Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier: ZQ6XPrAi77bnyui+vGNNBxhgyz1aM7O8WN5MbITGPjM=
Subject key identifier: 65:34:DB:9D:9B:4C:CB:DB:78:78:83:0E:20:D7:36:C9:1B:B7:F2:81
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 019511D964D5CF7EB9AE3BD393E1BE1A6103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number: 0CB4
Signing time: Mon 17 Feb 2025 03:00:14 +0000
Manifest this update: Mon 17 Feb 2025 03:00:14 +0000
Manifest next update: Tue 18 Feb 2025 03:00:14 +0000
Files and hashes: 1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: JxiKZjyiEz7XcWeP5ISJ8LOxBwFUphmvz4RgGUwpK2A=)
2: sUbLpeFS3XLLLQIvzdPabGUHzHo.roa (hash: 3V72mhpNF2hyMt7Kyc3iG5tEZ6zvkVberiaxQXV1Hcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:64:d5:cf:7e:b9:ae:3b:d3:93:e1:be:1a:61:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Feb 17 03:00:14 2025 GMT
Not After : Feb 18 03:00:14 2025 GMT
Subject: CN=6534db9d9b4ccbdb7878830e20d736c91bb7f281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:55:85:f5:0e:bb:4c:fb:fb:3c:2f:ca:13:61:
6e:74:fa:a1:b9:9a:9b:fb:49:a9:72:ae:c2:e0:3f:
d7:ab:b3:c4:fa:b3:a4:0a:d5:a6:72:89:0f:77:6c:
0e:ef:5a:54:96:5b:c5:50:a1:ff:cd:1d:bb:d0:66:
10:11:03:e3:99:6c:24:a2:e9:d3:16:17:a2:c7:18:
ac:dc:e2:26:34:e6:b1:73:f5:26:3a:c0:d3:c9:dd:
ed:25:92:c2:26:72:c5:4b:16:d8:77:97:c3:59:ed:
f1:af:44:91:8a:08:6a:a3:ae:f5:13:56:8c:1b:52:
41:c0:97:18:08:fb:bf:33:fe:4b:cb:b3:f9:42:ca:
49:84:88:70:e0:7f:b4:9f:4e:05:aa:f8:de:db:10:
fb:5a:ad:df:66:97:7c:36:9d:f1:e3:33:01:4a:23:
1f:8f:30:22:4f:1d:84:b9:3a:0a:ac:78:9a:ce:29:
e5:07:f0:cb:b1:1b:fa:45:c0:c9:07:91:ed:54:cb:
0f:3a:95:de:dd:78:db:ec:87:0a:25:30:4f:81:07:
65:29:93:4f:77:90:7d:d7:2c:34:20:02:d2:33:4b:
08:76:4f:3d:c2:95:63:1f:b4:b3:da:d2:b0:59:67:
4a:1b:40:b0:a4:a0:b8:b9:8a:e4:41:da:19:e2:46:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:34:DB:9D:9B:4C:CB:DB:78:78:83:0E:20:D7:36:C9:1B:B7:F2:81
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5e:79:2e:c4:2a:54:d7:ba:30:66:09:fd:69:e3:a6:88:50:
9b:b0:9d:b5:13:3f:6d:52:29:2d:c5:3c:0b:cb:e5:80:bb:04:
ad:f9:db:d9:d7:06:3a:b5:c5:a5:2b:25:bc:61:38:96:be:ea:
13:d9:4c:2c:68:57:44:23:74:5f:cb:5c:b4:d4:f1:8d:e4:dc:
52:89:89:89:bf:9e:40:e7:91:36:11:56:5f:5c:45:37:43:3a:
6b:df:2d:39:ef:d8:0f:1d:17:f2:f9:8a:61:cb:a6:cb:91:0b:
fa:e0:e1:a1:d9:76:e0:de:f5:21:1e:70:04:c8:55:66:ee:e9:
d1:bd:7a:76:05:47:24:7b:35:03:da:28:87:c1:d3:40:08:8e:
4b:2f:4f:c4:ef:f4:20:f1:e9:51:c6:57:2f:19:3d:47:fe:e3:
7d:2d:f9:62:50:e8:08:86:4f:59:45:d8:c3:a3:c7:75:db:27:
e9:a5:12:15:1c:39:f6:ad:d2:de:62:56:99:3d:56:07:dc:65:
66:23:98:2d:6b:25:79:47:44:56:b0:cf:e1:41:ea:a7:a6:4c:
06:61:f4:c7:b0:81:78:0f:dd:a9:7a:76:9e:56:a7:e8:ec:a8:
d4:e4:cb:e2:90:c1:d1:12:a1:f9:43:a1:0d:0b:5c:25:ff:eb:
14:fe:cf:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:22 2025 by rpki-client