Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: 8NcT6tjFpL9AGDZJEsmCOizo9try5BGErsFZFjABDzY=
Subject key identifier: C1:36:62:9E:02:5F:C1:58:18:B8:09:E2:C0:C0:7D:90:EC:C0:74:A7
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 019511A2AE17BA6FD91E6D59D068E1B0ADE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 0B3B
Signing time: Mon 17 Feb 2025 02:00:28 +0000
Manifest this update: Mon 17 Feb 2025 02:00:28 +0000
Manifest next update: Tue 18 Feb 2025 02:00:28 +0000
Files and hashes: 1: 1QST1OPlWGgU_KfeCd6-eSc5Fws.roa (hash: 0IX3SPWo/YRidApWFZTcBmj27iQz+V20vqeZhxHtpTk=)
2: UOcYa9_wijcIRHEowaEFsvhzcW4.roa (hash: tUwVIAhXZ1HVd/+8k4HpFkWguLhngA3Bv+h1B/N8dK4=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: zLCYh38vxvU3NhS00fowoH7fmOhTxzNjoDuoiHbYiAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:ae:17:ba:6f:d9:1e:6d:59:d0:68:e1:b0:ad:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Feb 17 02:00:28 2025 GMT
Not After : Feb 18 02:00:28 2025 GMT
Subject: CN=c136629e025fc15818b809e2c0c07d90ecc074a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:57:6e:f0:68:a2:2f:75:8c:7a:70:b3:4c:48:
0e:c2:6e:f7:18:aa:6c:d5:19:65:85:40:f3:c6:b5:
95:0c:c1:b7:2f:6b:7b:59:f8:f4:53:52:83:9f:89:
ea:08:0a:46:ab:a9:33:08:fc:2e:76:00:fd:fa:58:
06:41:0a:00:57:d1:94:63:ec:6d:fa:93:ab:f1:3b:
6b:9d:74:7c:c6:5a:28:ca:fc:7f:1c:6b:af:c9:56:
a5:10:03:7d:53:20:75:e5:7c:3d:14:ce:86:84:ec:
63:a8:ae:ed:5c:51:43:bc:3e:4c:29:16:dd:e4:3d:
86:87:d7:aa:17:48:54:99:6f:a9:d6:3a:89:0f:96:
21:a5:d8:00:c4:ff:3d:6f:a0:13:a3:91:e5:43:bd:
3a:c0:7e:a4:07:16:1b:79:83:ba:46:25:45:f7:89:
78:fa:c8:98:28:50:3d:db:d5:e0:e4:2c:b9:53:3f:
ea:cd:30:40:c1:ce:b3:8e:6d:52:38:a5:f2:47:36:
6c:e5:db:92:f7:1f:28:70:7f:0e:2b:29:fb:f3:1f:
92:f8:8e:73:21:78:e1:66:fd:e3:cc:5b:b7:b8:b2:
c3:f7:2c:95:23:09:bd:61:1b:c8:7a:4a:dc:e7:27:
ea:a8:7d:2a:c1:27:8d:c5:cd:aa:4d:53:07:c7:c8:
1c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:36:62:9E:02:5F:C1:58:18:B8:09:E2:C0:C0:7D:90:EC:C0:74:A7
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:61:0d:fa:5e:73:9f:9e:76:dd:e8:5c:b5:45:cd:3e:c4:37:
ce:ee:89:d1:3a:4a:c6:ae:62:31:34:0f:5e:0f:64:d5:cc:02:
de:aa:ae:e2:f2:56:bd:ae:be:c5:6c:a0:d0:8a:de:a8:f4:c8:
b5:7b:66:f5:e4:1d:bd:72:fb:32:7a:1c:ca:a9:34:60:bb:0e:
74:b5:55:2b:a9:55:8e:6d:db:e5:75:1b:30:d1:3f:c4:4d:fc:
9b:04:d0:ee:9f:d5:27:20:bf:68:00:9b:4d:0b:cc:f7:73:a9:
8b:1d:72:8d:13:34:ed:a8:5a:0d:42:ae:f9:2a:a1:fd:d1:2f:
80:48:89:bf:32:e9:f2:c8:39:b4:42:3f:59:23:cc:7f:dd:51:
2c:e6:7f:0c:1b:b6:f2:72:49:5d:13:e5:e7:0b:87:f0:c2:e8:
c9:f3:8c:ba:31:d7:a0:93:3c:6d:ea:46:02:fa:84:87:0b:42:
5d:d3:ba:ca:4e:ec:bf:36:7a:bc:cf:23:72:e5:e1:ac:0a:ae:
1b:44:82:86:d4:77:51:35:56:2c:71:ce:b5:0f:07:1e:12:1d:
c0:3b:01:7a:7c:71:fb:59:f2:39:cf:30:d6:69:23:16:1c:25:
81:f5:22:e0:74:39:3f:1d:d2:5e:cc:bf:74:af:fc:58:8f:da:
dd:af:42:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:02 2025 by rpki-client