS7CxDa9rMshhYk=)
4: XPixcvd-VZdDwp01qDyS6l8HyGk.roa (hash: nEM6mcnfwNKM+CYw9oKK1seFIgWAcWfoaoBK4ckQSSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:46:61:3c:92:59:d0:ae:6e:da:f5:8b:ea:c9:77:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Validity
Not Before: Feb 16 15:00:25 2025 GMT
Not After : Feb 17 15:00:25 2025 GMT
Subject: CN=507aa92ef5d67b004cca974cfb87af2483a39dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:16:93:b9:c6:40:a4:05:2a:6c:2e:c4:58:bd:
6d:73:97:96:78:ee:13:b1:78:2d:d3:2d:3d:f4:a0:
3e:0d:c6:23:8d:25:06:52:a9:ab:db:3b:4b:10:96:
88:75:92:88:08:c0:19:aa:42:3d:9f:52:c7:05:cb:
e6:ca:43:f2:e9:fd:e3:00:7b:b9:53:a9:3d:45:0b:
af:25:b6:1f:f9:f6:16:a9:b8:4f:f1:9b:9b:47:f4:
33:3c:ae:61:b6:59:70:e9:30:fe:d8:cc:bd:83:54:
1f:ac:75:a2:06:2f:9f:23:96:60:8d:09:47:dc:8e:
da:d7:df:c6:ab:91:d3:66:42:68:d1:63:44:28:fd:
1b:89:c2:2a:bd:52:3c:e6:9f:b3:32:e2:33:43:32:
74:6a:84:e0:2f:a4:f8:fd:91:da:0d:45:b6:5b:1e:
94:cf:55:15:d2:b7:a7:38:0b:41:31:0e:0c:f5:32:
ed:37:f0:d9:a6:95:37:ea:a4:71:36:6c:8f:c9:57:
55:45:66:60:8d:9d:af:47:37:12:b5:a8:e7:76:7c:
93:33:a4:71:37:32:90:93:9f:66:a6:f6:3c:67:2c:
ec:5b:8f:27:48:09:70:23:8b:8b:32:90:61:5c:03:
21:8f:84:a8:81:3e:e5:5d:0f:1b:3d:ca:48:11:8c:
7f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7A:A9:2E:F5:D6:7B:00:4C:CA:97:4C:FB:87:AF:24:83:A3:9D:FE
X509v3 Authority Key Identifier:
keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a5:80:60:eb:2e:af:53:37:1c:8b:5d:c2:bb:3f:53:dc:f2:
b0:2f:cc:38:9f:81:87:0c:b6:88:4f:2c:45:a2:a2:61:78:bd:
16:5d:61:20:8c:9e:df:f8:d7:bd:8c:04:a3:4b:48:c9:75:fd:
6c:29:04:aa:2d:bd:67:30:2b:3b:f5:2e:c7:a2:ab:09:42:dd:
38:a7:fe:3e:9b:b3:96:71:f8:20:2d:73:50:05:75:b0:15:a2:
ed:59:4d:93:3f:f2:fa:02:7d:a3:cb:cf:91:13:82:63:58:36:
45:01:28:19:c3:08:75:cd:75:09:7a:53:94:d8:30:cd:38:8d:
8f:47:df:e0:48:2b:67:c1:4d:41:9a:04:29:97:6f:fc:81:24:
d3:47:ba:44:f3:92:ec:ef:cb:84:e7:a0:44:97:58:bc:f8:c9:
de:11:96:4f:0e:ab:c8:67:28:71:7c:86:72:c6:d6:13:f0:37:
43:8c:2d:c4:f0:6d:20:35:a8:71:68:bd:b3:4c:27:c5:cb:79:
19:e4:95:22:96:0f:e5:ea:79:d4:e5:3c:6d:c0:5a:35:e8:77:
f8:e8:64:5a:d3:3b:e0:7a:99:66:bf:e3:75:a6:35:0e:98:87:
ae:06:ce:bc:80:3b:29:39:23:1c:82:ef:83:a7:92:39:9d:46:
d7:30:15:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:04 2025 by rpki-client