Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: k421h4G4U2BdBzLFPptpjNHG7Dx09Bqm5/ORBFmSveo=
Subject key identifier: 4F:D4:C7:23:B3:08:42:7E:12:6C:44:67:1C:37:3A:C3:31:3D:AB:62
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 0195127E20FB9D6C7B9B31D6499C9DCCC794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 06:00:10 +0000
Manifest this update: Mon 17 Feb 2025 06:00:10 +0000
Manifest next update: Tue 18 Feb 2025 06:00:10 +0000
Files and hashes: 1: BlllPFfwzBleeaMQKYCQ6F0B17E.roa (hash: NVG+8qMR5/CCZ9iBnkVvx5PPkG8viGMGtVWfLcED+Ug=)
2: HIJyCiEY4m0B-4I_1fcHAj8ZYfQ.roa (hash: KWAcJ6WMXGoAu/XkPymhO6ZdbPiSQfc1wyZmSQYSlQE=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: cU17IwJyreucQ6lSwQZF6iV9enDvKXoKimFgYnUDTV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:20:fb:9d:6c:7b:9b:31:d6:49:9c:9d:cc:c7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Feb 17 06:00:10 2025 GMT
Not After : Feb 18 06:00:10 2025 GMT
Subject: CN=4fd4c723b308427e126c44671c373ac3313dab62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:ed:b9:89:96:fa:d1:6e:31:c7:8e:1c:1f:
99:af:c7:23:ec:18:35:45:9d:06:04:1e:fa:d0:f1:
5a:9a:0f:d3:41:14:68:9d:d7:69:a1:50:b6:ac:83:
89:a7:85:4d:69:90:cd:2e:ef:42:21:e5:64:5c:89:
69:bc:0d:46:b7:8f:4b:a9:65:07:58:2d:8c:d6:42:
2f:af:fd:82:29:c8:4b:99:2f:29:dc:0f:10:47:20:
93:f8:84:e8:12:f4:9f:a6:ba:e3:c1:13:7c:1a:26:
31:45:c6:a7:0d:bc:d6:fc:90:8c:fd:15:5c:7e:74:
15:1b:c3:d9:fb:9c:5a:08:cb:5e:66:24:c9:fc:e0:
8d:f2:80:0c:c1:12:0f:4a:9c:63:af:92:c3:dc:61:
e2:a1:d3:1f:2b:37:d9:04:b9:8c:f3:dd:21:56:0c:
4f:b4:cc:15:6f:9f:81:83:c5:0d:ec:11:0c:1b:1b:
38:8a:d1:0a:c4:f4:fb:3f:be:bc:55:5b:03:12:9d:
21:c7:42:96:55:c5:da:8d:ae:fd:05:c7:e4:49:80:
cf:93:3a:86:76:63:c6:60:73:fb:50:45:84:43:ff:
19:62:a3:83:ca:5d:21:e3:c5:22:f4:6e:88:80:f4:
4e:a6:5c:29:23:b5:67:2b:1b:92:d9:b3:dd:7f:6b:
4d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D4:C7:23:B3:08:42:7E:12:6C:44:67:1C:37:3A:C3:31:3D:AB:62
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a8:53:42:82:5a:3a:4e:14:2d:5c:7e:ec:a1:da:fa:bd:f0:
88:da:38:69:5a:df:48:bf:8c:7b:51:cd:a1:03:e3:40:ff:c2:
e6:8c:dc:f5:e1:9a:de:82:af:78:d7:86:48:6d:d4:bb:fb:eb:
42:31:96:09:49:0b:8f:28:40:ce:a3:45:b9:15:3f:82:bc:b1:
55:4d:e1:55:ee:37:b1:63:be:e5:7b:76:d2:f2:aa:f2:98:e2:
bb:ca:fa:5a:8a:6d:0c:17:e1:9f:2d:22:c0:56:b0:a1:34:0c:
11:5d:26:37:aa:ed:9c:52:f7:f6:ae:25:64:42:65:c0:2f:ea:
81:cd:c8:c7:b7:06:5b:6c:68:93:8c:01:0e:16:49:c2:33:3d:
e9:1d:5e:f0:23:09:e7:58:58:81:59:c0:d6:9c:ef:05:c3:25:
12:c4:41:eb:83:0e:ae:b0:4c:fb:6e:21:9f:1a:0f:1b:14:2d:
4d:db:b8:5e:85:9c:b3:4a:7f:e0:79:40:31:69:ec:5e:25:2e:
03:f0:3d:ae:38:16:48:6f:a8:ab:d3:1e:e1:c1:9a:8d:06:03:
cf:c5:8a:cc:a3:e8:78:82:ab:36:89:74:7e:21:20:86:17:72:
6c:1c:a1:af:88:9f:27:71:ba:1f:83:c5:1e:98:bb:a4:18:bc:
44:a8:af:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:18 2025 by rpki-client