Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier: 4FapdBUiuvh95NTU/ncQvUIcounAv1D4LW/qI7ppWNc=
Subject key identifier: 37:18:B4:4A:1C:BC:93:87:D9:F1:75:68:CA:20:FD:71:40:A9:00:30
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial: 0194C49A0DFF9100A8731E02CDBBE8F0A163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number: 51
Signing time: Sun 02 Feb 2025 03:00:17 +0000
Manifest this update: Sun 02 Feb 2025 03:00:17 +0000
Manifest next update: Mon 03 Feb 2025 03:00:17 +0000
Files and hashes: 1: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: lAy/LYaG7c7zMdwOkB0ADxwaIQ7lnZbwTVhe8yhzAxY=)
2: WxZz3Xq4Dubhk-2v4KkyD3DjymY.roa (hash: TcPVaB9byF2mn4BjYUtIE/4fQoQybO53Dwd3vhK7Z5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:0d:ff:91:00:a8:73:1e:02:cd:bb:e8:f0:a1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Validity
Not Before: Feb 2 03:00:17 2025 GMT
Not After : Feb 3 03:00:17 2025 GMT
Subject: CN=3718b44a1cbc9387d9f17568ca20fd7140a90030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:de:5e:b4:b2:d1:23:a8:ba:09:47:ae:57:da:
61:d2:e8:78:a4:db:8d:98:8d:09:50:27:49:45:f0:
57:41:47:d5:c9:c1:c5:be:85:a8:cd:45:8f:51:cd:
67:46:94:ce:df:d0:e6:ed:24:1d:4c:df:97:f9:3e:
56:e0:0e:07:81:09:ae:6e:d0:6f:d8:5b:0d:13:78:
3e:62:b3:d9:7c:ca:1b:c3:ff:95:f4:b6:c2:bb:42:
30:f8:cb:5f:9a:76:54:4d:57:f7:33:2f:0b:e4:a7:
17:d5:e9:4a:fc:c4:65:8f:5e:92:e6:51:02:0d:c0:
88:f3:50:2c:e3:eb:f5:8b:a1:52:31:bb:c8:c9:18:
6a:c4:17:19:ec:7c:7b:d8:03:c7:4d:29:76:5e:f2:
9e:7b:61:4a:0f:28:68:c0:d4:fc:65:32:f6:b4:9e:
49:56:3b:ea:03:0f:a4:19:d4:f0:50:e3:5b:66:61:
d8:a4:a8:c2:30:16:02:c4:d8:2b:ce:4d:92:2b:0b:
12:0f:0d:d9:b2:11:89:6a:5f:6f:26:e3:92:cf:c9:
e2:95:39:e6:8a:8c:25:d1:0e:91:de:64:96:62:57:
1a:e8:6c:31:a5:cf:15:54:7d:d4:18:c2:a0:fb:ba:
cf:80:e3:60:bb:18:dc:e5:ab:43:a3:ce:54:5a:18:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:18:B4:4A:1C:BC:93:87:D9:F1:75:68:CA:20:FD:71:40:A9:00:30
X509v3 Authority Key Identifier:
keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:af:79:0f:74:ca:7a:be:a6:12:d9:ec:61:9c:ab:46:3b:69:
33:53:cf:fc:0f:53:61:43:17:7a:82:b2:a8:ad:67:b8:10:21:
21:82:49:bf:85:84:ed:60:f1:58:af:8b:01:da:b7:25:77:c0:
a4:47:ba:f0:58:b6:70:52:6b:4d:11:07:1f:dd:21:77:7c:dd:
87:f5:9a:1a:26:18:e1:e7:d4:e3:5e:b9:ce:2f:5a:da:d5:09:
fe:07:73:33:0c:96:f0:97:8a:aa:66:e2:25:53:6a:83:24:98:
b0:d9:9f:c7:32:4a:b5:86:33:ea:d6:21:aa:1d:48:0f:f6:56:
36:52:75:51:d7:66:40:40:b3:ad:e8:df:e6:99:8c:05:1a:7e:
f4:4c:ad:a4:78:62:84:1d:7b:93:89:bc:a8:ad:29:10:6f:7a:
08:78:51:86:49:16:0b:88:f1:de:69:a7:f3:02:60:21:70:37:
ea:92:57:1e:f0:c9:e1:31:5a:7b:84:e0:bb:f6:bc:72:16:dc:
d8:7e:f3:69:b2:4c:ec:5d:70:8b:99:8e:d7:db:64:6d:8f:e7:
ea:14:55:f0:35:6d:85:5e:b7:ce:16:3c:23:c7:ed:e6:7b:af:
c1:c3:16:49:10:e1:2a:d0:a0:f1:0a:91:39:f0:e8:7d:09:d1:
8e:ca:3c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:50 2025 by rpki-client