Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
File: pXtgj8zzIw5EXJg_nja1DhH3LPI.mft (raw, json)
Hash identifier: bEBrGR4DQIDQgG20AkboGJrERyqx54cvZxEk6ttcKWc=
Subject key identifier: 41:20:A0:0C:46:79:4A:09:F6:17:11:AF:1B:76:BF:9E:4C:21:A2:A0
Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
Certificate issuer: /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Certificate serial: 0194C3BE4EBBB882192D384E23FB5132CA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
Manifest number: 0EB9
Signing time: Sat 01 Feb 2025 23:00:16 +0000
Manifest this update: Sat 01 Feb 2025 23:00:16 +0000
Manifest next update: Sun 02 Feb 2025 23:00:16 +0000
Files and hashes: 1: NhJBxI5W8KC_WePH5ss0tv9aU5U.roa (hash: /CWlrfID9lQOxgVeBTFIGSk2eqixT2ZM3bIGkRsAuOA=)
2: pXtgj8zzIw5EXJg_nja1DhH3LPI.crl (hash: oMTIkk2lD/9niwunDJlvtj3GuSoHvrdoOfYMimI15nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:4e:bb:b8:82:19:2d:38:4e:23:fb:51:32:ca:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Validity
Not Before: Feb 1 23:00:16 2025 GMT
Not After : Feb 2 23:00:16 2025 GMT
Subject: CN=4120a00c46794a09f61711af1b76bf9e4c21a2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:40:23:c0:f2:71:b9:09:df:ae:ed:2f:83:b1:
be:76:86:65:37:c1:1b:1b:aa:d2:b4:f6:e3:7b:b0:
24:b3:d5:51:ea:c7:f4:b8:1e:aa:46:66:d4:b5:5a:
5c:7a:3b:9c:5f:9a:23:26:ee:4e:c0:b3:5e:52:6f:
c7:07:10:29:59:54:cb:b5:57:0a:01:e3:3b:33:dd:
01:85:21:ad:82:4f:c2:9d:6e:7a:10:8d:28:77:ea:
d9:5e:bc:40:21:88:fa:d2:41:a8:88:50:24:93:4e:
df:25:5b:b1:1e:fb:d4:ee:6b:70:dd:47:13:bc:d6:
2d:ba:18:a8:c8:3f:95:ba:9b:41:12:70:5c:d3:bd:
9c:10:60:00:ac:51:57:7b:42:21:07:e2:c0:d4:10:
c2:22:73:cf:42:fd:7d:02:4b:b3:ae:fa:e4:1e:df:
e4:a9:ff:d3:f7:5f:b3:41:41:98:67:81:3c:d0:28:
5e:b1:19:36:be:12:61:50:d3:d3:a0:e6:9f:eb:80:
cf:8b:25:c0:18:13:82:63:ea:a9:3c:bf:ec:4c:72:
ce:d3:e3:7b:02:c6:e2:9c:d4:0e:ef:e0:04:38:79:
de:e0:eb:40:28:0d:5b:84:64:bf:2c:c7:61:0c:02:
5f:cb:18:8b:e6:77:ee:64:9f:9b:f8:70:3e:6b:65:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:20:A0:0C:46:79:4A:09:F6:17:11:AF:1B:76:BF:9E:4C:21:A2:A0
X509v3 Authority Key Identifier:
keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:19:d4:52:3e:5e:5f:35:fa:91:29:2b:04:e9:65:54:30:36:
3b:63:c7:6f:61:34:3e:72:13:ae:c3:15:b3:42:5d:9a:e1:d8:
4e:cc:b7:c5:a0:cf:ae:5e:a6:fe:21:db:71:df:d6:31:5e:4a:
6d:85:20:ab:2d:3d:71:6d:66:f7:42:cd:f6:9e:c0:77:b8:4d:
1c:d5:e5:08:9d:a6:eb:d2:ab:db:f0:00:83:68:a8:e5:f5:a7:
09:7e:f3:f9:0c:3e:c4:ac:15:f2:bf:14:7c:25:fc:2c:9c:a1:
2f:8b:b4:93:9b:8a:cd:3d:3c:85:1d:2c:96:ab:36:1e:80:70:
b2:b8:f2:0f:f2:24:50:3f:5e:94:0d:2d:35:d6:b6:69:81:64:
53:aa:78:29:bb:0d:0f:c1:2d:71:a9:ca:b5:24:49:20:d0:b3:
4f:89:de:50:de:60:18:85:b1:74:fa:8e:a6:d8:33:2c:eb:e8:
43:8e:d7:3a:30:04:85:19:3f:9d:a0:da:a2:20:1f:a3:e4:02:
4f:fe:82:48:16:b5:46:49:f5:2d:46:16:a1:37:90:d0:28:8c:
e5:78:cf:2b:27:b0:d2:cb:e7:38:da:93:3b:84:9a:1e:1f:90:
2f:f5:db:d2:87:ec:de:5a:ef:f1:53:54:4f:13:fa:c3:7c:b4:
63:ed:64:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:46 2025 by rpki-client