Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: e3hAOj5nWFmD0Ie4AMaodncqGlx7YfGNiva3w5VMDJs=
Subject key identifier: D9:43:47:9F:5D:00:8C:66:0F:E0:7C:7E:C9:A0:40:5F:46:10:2C:39
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 0194C507E46D834E7D9A080664E8BE3D6D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 1F
Signing time: Sun 02 Feb 2025 05:00:16 +0000
Manifest this update: Sun 02 Feb 2025 05:00:16 +0000
Manifest next update: Mon 03 Feb 2025 05:00:16 +0000
Files and hashes: 1: 3rwXWtFbCIuCgGU96PeqAGUhWU4.roa (hash: rp0bCqxBlPPCcVLUBh0MkWETtPWfiqbHwRVpOhMjnK4=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: LtNttBLB4y+96i+vk0vQEKogEeDVMOJ+/XwqmMNSPJU=)
3: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (hash: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:e4:6d:83:4e:7d:9a:08:06:64:e8:be:3d:6d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Feb 2 05:00:16 2025 GMT
Not After : Feb 3 05:00:16 2025 GMT
Subject: CN=d943479f5d008c660fe07c7ec9a0405f46102c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:74:ac:3e:08:f7:37:a2:20:4b:a5:90:0c:
bf:d7:4f:e8:a2:30:1d:aa:33:8f:8b:77:5c:3d:1b:
44:61:db:24:88:2b:32:b4:fd:ac:4b:de:c3:81:f1:
dc:c8:92:a1:67:e7:65:b5:56:c8:ba:74:c6:ec:77:
ad:8e:8b:d9:7f:fb:d0:04:e1:f5:8d:7f:a3:f6:cb:
d3:db:21:f0:f4:de:5d:2e:62:e0:2a:44:49:a9:a8:
58:c3:24:e6:b2:9b:28:b6:eb:a6:c2:16:03:60:26:
fb:e6:c2:51:2b:3e:71:03:52:ed:d7:d7:17:0d:4e:
a0:5d:5e:3e:04:c7:f3:5a:01:6d:f9:cc:2e:0f:bb:
9e:82:6c:76:3d:55:47:ff:d7:ce:b6:08:3a:4b:86:
ed:cf:e7:22:2f:96:e4:71:b0:f8:a5:ad:e6:f0:6f:
b2:f8:65:8f:dd:4a:00:6a:dc:14:a5:ed:07:fa:c2:
70:17:91:8b:94:77:7a:33:a8:20:b3:c0:3a:8b:c6:
47:7c:b7:f0:d9:8b:55:e4:07:8f:25:e5:f3:17:56:
32:f0:c4:f2:29:ab:ef:1d:b2:35:0b:cc:49:88:46:
a3:fd:fa:3c:e6:7a:2b:30:6e:6d:bd:90:4b:45:1b:
3e:6e:95:9f:db:97:d0:72:f5:c6:97:f2:11:20:0a:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:43:47:9F:5D:00:8C:66:0F:E0:7C:7E:C9:A0:40:5F:46:10:2C:39
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e9:5f:ea:17:88:79:48:10:74:aa:f1:31:39:d9:4b:67:ba:
61:fd:e5:c4:93:35:00:8b:75:14:ba:59:9f:cd:93:53:7f:f3:
c1:26:f4:63:a0:5d:f3:98:0b:83:cc:be:04:e0:82:16:0a:8c:
89:39:a0:b9:a9:a9:92:25:e6:c2:de:33:2c:70:ff:49:56:ac:
bb:b3:4b:d7:54:c5:66:3f:91:6b:e2:73:4f:58:94:ef:95:8c:
99:ac:93:29:e7:02:a8:29:59:ec:a9:9f:fc:86:d0:de:23:06:
2a:de:36:f2:22:f6:56:7a:0d:7d:63:59:13:c7:da:bd:75:bf:
9f:e0:d6:e5:98:93:bc:c1:bd:51:65:f4:9b:94:71:ca:39:9f:
4f:3e:d4:2d:59:bc:7e:e2:d1:07:e9:73:ad:18:39:c5:af:28:
46:fe:36:45:bc:3a:82:6d:10:90:42:a1:34:64:b7:61:ba:26:
d3:2b:9e:d5:19:69:42:ed:05:ac:79:36:1e:e8:6e:2f:da:71:
58:b7:52:48:e2:2c:95:00:d1:97:d4:9e:fd:d8:f0:6a:69:e4:
4c:de:09:7c:17:cd:d7:7f:68:d8:0e:e6:f7:ce:74:7c:8f:ca:
89:42:02:93:eb:67:03:0f:a6:45:3e:be:0a:36:37:21:74:b3:
f9:71:c6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:01 2025 by rpki-client