Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: umH2QxxhkoUVsPrzxqNhl1qCmq72LhEzUhaRNlh4ZUY=
Subject key identifier: 84:35:03:38:96:16:FF:15:69:BB:E9:FB:48:F1:F6:E2:D6:F1:19:36
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 019511D9882F0D1AF9966878C4EE46FD4906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 04B2
Signing time: Mon 17 Feb 2025 03:00:23 +0000
Manifest this update: Mon 17 Feb 2025 03:00:23 +0000
Manifest next update: Tue 18 Feb 2025 03:00:23 +0000
Files and hashes: 1: 23TVA-2OL8ERCOX_dzgjoyDr7ic.roa (hash: HMZHd+55+IMt+Dclhou8M1RYJTwGL8XVXHQpPA4hFCU=)
2: 4-TbcXFa8SESUNpbTLtHqKnqP4k.roa (hash: rfh4ZMQFADgVlOUe/tULyDtfhvBafCEIjiEbbsuqihs=)
3: NndyVqvy3vcxCnZsIK2_Uyxv0lk.roa (hash: cAwKtSP7N0kxacGJxtWaLz9RZYIS8hQUwg7TB0bpnnY=)
4: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: h47Yk9qu2dLYvS3lzNV2mR9OwPCgT/WMoAJxsRIgz4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:88:2f:0d:1a:f9:96:68:78:c4:ee:46:fd:49:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Feb 17 03:00:23 2025 GMT
Not After : Feb 18 03:00:23 2025 GMT
Subject: CN=843503389616ff1569bbe9fb48f1f6e2d6f11936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:05:8f:53:5e:61:79:d3:66:53:69:32:05:
d4:80:19:1c:07:3d:8f:49:76:f5:84:66:84:50:46:
5f:b6:5a:13:31:ff:2d:f6:c1:fe:93:3c:43:9b:de:
b3:6d:86:34:ab:90:0d:3a:23:b1:c2:a4:31:41:dd:
5f:29:92:81:a0:da:1b:db:6e:9f:db:ea:e3:86:46:
81:b1:9b:08:44:f3:37:12:20:9d:18:f0:e8:3e:2b:
82:e7:f1:9a:ec:44:db:7f:43:e1:70:10:88:13:91:
8e:97:67:b7:3f:26:00:dc:24:f9:f4:7d:66:5e:a3:
ab:a5:4e:ed:64:7c:47:60:8c:50:77:e7:60:d3:94:
3e:2f:4e:68:7b:4a:bd:ad:a7:10:72:b9:aa:0d:a6:
8d:56:9e:8c:5e:ff:0a:88:7a:61:90:3e:ef:50:da:
5e:49:21:05:73:b8:7e:e2:2a:1c:38:a2:b8:ce:ad:
a8:a9:52:2b:2e:45:57:b6:52:ed:ff:ae:24:97:25:
db:48:87:bc:87:ae:7c:e8:40:18:fe:ad:d2:18:32:
42:ae:4a:50:5e:d7:de:2a:dd:0d:05:23:d5:18:e2:
60:20:ca:7b:fd:cc:7d:f7:3d:d7:c1:c7:76:ec:03:
bf:03:23:f2:e8:67:6e:94:7b:df:e8:95:1a:53:a9:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:35:03:38:96:16:FF:15:69:BB:E9:FB:48:F1:F6:E2:D6:F1:19:36
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9f:70:62:2b:53:09:51:8b:3f:41:3b:9a:ff:01:4d:5e:dc:
06:96:88:26:ef:3f:22:eb:6f:77:20:5b:c4:a0:c6:1d:0d:45:
7e:a1:0f:97:38:5c:f1:91:9b:5e:75:87:ff:b1:d3:ef:89:d5:
15:91:dd:95:bb:08:95:73:b1:1e:fc:c5:ba:d2:f9:8a:81:7e:
04:79:61:e6:06:5d:52:eb:10:1b:d9:56:31:fe:d0:96:63:63:
94:cd:55:25:54:5f:12:65:d5:42:b7:6d:ea:0d:22:e3:fb:25:
00:f6:9d:f6:5b:f1:b1:a5:e1:d1:76:15:3b:f2:50:81:52:4f:
71:02:09:93:31:d1:5b:67:99:61:02:85:b0:9f:d3:d5:96:1b:
f3:1f:64:57:f4:ad:0d:57:33:0b:e9:94:0b:40:3e:e7:80:96:
43:7c:d5:70:d5:5a:84:3a:30:40:00:b9:29:77:73:c4:8d:69:
60:18:cf:cb:e5:07:96:c2:0e:17:8f:51:f5:78:67:80:2c:e8:
3a:23:20:b6:c9:ad:0a:84:10:ab:f1:a8:4d:30:71:59:29:a4:
33:68:86:2c:8e:fe:4b:9b:2f:8d:4b:04:98:09:73:40:89:af:
b1:84:fa:2b:4e:2c:df:eb:a0:ea:49:0e:74:8d:e1:21:29:57:
4d:5d:c2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:25 2025 by rpki-client