Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: fBiUZxUZXznrsdj4o3brrdOWjB+1eadIWA9vHjtceJU=
Subject key identifier: C1:D8:E8:19:22:5C:68:30:32:C8:F2:93:10:F9:97:D5:02:FF:19:78
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 019510C747BE9473BAA305F962380F96C2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 031C
Signing time: Sun 16 Feb 2025 22:00:50 +0000
Manifest this update: Sun 16 Feb 2025 22:00:50 +0000
Manifest next update: Mon 17 Feb 2025 22:00:50 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: TYur8w8MPhFaZLARdaRJy4Wb0mLt9JtRyk74phOiPU0=)
2: ihNwlKbuNiGlnJM8yFd2Nxrvaqo.roa (hash: auV56nH817P5x20E5reCmB5GZHUds7d7BudXxN/HlG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:47:be:94:73:ba:a3:05:f9:62:38:0f:96:c2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Feb 16 22:00:50 2025 GMT
Not After : Feb 17 22:00:50 2025 GMT
Subject: CN=c1d8e819225c683032c8f29310f997d502ff1978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7c:98:22:b3:b2:6c:fd:fa:4f:f0:4a:ca:b8:
61:bd:ab:84:15:4e:8d:11:13:41:ce:97:4c:5c:23:
13:6b:d6:47:ee:b6:eb:8b:e1:7a:fa:fc:b0:a5:d9:
f9:cf:3a:bc:35:39:de:37:e6:6a:e8:81:22:fe:58:
5c:9b:82:01:bc:24:79:98:75:4d:b3:fe:f2:b7:d3:
ca:24:5e:3b:f8:03:d7:c5:d0:f2:a2:b0:8c:27:e3:
3e:f4:4d:7b:d8:c3:ab:40:0a:4c:4d:82:72:89:52:
44:b0:77:7d:1c:b2:ba:33:11:85:a8:31:ea:96:4d:
a8:a0:d6:f0:f5:65:a8:9a:7e:69:8e:13:71:a2:b7:
cb:85:75:2d:20:bc:13:48:0a:bb:2a:ec:70:96:fc:
25:a8:10:51:4c:e0:2d:ab:04:9e:dd:3c:1e:78:cf:
98:ad:15:ec:4a:78:fb:61:05:7f:85:e1:c1:8c:e7:
ae:f8:53:d5:e6:25:21:35:7f:de:06:c5:74:85:eb:
71:07:bf:40:a3:91:d5:b6:5e:26:b7:f4:d0:42:d7:
39:a1:0e:19:39:f8:58:92:d3:bf:7e:67:76:1c:9b:
61:5f:37:73:47:80:32:55:12:3c:56:82:82:2c:4b:
21:9c:fe:44:c7:24:33:e9:4b:2b:6a:4a:65:18:45:
2b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D8:E8:19:22:5C:68:30:32:C8:F2:93:10:F9:97:D5:02:FF:19:78
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:45:b5:d1:95:ec:59:98:ed:78:aa:5a:99:d3:02:5f:48:65:
55:75:4a:a9:3b:16:c2:bb:43:79:b4:3c:bf:66:a5:6d:9e:3a:
80:3d:31:39:7b:64:6a:83:c1:8e:71:f4:62:45:1c:e6:cd:4e:
e7:6b:e1:d3:9b:08:29:bc:8d:3e:74:d3:fb:f3:fb:6b:03:0d:
8a:db:1f:21:60:11:8b:d4:5c:60:65:71:3a:67:80:fa:6a:2a:
bc:85:6f:2a:3b:63:16:e7:87:8f:02:a1:d4:c6:bf:4c:41:15:
96:49:9c:e2:c2:2d:2f:04:5f:0e:8c:23:c5:f4:9e:28:19:da:
76:0c:5d:15:d5:2a:2b:c8:21:6c:1b:c3:04:f9:3b:d9:18:06:
5c:4f:2f:9b:30:dd:73:1a:40:76:1b:52:12:58:06:2f:88:f9:
d3:47:56:b1:e6:81:53:e1:1b:97:cf:f3:6a:03:59:1e:4f:dc:
fc:cb:62:a7:fc:0f:91:7b:27:01:4b:44:a2:8d:83:48:6e:6b:
1c:25:4d:ac:07:44:65:ee:10:68:a1:34:13:be:09:64:8b:d0:
2a:a6:8b:92:2e:5c:37:54:57:a5:1d:bf:6d:51:2a:c0:02:66:
e9:61:ea:dd:bf:03:dc:01:c3:f1:02:aa:47:32:f5:69:6b:9f:
9e:52:47:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:47 2025 by rpki-client