Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier: SOu3Hk8YvSD2ksw1I51CJgKji8BmE90CEEt7kwgA/1U=
Subject key identifier: 5F:BB:94:4B:D8:2E:41:0A:0E:2B:6C:5F:38:28:36:14:1D:CC:1C:90
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 019510C74E47B0C2804FD8922BB6E0457B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number: 074F
Signing time: Sun 16 Feb 2025 22:00:51 +0000
Manifest this update: Sun 16 Feb 2025 22:00:51 +0000
Manifest next update: Mon 17 Feb 2025 22:00:51 +0000
Files and hashes: 1: 0O73PaTyLOlo4DtC-zfVh-so0po.roa (hash: 8d52pgK7PtxKWsBsAJptabjpB2sUfgsDROP6Cr/a/W0=)
2: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: al6R+Q0WmjEKwDpvCfOxa+p0E+9hpIBGGd6bLM5pPI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:4e:47:b0:c2:80:4f:d8:92:2b:b6:e0:45:7b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Feb 16 22:00:51 2025 GMT
Not After : Feb 17 22:00:51 2025 GMT
Subject: CN=5fbb944bd82e410a0e2b6c5f382836141dcc1c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cf:9c:20:44:2d:2c:03:cf:95:95:b9:9b:6d:
bf:d5:85:83:ad:30:8e:da:d6:53:56:2f:60:0d:dc:
5e:92:3a:43:1b:f1:e7:75:c4:0b:aa:95:03:f9:81:
51:d4:b7:3e:e8:98:91:62:5c:13:52:20:ce:bb:f5:
89:19:6d:b5:56:19:5f:0a:f7:42:1e:e3:14:62:07:
08:33:14:55:28:b3:c2:f2:c8:46:40:4e:62:cc:5b:
3b:4f:5d:98:7e:7f:b7:af:34:c6:40:ec:35:e6:a5:
39:ea:b5:3e:a9:24:ed:25:50:c2:9d:22:88:e4:7e:
3d:a4:7f:69:50:fb:52:50:e1:72:f2:96:f5:43:ae:
46:b5:9e:af:64:99:54:79:39:61:02:22:b5:05:eb:
2d:33:24:ba:00:97:4f:d9:a3:c1:39:76:33:c8:0a:
9a:80:a6:0f:58:d2:b3:85:d8:0b:cf:bd:d3:cf:fa:
1f:b4:ad:46:3b:ae:94:99:f0:6a:ae:dc:fc:b4:0e:
a5:b2:f5:fe:f5:0b:65:0a:4d:0a:be:55:06:39:d4:
18:21:a3:76:ba:a6:bb:c7:8a:d2:56:7f:88:65:b8:
e0:da:cd:d0:84:78:7b:a8:c5:fc:19:a9:fb:ed:cc:
e6:5e:4e:fa:83:73:07:11:8e:ee:97:2d:af:3c:68:
9b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BB:94:4B:D8:2E:41:0A:0E:2B:6C:5F:38:28:36:14:1D:CC:1C:90
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:49:90:cc:94:e0:c9:f4:ab:a6:32:bc:95:26:6e:58:17:76:
91:ad:b0:3f:dd:bc:88:2a:a3:90:9d:6d:18:9c:d7:d3:42:a2:
ee:eb:31:8b:af:ef:fb:62:b3:d6:fb:90:40:5a:e1:c8:1e:25:
cc:fd:67:67:94:2f:69:0d:e3:d3:53:7b:64:61:a2:74:28:69:
3e:7b:c2:93:2b:ba:8c:35:32:9e:7b:cf:8c:0e:c1:46:4d:1c:
8b:d1:fd:d4:47:76:c2:cd:38:24:f5:86:dd:c1:f1:b3:cf:7a:
0f:85:0e:72:5e:53:5f:de:db:dd:20:5f:56:a9:16:64:ef:9b:
89:30:da:93:d1:d2:ec:0c:27:2e:c5:20:9d:35:c7:69:d0:7c:
69:0f:e6:1b:ef:f8:59:93:d8:37:b0:35:72:c5:7d:ee:36:e3:
cf:03:60:12:8e:02:89:53:8d:36:03:56:f5:f6:3e:e3:b1:0d:
3e:bd:12:d4:9f:3d:59:4c:39:58:77:79:72:0a:0c:b7:d7:14:
32:6a:8c:98:29:bb:87:a5:74:ac:9a:7c:39:ef:9a:31:b7:f4:
ba:e1:2d:b0:94:49:8f:cb:68:1d:0d:5b:25:39:d6:4d:bf:17:
07:c9:95:4d:16:6a:e8:55:12:83:51:0d:b5:88:10:fe:e8:7a:
9e:9e:d2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:13 2025 by rpki-client