Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
File: _sTvIAvJ0n6e1_O8a1wFKS2EMro.mft (raw, json)
Hash identifier: enAmvNuO0bF0W16N59YAR86wUrrmFTe4hEhvNmgGpbM=
Subject key identifier: C2:A3:7C:92:13:3A:63:C3:49:20:8D:8A:51:14:99:18:01:0F:C8:E2
Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
Certificate issuer: /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Certificate serial: 0195116C3C4A4DC2F9251A320AC7DA142019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
Manifest number: 0174
Signing time: Mon 17 Feb 2025 01:01:00 +0000
Manifest this update: Mon 17 Feb 2025 01:01:00 +0000
Manifest next update: Tue 18 Feb 2025 01:01:00 +0000
Files and hashes: 1: A-WEqq-qnquQ-k-HUeyR2Ta7Ai0.roa (hash: ulBE+6XQU+CVKwFHEP6pOstPObSTz9LyM8DJtWKzepw=)
2: _sTvIAvJ0n6e1_O8a1wFKS2EMro.crl (hash: 1XB8ejxjM3hYiSc8Xg8XZKP1JhzT8UqO8k3VUXoL0lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:3c:4a:4d:c2:f9:25:1a:32:0a:c7:da:14:20:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Validity
Not Before: Feb 17 01:01:00 2025 GMT
Not After : Feb 18 01:01:00 2025 GMT
Subject: CN=c2a37c92133a63c349208d8a51149918010fc8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:fa:18:24:7b:ec:b4:62:a5:8e:23:9f:b0:
88:38:c5:73:6b:10:a0:92:91:e2:4c:c1:2a:ec:82:
d9:55:82:c5:ca:c2:c4:b3:dc:5a:6b:be:a4:c2:2f:
7a:72:a4:cb:30:95:6c:8b:03:c2:13:43:69:e9:4d:
02:14:17:47:9c:12:c8:75:49:f9:93:4f:38:c0:5e:
f7:3c:82:ab:ab:f2:18:bd:f3:95:f7:d2:69:23:96:
e3:50:4e:fe:ff:8e:5d:14:a1:97:84:eb:76:ca:4e:
59:7f:5f:03:fe:1b:77:d3:01:4f:be:2e:a3:35:c6:
6d:5f:06:cd:5d:d3:aa:da:7d:62:52:22:60:09:2d:
b3:3c:70:83:c9:ce:ab:02:3c:db:4d:f4:c0:1e:97:
21:4f:25:4b:01:90:69:c0:e5:28:03:5d:bc:67:a0:
0e:cd:85:ee:94:8b:75:55:00:69:16:d0:bc:0e:46:
ae:32:40:3f:f3:6c:36:df:9c:ee:19:89:2d:1f:40:
c0:ef:74:e8:44:bd:77:3f:3f:ed:6a:4c:a2:9f:9a:
01:42:ad:cb:b5:5b:3b:c2:3f:88:bc:49:55:ab:cc:
f6:bf:c6:58:c3:fe:24:fc:55:97:6c:3c:d4:65:a7:
08:1a:ad:e5:6c:7d:cc:57:44:bf:5c:f9:fc:c1:19:
1a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A3:7C:92:13:3A:63:C3:49:20:8D:8A:51:14:99:18:01:0F:C8:E2
X509v3 Authority Key Identifier:
keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:56:24:52:cc:c4:14:63:3e:b2:94:31:c3:1a:61:86:44:6e:
ff:36:32:03:03:0c:b2:36:6d:d4:bb:ec:8e:ab:17:f7:1e:96:
76:43:19:8e:22:2d:d0:0c:53:c1:8d:24:6e:6d:bb:ac:3d:63:
6d:cb:19:54:9d:27:1d:1b:df:14:47:b3:5a:b1:97:80:d4:8c:
ae:ad:ee:ce:ab:b1:9e:44:62:43:fc:2d:79:b7:a2:b9:49:f9:
68:60:8a:80:75:6f:40:6d:7f:35:20:ce:c4:95:69:fe:2a:d4:
f5:53:0b:c3:fc:78:1b:64:89:15:bf:23:22:85:26:ce:3b:40:
80:69:d5:65:83:fc:1a:32:a3:10:19:63:3b:45:7a:ed:47:4b:
9c:79:83:cd:6c:8c:e8:89:a2:29:fb:54:d6:2e:3d:9b:3d:3f:
ff:e1:35:ea:36:c7:24:06:8e:72:8e:a9:54:c8:4d:0d:5e:28:
e8:2c:63:61:95:a5:6c:61:84:b8:4c:97:e2:6c:52:cd:6f:86:
dc:8d:d2:29:30:86:6f:19:fa:8d:47:ea:96:8c:b3:43:a6:f3:
ab:6e:cc:c1:6e:dd:e3:67:97:7f:a5:f0:7e:30:93:ee:79:65:
ec:51:07:e0:fb:3a:ac:cd:34:c5:96:39:35:0e:73:b0:06:22:
57:33:b8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:20 2025 by rpki-client