Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File: D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier: GjTZVpQat4QJ1G7DFDyOb52aDX3ViNzTy2bO5g31ArU=
Subject key identifier: 88:AC:1D:51:C1:48:CF:86:EA:B2:C5:11:60:F9:4B:36:D8:8D:A7:95
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial: 0195127E09B12D257074CFE8E02FCC7EB99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number: 0562
Signing time: Mon 17 Feb 2025 06:00:04 +0000
Manifest this update: Mon 17 Feb 2025 06:00:04 +0000
Manifest next update: Tue 18 Feb 2025 06:00:04 +0000
Files and hashes: 1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: idbWsOuEHqzQG4QRAD2i5RPiG32YWv2edg/xG2OcN9M=)
2: XYDcPLsMJ5XYkYL0PQrHKhNJ9s4.roa (hash: 1m7+mEL2iJYkvJfrDXaZzofwFCojsAzxm4zXV5nNyDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:09:b1:2d:25:70:74:cf:e8:e0:2f:cc:7e:b9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Validity
Not Before: Feb 17 06:00:04 2025 GMT
Not After : Feb 18 06:00:04 2025 GMT
Subject: CN=88ac1d51c148cf86eab2c51160f94b36d88da795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:bc:c9:47:2f:3c:62:70:0d:25:bf:32:ab:
33:fb:0b:f5:56:bd:33:ad:6e:7a:4f:d1:32:99:d9:
09:56:c8:39:77:0d:d6:7f:4a:0e:06:13:70:0c:12:
da:05:68:8d:7e:35:9b:ad:36:50:81:09:30:77:c8:
9e:60:4e:bf:90:eb:e0:5a:9b:19:0d:87:00:a7:b0:
6a:25:d0:ca:78:ef:7f:c2:ac:a5:b3:32:79:96:9c:
ac:6d:2e:19:06:1d:fd:09:1b:79:7b:ec:1e:35:12:
70:0a:88:a8:12:4f:b7:47:62:33:89:2f:db:ac:72:
f5:db:f2:ab:27:68:5c:6b:82:e9:f2:47:6d:30:10:
be:a9:7d:46:f5:c5:eb:00:51:6e:e6:e5:01:fb:e7:
6d:ae:7b:2c:f2:27:06:2d:47:96:56:aa:9b:ee:ca:
f6:48:00:b4:ad:3b:ef:35:bd:43:6c:56:7e:f3:48:
99:dc:91:c3:00:5f:0f:dc:a1:33:b3:34:42:f5:60:
84:37:fd:c2:ba:9a:ef:69:f9:00:23:79:4a:79:fb:
2a:2d:04:0b:10:2a:60:13:73:83:83:6d:38:c8:0e:
04:16:7a:31:72:a5:88:49:f8:35:ff:39:96:b5:c4:
5f:d2:1f:ec:fd:69:61:d9:2f:94:e5:c3:d3:6f:8a:
bf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AC:1D:51:C1:48:CF:86:EA:B2:C5:11:60:F9:4B:36:D8:8D:A7:95
X509v3 Authority Key Identifier:
keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ad:bf:a7:61:28:e9:30:b3:2c:d8:ff:a4:2d:ed:83:a7:8b:
19:85:d5:46:31:b7:53:0a:7b:fa:b6:13:f6:b0:e6:08:0d:80:
df:3e:ee:62:d4:1a:bf:2b:61:f9:48:52:39:1f:86:db:7e:77:
24:43:d4:60:bb:d1:2d:3a:a2:e0:09:a7:a8:4e:f6:ec:ac:f4:
ad:34:74:a9:b9:1e:c3:16:d6:7d:36:ae:6d:a0:db:92:9e:be:
e0:aa:26:ff:cb:02:da:43:36:8f:3e:e8:20:09:ed:c6:24:4c:
4c:b1:65:77:56:0b:f2:cd:26:6a:43:38:a8:07:c1:7f:1c:a8:
94:ea:a2:3a:eb:f6:a7:ff:91:c3:9c:50:d7:d4:bc:64:2c:18:
42:bb:8b:c9:0e:26:f4:e4:d8:04:c6:fa:2d:ea:05:2e:3e:ce:
2a:71:36:dd:8b:ea:23:84:6f:dd:66:97:08:23:b5:6a:df:77:
f9:fc:57:aa:90:9b:b3:b2:5e:a6:c7:68:92:07:f4:69:df:13:
17:a6:f9:76:1d:2c:83:3e:5e:2a:aa:43:5f:79:6d:37:0d:29:
ca:50:2e:2b:6a:d1:17:17:30:b9:c0:25:0e:6c:5e:13:8b:74:
f4:ac:fa:a2:ea:b1:e6:cc:aa:59:5a:cc:7c:07:9e:1d:40:f8:
d2:a9:58:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:49 2025 by rpki-client