Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
File: b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json)
Hash identifier: y0DodnWGzOObD5Hjei0cYR9O5z9PcA0t5pwMB79b2WM=
Subject key identifier: E0:97:67:25:A9:BB:7E:7F:7D:C4:CD:B7:6C:98:16:D9:4B:79:28:6C
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial: 019511D98AF3B9AEEE11932AD79292E2C984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
Manifest number: 0864
Signing time: Mon 17 Feb 2025 03:00:24 +0000
Manifest this update: Mon 17 Feb 2025 03:00:24 +0000
Manifest next update: Tue 18 Feb 2025 03:00:24 +0000
Files and hashes: 1: 8dQ0OiRLtZPhu3GEjEb_mugx5KE.roa (hash: 89OURcYF/hYXZlt3wuPoB9EB6Vna11HJsZwd0rNl1Eo=)
2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: svxZ6VOl7yoazpItkR5O1DCyaCfRNm2a7qxCNlxJS4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:8a:f3:b9:ae:ee:11:93:2a:d7:92:92:e2:c9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
Validity
Not Before: Feb 17 03:00:24 2025 GMT
Not After : Feb 18 03:00:24 2025 GMT
Subject: CN=e0976725a9bb7e7f7dc4cdb76c9816d94b79286c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f8:83:71:c0:96:9c:c6:0d:5e:19:0d:56:c8:
31:be:96:38:fc:1a:99:9e:06:c5:27:6f:8a:f9:94:
86:8b:a8:ef:8f:86:a1:22:f3:ca:4b:5c:ec:91:d3:
d6:97:62:7d:bd:c1:66:a1:4f:80:4e:f9:b1:76:10:
14:5c:4e:2e:16:68:5e:8a:3d:45:71:ea:dc:a6:93:
77:4a:cd:80:d6:bf:c6:9e:bc:17:ec:f2:4e:a6:c5:
d2:db:d3:94:a5:fd:37:30:46:5c:27:00:2a:34:c6:
72:1d:cb:52:b2:6c:9d:42:0e:6c:30:a2:fd:df:96:
81:33:dd:ef:b5:44:24:b1:d4:4c:43:63:8a:9d:3e:
f4:78:81:6b:5f:67:89:b3:f5:bc:23:32:8f:99:ba:
ac:e3:a3:91:69:80:12:10:08:fa:9f:21:69:a0:84:
29:df:cb:3b:e5:df:83:fe:ac:58:0b:c8:e1:fc:3c:
1d:26:9e:65:4b:6a:da:e9:e3:ea:24:fe:e4:9d:af:
68:26:e5:76:fa:0d:53:46:9b:44:0e:77:1a:f5:c3:
fd:af:9c:c3:41:40:88:45:b5:1d:9c:28:81:28:40:
fb:34:ab:ad:76:04:c2:a0:28:a9:e9:09:94:47:b8:
c1:9a:48:ae:14:3b:1f:a7:74:cc:17:b4:be:23:9c:
a8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:97:67:25:A9:BB:7E:7F:7D:C4:CD:B7:6C:98:16:D9:4B:79:28:6C
X509v3 Authority Key Identifier:
keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:89:46:e2:ff:84:b7:ad:ef:42:64:55:16:4c:4b:43:85:45:
50:c0:a2:f3:85:49:44:ec:6d:88:52:73:bb:d7:00:67:e4:5a:
b7:a9:72:c3:a9:73:8d:75:fa:45:db:57:e3:ad:71:6f:71:be:
19:d8:95:fc:a9:82:c4:86:9a:6e:65:ab:90:70:8c:1a:eb:12:
c3:f6:cf:b8:40:05:d2:bc:3c:31:32:f0:79:62:a7:46:22:2f:
70:2a:75:95:aa:39:a4:f0:6d:22:d5:25:3c:9e:3a:bf:33:6f:
01:54:15:a5:68:e5:1d:80:a4:8a:6e:4e:70:0f:bb:70:d4:5d:
3a:07:e4:a3:7c:9e:9e:bc:7d:9d:b8:9b:4f:4f:97:e2:87:15:
5a:51:43:89:45:ff:66:57:7b:94:76:df:ef:fc:a6:29:95:89:
e0:d3:a0:f9:1e:ae:9a:4f:aa:54:0c:c9:33:1e:21:c8:8a:e4:
85:5a:12:85:28:79:87:8e:dd:fa:b5:57:50:82:b2:d9:3b:88:
41:10:1c:c5:20:ef:43:b3:2e:d5:f6:dd:e2:55:9d:91:84:c4:
8d:88:b2:d6:86:cc:59:2c:58:95:84:c1:31:7f:55:81:d3:c4:
ca:c5:ec:b7:49:96:f0:9d:00:23:fd:c2:46:e9:6a:e0:eb:50:
49:68:5a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:53 2025 by rpki-client