Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
File: pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json)
Hash identifier: zN67ttzFcJI3rROPdL1ymD4KaDnKNtmHy5xIGnxgb+Q=
Subject key identifier: 14:9E:C6:5D:2F:72:4E:FE:57:A4:A2:FB:84:B6:BB:30:7B:ED:7F:ED
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 019512471DE8463154ADD82F2C1008FBC9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
Manifest number: 09B3
Signing time: Mon 17 Feb 2025 05:00:05 +0000
Manifest this update: Mon 17 Feb 2025 05:00:05 +0000
Manifest next update: Tue 18 Feb 2025 05:00:05 +0000
Files and hashes: 1: YA2knZBu4eCfckA4blXB6sNuHgY.roa (hash: shDh2slGwfDF1H72vnxsQTQ+XE9meHhIbU3+zi7hhrg=)
2: da6BAAfAoBTasYkztEyeFbO3dYM.roa (hash: svpwmdWuctN25b8D5PcCmhJa0TO40FFmvswQDucJFfQ=)
3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: TaamfccCmiTJwPT8T3/+5vz1azxFLgRURvv9oaaG4eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:1d:e8:46:31:54:ad:d8:2f:2c:10:08:fb:c9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: Feb 17 05:00:05 2025 GMT
Not After : Feb 18 05:00:05 2025 GMT
Subject: CN=149ec65d2f724efe57a4a2fb84b6bb307bed7fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2d:8e:c8:ce:3a:16:cd:16:1a:c0:2d:76:85:
80:fc:11:d9:f8:a3:04:1a:1a:a2:66:5c:57:22:1b:
2a:33:f8:60:25:fe:5a:15:7a:f9:92:7d:df:c1:33:
05:0d:0b:41:a7:e7:12:f2:45:35:27:bb:70:08:08:
ce:3f:e7:14:ba:f4:d4:6d:4e:19:43:df:d5:ef:60:
a3:e3:ac:6a:21:13:9f:b0:75:98:3b:48:85:f3:46:
2c:12:fc:74:89:e4:09:b0:5d:dc:a5:d2:43:d3:cb:
63:74:06:30:c7:82:cd:4a:d7:81:fd:1b:12:9e:b0:
65:32:a9:50:4d:ee:fd:87:c9:76:27:c3:77:78:67:
ee:0f:78:67:4d:34:32:a9:f3:68:c2:ee:4b:8f:06:
e1:13:d4:59:ef:6d:bc:dc:dd:1e:af:3f:da:85:1b:
42:3d:1f:37:e5:57:30:fd:38:e3:a0:14:e1:93:49:
b4:f0:68:f9:bd:0c:89:d2:f0:4f:51:a3:49:e7:39:
f9:7e:6c:a3:a8:ef:54:74:f1:36:bb:92:43:ba:de:
20:7c:5b:e3:0c:e8:8e:f9:56:ee:93:9b:16:0e:56:
47:59:0d:84:56:28:0b:ad:b6:44:3f:df:94:a1:02:
3f:ad:97:70:bf:ec:ad:1b:79:72:db:ce:d8:bd:34:
c6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9E:C6:5D:2F:72:4E:FE:57:A4:A2:FB:84:B6:BB:30:7B:ED:7F:ED
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1c:22:8a:69:11:78:a9:99:90:51:2b:f8:77:6f:df:fb:4e:
24:46:c3:8a:23:59:f9:8a:70:f3:4f:1b:a3:eb:5f:19:36:7c:
77:67:0b:d1:40:c8:af:1a:9a:55:82:2e:3c:3a:71:ca:07:fd:
7c:75:a2:a6:6f:d9:19:3a:ab:ef:a4:9a:e4:74:65:a3:63:d7:
68:6a:e7:ec:0e:f0:37:b3:7f:f2:92:ea:66:59:b4:0e:9c:0f:
92:f8:77:d4:05:2c:d8:9c:42:74:c2:b2:dd:0e:40:83:1b:65:
82:4f:19:92:b6:0d:2c:04:eb:08:33:85:01:1e:ae:54:0c:75:
d7:fe:6a:32:31:03:c4:60:96:3f:3d:42:ca:e5:49:31:b0:a5:
d6:5f:de:3b:a9:02:19:51:a3:75:76:78:0f:0d:81:0d:35:e2:
74:54:22:ef:e0:1d:e3:ee:b0:56:12:ca:1c:9d:88:85:a0:43:
2a:6d:01:05:76:49:06:fa:2f:9d:29:52:9e:21:15:db:56:1a:
a0:9f:a0:3a:06:67:74:ac:5d:b5:64:14:d5:89:f6:4f:8d:c6:
15:4d:2e:49:eb:d0:5b:d0:55:0c:ee:f1:c9:c5:08:39:5d:0e:
ae:41:9a:c0:79:57:e8:13:56:7b:a5:4f:46:a2:bd:23:23:5f:
bf:9c:9b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:22 2025 by rpki-client