Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
File: V1j80i-3oR3qizfkw_YiqnpHue4.mft (raw, json)
Hash identifier: ScRMo0RmSf1H5hga4cBOKigDVphU/cTTOkW3xHLkJTA=
Subject key identifier: 16:60:52:CC:E1:9A:97:33:12:7D:29:19:46:C4:F4:CE:53:58:F7:D2
Authority key identifier: 57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE
Certificate issuer: /CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
Certificate serial: 0194C46372E5FF9C6611371DAF1EDF51B351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
Manifest number: 113C
Signing time: Sun 02 Feb 2025 02:00:39 +0000
Manifest this update: Sun 02 Feb 2025 02:00:39 +0000
Manifest next update: Mon 03 Feb 2025 02:00:39 +0000
Files and hashes: 1: 1cAFysoNqNIZH8FwmwvYqJt5bM4.roa (hash: ODKSC75jE0xq09vjpL4sB7ddbosHMLlBxEPWj0XoiqQ=)
2: V1j80i-3oR3qizfkw_YiqnpHue4.crl (hash: usurEaAOXJME3Fr3lr865eAtqwy5YMKoPjEOc7vPAaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:72:e5:ff:9c:66:11:37:1d:af:1e:df:51:b3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : Feb 3 02:00:39 2025 GMT
Subject: CN=166052cce19a9733127d291946c4f4ce5358f7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:e5:3a:bf:86:8a:bc:0a:3b:fb:f8:ef:41:
0f:41:b2:c1:64:a1:a6:9a:a1:1e:f1:74:ae:93:86:
1f:4b:07:9c:6f:fe:48:d1:0a:a3:48:1a:45:35:8a:
53:9a:8f:1c:0b:89:9d:06:26:4d:62:e3:d8:69:5a:
37:10:d3:1c:d5:64:2e:27:27:52:d4:fe:34:4f:e4:
bf:57:6e:9e:20:81:ad:f6:2b:cc:9c:76:3d:f0:dc:
86:bb:44:94:66:94:b3:7d:c0:fa:d9:6e:f5:3e:9d:
37:2d:9e:b1:f3:b3:0f:0a:17:21:06:ac:72:0f:d4:
b1:cf:24:0a:c8:48:15:f7:6b:b5:f7:dd:3e:98:d0:
13:0a:8d:7d:bf:5b:69:88:02:13:86:86:68:0f:6f:
b0:15:1e:cd:b4:54:f3:fd:62:a1:b4:a4:95:49:80:
85:f0:bb:98:62:a4:07:b7:df:38:92:45:a5:7b:9b:
37:af:cf:af:e1:fe:4b:22:a5:f5:9d:c8:c5:60:c5:
78:f8:47:12:3a:11:ec:95:b0:a3:0c:a3:c2:5c:11:
5f:63:61:26:53:be:15:79:68:7d:13:ee:3b:5c:01:
e9:d6:35:ae:d8:08:61:72:68:9e:80:10:5c:9e:8c:
2f:d0:44:e8:97:6c:e1:9a:b5:6e:19:a8:78:c6:b4:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:60:52:CC:E1:9A:97:33:12:7D:29:19:46:C4:F4:CE:53:58:F7:D2
X509v3 Authority Key Identifier:
keyid:57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e4:27:a5:94:fc:b1:0f:ab:f3:7e:8f:0d:be:de:ce:ff:1d:
cf:7a:72:13:97:de:34:e9:2d:40:b9:44:5d:09:17:60:9e:df:
97:61:4f:3e:8d:35:6b:37:e0:d6:b3:d6:da:d1:4b:60:d1:68:
eb:c2:68:5d:65:0b:80:a0:ed:3f:b0:6d:08:c4:f1:09:bb:9d:
5c:9b:a2:ac:50:c0:76:7c:01:68:89:3b:82:9e:29:b7:2a:36:
54:ee:c4:cf:89:e1:74:bb:0f:1b:01:b5:a6:92:4b:cf:bc:60:
4e:5b:a2:96:bc:6c:22:f5:78:88:13:43:94:1a:fb:66:a5:3e:
5c:5e:88:c1:69:99:ed:d3:cd:4d:3b:4e:3f:80:25:49:a3:5e:
1f:13:0b:6b:28:fd:40:3d:d3:06:25:68:ae:a1:c8:7f:7e:b2:
33:c3:e4:08:36:7e:b7:b8:f9:7f:75:0c:a2:bc:f3:52:d2:a7:
66:2c:17:9c:7c:0c:65:05:83:de:60:4e:d1:ec:3b:ee:42:c7:
20:24:fb:e7:a5:3c:c2:df:9a:1b:2f:72:ba:eb:90:c6:6d:c8:
7b:52:91:5d:0c:5e:b0:c5:33:94:82:e5:1e:23:aa:50:da:55:
9b:aa:c8:cc:9f:3e:31:15:53:1d:20:cd:a6:42:34:13:ce:b8:
bf:87:1b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:57:38 2025 by rpki-client