Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: poTsw43SOEhWRBfBTmtdCxibaxbY2EKgK9kpDOweekg=
Subject key identifier: 1A:6D:61:45:6A:39:2A:AE:55:A4:23:4F:89:FC:0B:4D:82:EB:1D:5F
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 0194C4631A07DE1FDF5F49FA69E51E1A0378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 1430
Signing time: Sun 02 Feb 2025 02:00:16 +0000
Manifest this update: Sun 02 Feb 2025 02:00:16 +0000
Manifest next update: Mon 03 Feb 2025 02:00:16 +0000
Files and hashes: 1: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (hash: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: tUhQghoU84PFDZnm28CyoUfXvKzfRMNKJHE6LAFnS6Q=)
3: bjlUEqaZF5EwCSDk_Sxf_mEHztc.roa (hash: RU5KJnOEEBCQibHDxtY5+aLGfLDV7MxXDGkjvgxmqg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:1a:07:de:1f:df:5f:49:fa:69:e5:1e:1a:03:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Feb 2 02:00:16 2025 GMT
Not After : Feb 3 02:00:16 2025 GMT
Subject: CN=1a6d61456a392aae55a4234f89fc0b4d82eb1d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:99:8a:b9:45:af:35:78:09:7f:29:c4:94:
a2:5e:dd:9a:1d:b1:5c:35:6c:e2:12:5e:09:91:95:
4a:4d:cb:96:73:29:57:15:28:c1:63:cb:a4:0d:d1:
b1:6b:5a:15:37:fc:e8:0a:03:67:f8:57:51:bf:ca:
6e:d7:60:50:0f:33:8d:5e:ac:10:6e:9f:56:da:ea:
c5:27:a8:40:6c:ba:40:83:44:4a:2f:94:f7:14:8e:
b6:08:82:9f:ea:93:42:2a:66:a3:45:d1:6e:0f:ea:
2a:21:9c:6c:29:17:13:f7:a1:96:f0:75:e0:29:da:
ce:7a:cc:3e:4b:83:f0:04:4f:02:5d:13:64:a2:ca:
18:d7:dc:79:20:b4:b8:cf:38:e9:69:44:90:f1:c3:
64:5a:c0:21:bd:3d:5f:f9:11:05:50:eb:97:4f:15:
53:65:94:7a:12:3e:0c:2e:4a:80:0a:d3:14:f5:d0:
62:f7:9f:aa:eb:20:9a:b4:91:81:3b:8f:5e:0f:10:
5e:e3:aa:72:d6:be:0d:58:5b:fb:07:8f:32:0f:79:
85:94:fa:53:87:3a:7b:34:cc:85:89:5f:87:29:4a:
a3:30:7d:4f:7e:61:d8:d1:a6:fd:41:e3:ee:82:bd:
df:d0:ed:b6:99:69:33:10:36:47:c0:59:8f:61:4f:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6D:61:45:6A:39:2A:AE:55:A4:23:4F:89:FC:0B:4D:82:EB:1D:5F
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5d:58:c5:1f:b6:a4:b6:ba:7f:a4:6b:d6:57:26:b0:2e:f7:
61:93:3a:d2:7c:d4:04:5e:2d:c6:fb:86:fc:4c:00:0a:a7:10:
42:49:ce:07:72:6e:fa:2c:f6:5f:72:2a:71:66:eb:1a:b8:41:
a4:8e:89:fa:8b:52:02:f3:6f:27:e1:d1:7b:75:70:a5:7d:d1:
e0:a1:be:38:a8:88:60:33:c4:2a:f7:60:89:95:78:ff:e2:09:
bb:98:9f:8e:e9:f1:e3:41:c9:89:b6:24:93:3f:f2:6b:2b:b8:
c6:04:d9:1c:09:4d:31:5b:6b:38:3e:b2:38:7b:97:da:a3:63:
6a:47:62:1b:5d:8e:34:79:43:52:4b:16:9f:51:0c:38:17:8e:
32:01:f4:c2:56:16:67:08:dc:b4:d7:93:ee:e2:6a:9f:85:f2:
aa:bf:97:5d:27:06:dc:3e:1e:37:93:61:61:55:69:24:7a:a9:
d4:b9:f9:5d:ef:66:b1:b5:4e:0e:66:6d:74:0a:15:44:be:f8:
6b:67:f3:4b:e2:39:e4:34:6a:63:9f:db:08:35:3f:62:86:5b:
40:e0:ae:8c:08:3a:b9:b7:62:73:c2:4b:9c:26:75:be:cc:39:
ab:bf:2d:e0:5b:3e:8b:cc:86:bb:33:b1:95:a7:8e:4a:f4:da:
dd:ca:01:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:33 2025 by rpki-client