Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier: Sej1cAboztcXU2IfhVJ0I6Cwg+Djj9s43lhy4PMszUk=
Subject key identifier: D5:8F:EB:B5:50:6E:5A:4D:B9:0F:EE:A0:9C:5F:5C:A0:66:9E:BE:2B
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 019510C7C5CA55784F854A9D447AB4DCF654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number: 1166
Signing time: Sun 16 Feb 2025 22:01:22 +0000
Manifest this update: Sun 16 Feb 2025 22:01:22 +0000
Manifest next update: Mon 17 Feb 2025 22:01:22 +0000
Files and hashes: 1: 26OroNSilLDsLnRmS90OawnRg8M.roa (hash: 2vZiL1ss373Q0TX+B8Q8SMDZKCr1m9fpyjjeqgVg0rI=)
2: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: /1z3xAHpY5m5YU/s3XpuXgMOLxkSJKWgoJuT7rW0GJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:c5:ca:55:78:4f:85:4a:9d:44:7a:b4:dc:f6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Feb 16 22:01:22 2025 GMT
Not After : Feb 17 22:01:22 2025 GMT
Subject: CN=d58febb5506e5a4db90feea09c5f5ca0669ebe2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:85:a3:49:3a:11:9d:3c:d9:f2:7c:10:37:
a6:8b:f9:ed:38:56:9c:2b:f6:79:ae:63:ac:63:25:
36:51:45:17:96:b0:93:98:0c:d1:90:56:0f:e5:56:
8a:a0:f4:39:af:a4:58:4f:ef:03:d4:e4:d1:d1:53:
ce:6a:81:bc:2a:3e:0a:bd:a3:d7:35:26:93:e4:65:
e4:7a:bc:e6:66:89:4f:90:95:29:5a:e6:fd:7f:80:
82:bc:01:df:e4:62:d1:87:78:92:22:e2:67:48:ab:
c8:25:b1:27:e2:54:27:9b:57:bc:7d:ea:2c:56:1e:
f8:e9:bc:1d:02:cc:0b:6f:88:30:13:4c:81:37:a8:
6f:b6:4f:55:e4:26:dc:a6:c5:cc:b8:fe:b1:d6:57:
9a:f4:a3:ae:8c:a7:bf:41:f2:33:44:29:37:52:08:
94:a0:94:d0:96:3b:af:d5:d5:7e:a6:6a:28:16:ee:
e3:25:0c:f1:80:56:63:db:5c:3f:97:80:b3:8f:c5:
fb:e7:90:22:ba:f1:5a:8f:42:fa:f9:06:fa:57:d2:
e5:38:c1:df:dd:c9:cc:33:f7:88:2d:41:8a:fc:95:
5d:da:18:6e:22:d4:04:a5:e0:b0:07:8f:4d:18:a0:
dc:cb:23:63:a1:a6:48:39:51:18:ee:d6:10:9e:29:
39:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8F:EB:B5:50:6E:5A:4D:B9:0F:EE:A0:9C:5F:5C:A0:66:9E:BE:2B
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:60:f0:02:ad:60:3f:10:e6:45:45:30:7d:7f:80:f3:25:a7:
e2:90:47:80:2f:6c:21:ac:44:43:f7:d3:c5:8d:3b:ef:23:d3:
f8:36:38:7e:94:71:c5:be:3f:ca:e8:24:73:ca:81:75:57:09:
17:80:a7:4f:0a:c7:c7:98:4a:cc:cb:d6:d5:7f:9f:ed:cf:e2:
c1:87:34:fb:c0:66:bf:7d:23:05:7b:a2:e7:cd:a9:fa:ce:24:
f0:6e:88:25:68:ac:0e:38:16:a9:08:c4:a7:c9:fb:50:06:c5:
d6:13:49:40:09:7d:8a:58:bc:e5:6d:d4:c5:ca:3d:56:09:32:
32:25:be:86:a6:71:f4:ed:05:c2:da:aa:76:2d:47:06:f8:26:
58:ce:e6:8c:b3:c3:b9:0b:2c:41:01:c9:43:6d:95:df:28:9e:
e6:ff:f8:fd:d1:57:dd:c0:75:1a:11:7c:57:f7:e3:9b:bd:ca:
59:90:2e:0b:1e:34:22:3a:fa:00:4b:9b:67:39:3e:5d:5a:f5:
76:86:58:62:38:cf:b1:bb:93:6b:0f:bc:95:4e:5d:1c:e6:06:
95:fe:71:46:31:3c:ea:1d:cb:83:ac:6c:fd:c7:08:cf:09:cf:
d3:8c:7f:c2:63:ff:c1:ae:bc:cc:92:4c:cb:a3:d7:db:69:c7:
1f:df:11:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:14 2025 by rpki-client