Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier: 9XgxOzr4vynCPR9qGGsCotc+oS73iyHy/hyEJLEmGbU=
Subject key identifier: 13:99:5E:4B:78:D6:8D:B1:8A:87:7D:AB:EE:D0:FE:85:D2:B0:B0:CF
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial: 0195127E3948077FD47F17FAE6E771F335B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number: 043B
Signing time: Mon 17 Feb 2025 06:00:16 +0000
Manifest this update: Mon 17 Feb 2025 06:00:16 +0000
Manifest next update: Tue 18 Feb 2025 06:00:16 +0000
Files and hashes: 1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: UogtDJGgFcPXFA/LGn6r9TCsJ84tsmowUXpW05dMUcI=)
2: I5lxuXg8Kfbx7zXSiGma80fdzJ0.roa (hash: H4ThFxj2wgOGFGxz87hZLwfWFdZQqMGoVJJaZVtoaOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:39:48:07:7f:d4:7f:17:fa:e6:e7:71:f3:35:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
Validity
Not Before: Feb 17 06:00:16 2025 GMT
Not After : Feb 18 06:00:16 2025 GMT
Subject: CN=13995e4b78d68db18a877dabeed0fe85d2b0b0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:6f:4b:57:3c:31:92:5e:66:81:ba:b2:93:
e8:89:df:4a:07:05:7f:f4:47:7f:d0:3d:df:c6:f6:
1a:da:14:f8:0d:e2:6c:37:34:af:c3:f0:d0:f1:83:
a5:1f:f0:d3:b3:d0:f0:37:f7:e1:68:d9:a7:53:f8:
3a:e0:44:f1:dc:4a:1a:06:c8:73:3a:74:21:fa:b9:
59:0f:75:16:60:37:4c:1c:51:1c:91:72:38:3f:17:
0e:6c:de:9f:43:31:18:10:b8:6c:7c:4b:cd:ff:6a:
95:20:63:74:41:ee:45:60:0c:e2:d5:66:64:67:98:
6c:71:ec:80:b0:37:bb:cd:e7:86:a9:e5:b9:76:2c:
91:c3:c7:bf:d1:8c:65:0b:26:2a:4d:93:8d:fe:8f:
79:d0:14:ad:77:9e:2e:63:b4:e2:48:16:5c:63:73:
fb:1a:de:97:40:3b:ef:fc:10:b4:61:66:66:01:c0:
82:1b:f7:c2:eb:24:94:68:f8:64:8a:8a:88:4b:82:
0d:69:c5:80:ff:63:f9:af:75:9b:73:5a:dc:20:38:
1f:86:5b:53:f0:7f:57:5d:62:04:91:a2:a5:49:90:
66:a0:9c:76:62:f1:02:48:18:39:98:e6:5b:db:2c:
ad:d3:5e:db:04:57:e3:67:07:2d:5c:39:55:ec:48:
96:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:99:5E:4B:78:D6:8D:B1:8A:87:7D:AB:EE:D0:FE:85:D2:B0:B0:CF
X509v3 Authority Key Identifier:
keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0d:28:73:0c:a6:b1:31:54:28:70:ac:45:0d:56:ff:bd:25:
8e:65:38:bf:3c:ef:9f:a4:77:8c:8a:fc:e0:1c:82:76:76:07:
47:0e:e6:0b:2d:61:20:71:45:f0:2d:b3:8f:af:3c:ae:39:01:
83:78:15:03:43:46:c7:be:d2:64:cf:3c:af:8e:3e:b2:ea:e4:
db:a6:10:93:b4:87:2d:1d:b6:31:38:bf:8c:1e:a3:28:00:85:
b6:b3:ab:02:c5:08:c9:4b:3e:e2:5e:41:38:7e:f6:f3:a1:26:
2f:da:ce:77:f6:95:3c:61:c2:51:31:58:1c:0e:3e:5f:6e:7f:
51:e7:cf:af:55:c3:b2:c3:1e:62:1e:ed:48:55:84:cf:d5:f4:
87:51:c0:88:26:e3:53:3e:45:48:39:96:ae:6b:db:81:e4:1d:
c9:97:6d:b9:29:2f:9c:73:49:84:1b:3b:ee:42:36:fe:ca:9d:
e8:ac:c1:58:c4:45:ff:e8:0a:53:c5:9d:6f:01:20:1c:2a:21:
b3:d6:71:9b:71:7e:94:5f:50:7f:b0:d4:26:7a:d3:03:8a:77:
48:59:77:dc:f4:8d:2b:42:fa:ee:36:d5:e5:b5:76:a5:03:34:
b4:d0:fd:29:4e:6c:08:c5:12:82:2a:41:12:76:da:7d:eb:94:
6f:b7:da:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:06 2025 by rpki-client