Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: /7hPmtlDjp/ha9nHirvMQYHB2lR+yP8wsdaTy4ACIXE=
Subject key identifier: 03:9B:9E:BE:84:5A:0B:42:95:9C:60:FB:CB:0A:67:2E:D3:7C:FB:15
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 0195127E0BD505253542B55FD95336909630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 06:00:05 +0000
Manifest this update: Mon 17 Feb 2025 06:00:05 +0000
Manifest next update: Tue 18 Feb 2025 06:00:05 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: ID+s7zWMbvFF0jf/qGrNwzbw9X+/aSqCSWLB8zeFFds=)
2: lcycvAbT-2PUUx_keEjD_rzNQVg.roa (hash: ohYpD8zllBNGHneXiioDVg0sD783EBRieTug607OnxU=)
3: oAvccpdYptAzS_BGXpnm48hNKj0.roa (hash: UcqHCV81R5HjZRazwae448gGQvQVwy5vVk7J2zutre4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:0b:d5:05:25:35:42:b5:5f:d9:53:36:90:96:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Feb 17 06:00:05 2025 GMT
Not After : Feb 18 06:00:05 2025 GMT
Subject: CN=039b9ebe845a0b42959c60fbcb0a672ed37cfb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:69:07:1e:da:1f:43:d7:a4:e9:7d:3a:38:
61:cc:c9:a3:57:21:b7:cb:50:70:18:2d:e0:2e:ba:
0e:6e:a9:cd:59:ba:89:36:a7:9f:c6:82:d0:5e:2e:
cb:3b:71:6f:2c:53:b4:bb:c1:94:02:53:8c:32:c8:
97:d6:15:52:8a:6e:24:f8:3a:11:78:23:41:b9:56:
d4:a8:e6:3d:8b:95:7f:fc:3f:b7:ee:31:21:7d:92:
aa:ed:ac:9a:c2:eb:33:20:c7:4b:0e:9e:2c:21:34:
b4:f0:18:25:5f:42:e4:ff:64:47:b2:07:f4:2e:a0:
f1:02:d8:d4:0c:c6:a9:0b:f4:d5:dd:9e:9e:47:92:
bf:04:27:38:d3:53:20:f2:85:b4:bf:f9:d5:f4:d8:
f4:fc:7e:fa:b1:b1:0b:1a:0e:41:71:df:a9:49:74:
bd:47:a0:1f:92:e4:3e:fc:bc:f6:f3:9b:85:00:b8:
f1:76:e2:11:01:c9:a7:c2:fb:89:9d:ba:89:cc:15:
83:ec:38:58:be:7c:0c:12:3c:5e:2f:9e:8e:a6:45:
a8:71:e8:9e:87:81:f1:a9:f1:e4:bd:0c:b2:70:f3:
d6:f0:5a:8a:8e:2f:b8:cc:d2:d7:ed:1d:86:61:2f:
51:c5:28:db:27:32:24:b3:b7:c1:41:52:4c:b2:d3:
a7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:9E:BE:84:5A:0B:42:95:9C:60:FB:CB:0A:67:2E:D3:7C:FB:15
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ec:a7:3c:57:d1:b1:02:f5:d2:2e:91:75:64:f1:f3:59:5a:
e6:db:dc:f7:c4:d2:42:7f:3f:b2:06:93:47:48:82:c8:b1:93:
bc:9c:14:93:05:b3:bf:e9:4a:2e:a4:22:87:a1:f2:d7:1c:5b:
f4:a6:2a:ae:45:02:eb:32:a8:f1:18:3f:67:a1:0e:c6:9d:12:
53:4a:a5:e8:2f:f5:08:d3:a5:4c:18:c6:ce:af:03:d1:2b:fa:
8a:65:b2:e9:5f:24:dd:a7:6c:cc:64:5c:78:43:e1:7e:e1:34:
1d:a2:d5:52:e3:b1:8f:bf:82:11:6a:a9:dc:1e:0c:1d:cf:2f:
ed:11:89:23:ed:4c:92:ab:f2:ec:05:95:ad:7d:fd:2b:fe:3d:
a2:c1:ac:c9:9d:21:b7:7d:8e:f5:06:db:62:53:59:25:40:00:
5f:5f:08:48:40:b4:41:11:ed:43:51:2e:2c:b7:06:09:36:74:
d0:84:f4:6c:3b:a5:97:49:01:12:16:65:4f:8f:5a:61:80:4f:
cf:db:b0:c5:db:b5:ec:45:64:d4:d7:6d:0f:02:96:b8:2f:c3:
6e:23:2f:ca:29:78:8b:c3:83:4a:e0:93:cb:42:c1:ce:cb:9a:
4d:d9:6b:d2:01:b3:be:a1:1f:34:5c:67:53:d4:a5:01:7a:56:
d1:c3:2e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:18 2025 by rpki-client