Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File: RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier: gELZrskPan8geKm20s3rXDmU9o9AdQIcr6fxBEFlYxI=
Subject key identifier: 74:DE:9A:D6:5C:11:F0:E8:CE:42:DC:25:1D:59:E4:EF:E6:82:D6:3E
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial: 019511349583D4160865F7C952F5222811F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number: 0DCB
Signing time: Mon 17 Feb 2025 00:00:13 +0000
Manifest this update: Mon 17 Feb 2025 00:00:13 +0000
Manifest next update: Tue 18 Feb 2025 00:00:13 +0000
Files and hashes: 1: KOQetqGXnr-_jcGLAAJM_EFGncg.roa (hash: J0d7xN2IM4WNzPNloLfdHQukDngK3dzlCPcUmKT74Iw=)
2: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: h1l13tNWlVt24moXakMA2LcDdKl/fkxWm3LKxKdscfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:95:83:d4:16:08:65:f7:c9:52:f5:22:28:11:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Validity
Not Before: Feb 17 00:00:13 2025 GMT
Not After : Feb 18 00:00:13 2025 GMT
Subject: CN=74de9ad65c11f0e8ce42dc251d59e4efe682d63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:c0:4d:d0:dd:1b:de:fe:28:5a:45:0b:f2:
db:21:2e:1c:50:f8:0d:23:32:8f:10:4c:0a:d2:37:
1d:27:4e:05:54:2e:e3:d6:55:70:de:a0:12:a6:91:
06:66:a2:8b:12:db:71:29:b8:a6:27:9f:e0:71:ed:
b4:e0:8a:c2:a6:7c:64:69:33:c0:54:4f:79:08:8a:
5f:de:fa:7d:22:70:e4:78:19:a8:eb:9e:f4:06:f6:
59:48:44:25:98:87:93:00:20:19:71:52:cb:38:f3:
7b:71:c3:8d:5b:ba:4e:e0:e4:6a:c9:3f:eb:97:f9:
5f:b6:f5:79:52:b2:d5:a7:a3:b6:14:cb:5a:dc:8b:
7e:45:23:73:a9:14:e7:59:73:3c:e9:22:ed:f0:45:
5a:88:18:7c:ca:46:56:6d:ca:c2:49:62:28:a7:de:
5b:ea:c9:81:bb:99:c1:03:ae:ac:06:a8:c1:db:06:
cd:2d:51:fd:7d:cc:a2:61:f6:5e:e7:82:d1:ac:68:
01:8f:5e:02:95:6b:21:70:44:f3:34:e7:95:13:5f:
1a:c3:1f:a2:56:19:33:44:58:07:5b:c4:20:a4:95:
53:0d:85:e2:31:38:ba:77:e9:e5:7c:07:15:fb:5a:
3a:bc:df:a3:d1:62:b9:35:fa:46:ec:b7:fe:e3:5f:
f9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DE:9A:D6:5C:11:F0:E8:CE:42:DC:25:1D:59:E4:EF:E6:82:D6:3E
X509v3 Authority Key Identifier:
keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:81:6e:e2:b6:1e:4c:64:9a:2d:e5:bc:33:e3:40:20:c1:d3:
27:bc:53:23:85:45:7e:b8:68:df:04:d6:6e:47:f4:89:a9:2c:
7f:91:de:83:28:6e:8c:54:0c:c8:0f:52:93:1f:77:7b:50:bb:
c8:65:ef:34:9e:f1:7d:4a:6e:21:c7:f8:9a:16:9e:f6:c9:11:
fa:d8:81:a5:22:6b:da:f9:d7:94:ce:12:9c:fb:65:ea:ea:05:
17:6a:72:19:7f:61:8f:af:88:ca:8c:58:da:14:fb:85:32:45:
c2:d8:99:9d:83:4a:4e:05:c3:9a:4a:3d:41:d0:c0:6c:35:64:
7c:fe:fe:19:f5:7b:8d:97:cc:10:a9:af:25:e6:67:d1:a5:01:
c9:cf:d9:19:bc:0c:97:62:e4:2b:67:c3:ce:94:fc:1f:7d:e8:
5b:7a:08:99:ab:d7:46:64:b4:b2:ea:dd:93:44:f7:80:23:43:
f8:7e:0d:fb:5f:ff:46:b0:ec:56:ee:2e:d0:79:be:10:fd:f8:
92:97:51:cf:99:0a:49:e7:62:b3:a2:7a:8e:f9:31:e4:7c:6a:
f5:18:88:ae:2e:4d:37:85:dc:6a:bc:6b:2e:63:6e:fa:07:37:
7d:ce:ce:5b:f1:2e:aa:d3:64:e3:f5:a2:eb:d5:15:8a:e6:64:
57:94:2c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:11 2025 by rpki-client