Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json)
Hash identifier: /UDFVKZu8uFMykPI+EazaQOU6+FSRV1jG0Mes1Njlsw=
Subject key identifier: 3F:72:FB:A5:2C:5E:07:F1:68:01:73:B2:59:6F:DB:44:5C:40:94:46
Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Certificate serial: 019510C79FB4EB6D4C5C497F312A4EDC6522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
Manifest number: 1457
Signing time: Sun 16 Feb 2025 22:01:12 +0000
Manifest this update: Sun 16 Feb 2025 22:01:12 +0000
Manifest next update: Mon 17 Feb 2025 22:01:12 +0000
Files and hashes: 1: cKLVURSgkoMYO4wy8vne_qwgRmg.roa (hash: SnmmNcbbOM0qBXdozd7WzP3UhHfxrlR5ILW9dCCKUpI=)
2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: NhFKPLiptCXEPt3/TXM+l5sOGy+9CRLpsQ1mH6R+1qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:9f:b4:eb:6d:4c:5c:49:7f:31:2a:4e:dc:65:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Validity
Not Before: Feb 16 22:01:12 2025 GMT
Not After : Feb 17 22:01:12 2025 GMT
Subject: CN=3f72fba52c5e07f1680173b2596fdb445c409446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:e9:5d:f9:f6:8a:46:e8:bf:0b:00:49:c6:
85:43:b3:18:2c:5b:d5:ed:30:52:a2:66:62:f5:2b:
04:00:e9:e3:a2:b7:20:6c:42:51:21:20:2a:4f:aa:
e0:f0:48:ff:71:c0:8a:82:11:1e:d0:6e:c2:c1:f3:
46:f7:9f:e7:99:00:a9:90:06:85:3b:2d:00:e7:38:
fe:6a:ad:c8:9b:42:ed:d0:56:9c:37:95:60:d6:04:
65:eb:1b:c9:64:c5:ab:10:49:ad:c5:70:a4:03:b4:
8b:f2:52:20:ab:c6:08:48:6e:f8:f4:67:68:7a:15:
bf:1c:5a:43:d6:b9:8d:fb:66:3a:b7:41:ea:74:9c:
3d:06:d1:20:72:4c:fe:84:b0:c3:81:fe:7d:ab:bd:
4f:d1:c9:cf:fd:c4:49:83:fc:e7:b9:cb:63:5e:67:
b6:62:83:ef:b8:90:96:6f:a8:a4:96:7e:ce:bf:ae:
92:03:f5:27:c2:87:7e:84:21:5b:c7:34:f4:ec:cb:
82:b2:77:d0:ec:2b:98:a4:94:18:5b:72:b3:75:69:
01:78:ed:aa:86:cf:98:5d:46:9d:8a:ab:c5:68:e4:
eb:15:59:b4:49:af:ca:74:10:35:34:b2:14:e5:d2:
26:de:40:22:fb:86:36:e7:02:77:2e:40:cf:28:a3:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:72:FB:A5:2C:5E:07:F1:68:01:73:B2:59:6F:DB:44:5C:40:94:46
X509v3 Authority Key Identifier:
keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d0:90:d9:b4:26:c8:33:b4:40:a6:d7:f8:b4:74:6f:95:3c:
9d:c4:66:e0:0c:0b:e5:5c:40:20:7c:2f:db:f1:1a:a8:8f:d1:
dc:90:ad:01:ad:82:f3:3e:f9:0f:27:8b:5e:3e:0a:2c:1d:4a:
9f:14:99:f1:99:6f:19:c9:84:08:09:43:4a:02:d7:4b:e2:97:
08:fc:f8:cc:88:ec:eb:7f:34:51:7d:39:14:b4:66:60:d6:82:
34:60:7a:3e:1f:09:84:f7:71:ba:54:61:db:3a:71:25:c5:e3:
e9:77:22:a4:be:54:02:df:1d:82:06:e3:2a:96:78:d7:63:87:
8a:b1:43:cb:ca:c9:b8:1c:61:f4:ea:91:d3:63:41:0e:66:48:
60:68:d7:3e:10:bb:58:c5:1a:da:c4:3a:07:38:00:97:17:cf:
7f:4f:a9:13:9b:cd:07:b9:c0:06:a6:da:aa:00:fd:b8:e1:f3:
b1:e6:38:91:56:42:ed:42:86:e7:e0:dd:cd:ed:99:71:ed:27:
c5:61:cb:26:7f:93:4b:f4:89:8c:f0:1e:22:48:51:56:9b:fc:
c5:7b:6f:23:e0:df:5f:e4:68:7a:38:63:c3:ae:9f:e8:25:d2:
13:13:55:32:91:61:2c:d9:7c:21:76:9d:68:77:ef:60:5f:8f:
e2:fa:f5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:33 2025 by rpki-client