Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: tumyR4Mlhx/Cu8wnecvzhyk3EO7ovNedAYytXpjfYk0=
Subject key identifier: AA:D0:46:D3:04:5F:7F:BD:D9:5C:66:7E:A8:27:76:28:A0:D1:AF:61
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 019510C7C3645C69E19C8C1F6C940629A984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:01:21 +0000
Manifest this update: Sun 16 Feb 2025 22:01:21 +0000
Manifest next update: Mon 17 Feb 2025 22:01:21 +0000
Files and hashes: 1: 58PUT6ysZxKBONG9sTIOc1qL5Ls.roa (hash: n7460GeFmYRqG1aJJrfKZDL2a6FFJmjROlobClHOM2Y=)
2: 6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa (hash: lk5fXZ2Pgc+XIPu3nQ53XeIOSBvgneeeWVb78tjDQes=)
3: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: /Faz3Sws5wrZVkaa9ziMxZO+vLgCzsPlndL4VprOd+8=)
4: L5CVIsoItTTVw443IuKRnX_6ofc.roa (hash: u0QFKwVPCjoujirXbnFrSGkKMLgZEeDISyY/cSBSGF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:c3:64:5c:69:e1:9c:8c:1f:6c:94:06:29:a9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Feb 16 22:01:21 2025 GMT
Not After : Feb 17 22:01:21 2025 GMT
Subject: CN=aad046d3045f7fbdd95c667ea8277628a0d1af61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:92:a8:d4:28:1c:34:92:ef:6c:13:ea:ce:
a6:2f:d1:9a:4c:c7:a6:c1:0d:52:84:ee:17:27:8b:
e4:06:06:7f:5d:7c:ff:ae:0f:f1:1f:b6:87:09:70:
6f:61:bd:31:9b:fd:04:c7:6c:d0:95:4e:6e:4e:f0:
93:1b:d8:e4:77:9c:2c:f7:47:30:d0:db:05:39:fd:
a7:69:78:b5:30:ee:82:6a:d3:c3:77:ea:82:f3:ac:
c6:e2:65:f2:25:81:9b:33:48:68:e2:8b:90:48:2f:
69:39:d6:e9:de:52:7a:85:f1:85:99:6d:2d:33:c3:
4e:0c:d9:a3:11:79:41:26:c6:e4:6b:74:d0:81:c9:
36:c0:fd:2f:6f:ae:fd:dc:f5:2d:f2:be:78:05:61:
d0:b8:cb:11:41:40:df:45:e7:cc:81:fc:41:5c:46:
8d:33:2c:9e:6d:bb:f3:af:20:b3:a8:dc:f5:2d:7a:
ac:ec:05:81:17:5b:47:fc:55:fe:7b:ad:3a:cc:de:
7d:d6:ce:79:b0:27:8f:ac:e5:99:2d:ff:45:61:29:
ab:8c:69:fe:b0:14:cc:71:0c:8f:ec:3d:e5:b2:ac:
0e:e6:df:c8:0e:88:59:00:78:5e:13:cb:05:0e:af:
b5:e9:61:e6:8e:87:83:64:eb:db:8b:1a:1c:cf:67:
0f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D0:46:D3:04:5F:7F:BD:D9:5C:66:7E:A8:27:76:28:A0:D1:AF:61
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:fe:0e:a5:7a:13:12:63:5a:7c:d1:ab:64:62:51:dc:89:0c:
af:b1:88:fe:b6:c1:91:57:28:f7:aa:db:a2:7e:8a:99:d5:aa:
d7:d6:55:b4:c4:2e:83:55:5a:92:db:f9:4e:a2:b5:fa:4b:e2:
8c:b6:0a:a2:e4:1d:34:ef:6d:7e:82:8c:cd:e0:f5:f2:a5:fb:
38:df:82:6c:28:01:b3:64:65:c7:3c:14:a5:89:b8:2d:d3:36:
94:25:0f:3f:fc:fb:d2:b7:90:ae:cd:40:29:18:f7:70:2e:01:
dc:0b:a1:21:76:88:b1:78:6d:9c:83:59:84:93:18:b8:32:44:
48:39:e2:80:82:f1:03:28:d8:5a:77:00:52:59:d6:de:92:1a:
2c:28:b5:0f:2f:39:e0:ea:21:5e:4c:38:5f:42:47:5d:47:09:
23:6e:a7:c4:7a:bb:1c:f1:53:06:79:e2:d4:b6:ab:6c:ae:ef:
3a:96:92:6f:a3:84:99:68:ab:60:1d:06:b2:b0:93:73:80:1c:
62:63:2e:0b:9e:87:17:1e:a7:49:f9:08:e9:db:8e:ce:84:84:
9a:66:4f:b1:67:01:9f:5e:84:97:6f:c7:df:92:67:03:11:a8:
6d:8d:06:eb:35:26:d7:fc:ee:f4:6b:70:04:57:d3:13:d7:37:
de:b8:0b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:49 2025 by rpki-client