Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
File: 75S8y9TC4P-PeqsEXhSjEfOy-f4.mft (raw, json)
Hash identifier: CvK5Q/IiG3+H/+R36AqtVcc6iey9gmDz+t6lCfnNm7E=
Subject key identifier: 4B:1B:2C:6E:05:45:D3:F4:88:73:DD:CB:D7:AF:5A:A3:44:E0:F8:F0
Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
Certificate issuer: /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Certificate serial: 0194C3F5AF26866C46D4E1DC63EC42698361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
Manifest number: 20
Signing time: Sun 02 Feb 2025 00:00:45 +0000
Manifest this update: Sun 02 Feb 2025 00:00:45 +0000
Manifest next update: Mon 03 Feb 2025 00:00:45 +0000
Files and hashes: 1: 75S8y9TC4P-PeqsEXhSjEfOy-f4.crl (hash: z7GKO48YbLtcbgOOGM0IR+lBLmBDp6nuF4X2Xc32NYA=)
2: x_UGYHPi4KGbhasIbcCsyLRrLvc.roa (hash: TZUXAFaKqC1GafLAz2qnfFwZj2ZE2C3Lq2YMTRrQmKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:af:26:86:6c:46:d4:e1:dc:63:ec:42:69:83:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Validity
Not Before: Feb 2 00:00:45 2025 GMT
Not After : Feb 3 00:00:45 2025 GMT
Subject: CN=4b1b2c6e0545d3f48873ddcbd7af5aa344e0f8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:92:a8:f3:0c:96:f1:9f:f6:a4:4c:86:59:
91:17:8f:0b:13:b3:6f:c8:10:4a:58:45:42:e0:3a:
9e:91:22:a7:81:e2:9f:0e:a8:fd:6e:84:90:c1:8d:
4b:ad:6a:22:13:af:04:a8:3b:ec:46:3c:4a:4f:b9:
2d:39:9d:c2:90:19:69:af:20:bc:5c:be:6e:af:92:
d5:a9:f6:0c:e0:4b:10:48:f5:53:27:2c:d5:58:b0:
67:85:c8:b7:d9:c4:90:85:b4:37:81:81:a1:7e:fd:
e9:e4:b6:1c:d2:5e:54:05:7e:98:2d:cc:68:f8:a0:
f0:e2:98:ec:0c:ee:f8:38:fd:94:b7:ef:a0:8f:bb:
85:42:62:70:6d:d2:05:f6:80:ae:62:95:f2:de:97:
6e:7e:9a:e0:90:f7:d7:fa:fa:88:c1:0c:da:9b:02:
5c:14:50:0b:0e:87:4b:6d:63:5a:f5:e2:63:ba:fc:
2e:91:91:16:94:e6:20:39:90:a2:fd:b3:c6:73:9d:
74:12:06:be:4e:9f:8c:71:19:2e:29:38:26:16:0e:
10:fa:7b:72:6e:98:38:87:6f:a1:50:6c:4a:b0:54:
cb:ae:a7:df:fb:3b:7b:83:3b:49:e7:d4:8a:30:9a:
3d:a4:0d:c8:44:21:37:86:45:43:9d:cc:66:2f:bd:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1B:2C:6E:05:45:D3:F4:88:73:DD:CB:D7:AF:5A:A3:44:E0:F8:F0
X509v3 Authority Key Identifier:
keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:14:fe:8a:25:b3:a9:83:37:d8:f5:09:6d:6a:84:6a:7a:92:
1c:a9:7d:3a:e6:03:12:2f:83:26:79:54:71:6c:2c:26:65:55:
08:bb:45:ab:f9:41:c5:42:ee:96:e6:33:d0:ef:9f:7a:45:bc:
ef:ac:d2:a5:8b:4c:b6:6a:79:f8:56:21:56:37:6c:58:c0:22:
6f:79:fe:64:94:0e:ae:0d:fa:f2:6a:e7:6c:b8:c1:e3:ef:7f:
0a:00:2e:36:14:69:8d:ae:86:a0:63:d4:4a:56:a0:b4:c2:23:
02:2a:d9:5d:c2:31:2e:3d:1a:83:c1:4a:71:70:27:41:01:48:
89:80:7f:fe:8b:1d:67:ab:75:ed:77:84:1f:fc:50:59:99:69:
28:4e:5d:03:e3:f5:80:85:d6:8b:43:54:cd:ec:ac:35:c8:53:
e1:51:b1:f5:a3:d5:75:70:35:b8:6f:c2:29:36:7f:09:3e:84:
7e:eb:3b:35:3e:ab:10:c7:d2:77:1e:d7:05:13:56:76:c9:5b:
9b:39:de:3f:e7:cf:cf:24:97:8b:84:ea:36:b7:e8:e8:dd:78:
c9:01:c5:df:fc:0b:78:1a:55:c9:0b:6e:0a:4c:29:22:39:4f:
2a:ff:19:5a:30:c1:0a:66:64:0b:2e:24:00:9e:0b:11:3d:fc:
15:f2:a7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:52:58 2025 by rpki-client