Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json)
Hash identifier: ybI++vorvtdv0HqsW3FSpKXFpvO5soUnWGSxCcET3y0=
Subject key identifier: 30:CE:C0:C6:7F:6E:C8:33:7F:1A:63:2C:7E:19:22:9B:5F:51:44:0A
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 0195108F9F95C956A813A5B01E6AD92BD223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
Manifest number: 03C0
Signing time: Sun 16 Feb 2025 21:00:02 +0000
Manifest this update: Sun 16 Feb 2025 21:00:02 +0000
Manifest next update: Mon 17 Feb 2025 21:00:02 +0000
Files and hashes: 1: HpZmD5B1zLmPnY3f6N6Qgd7zmek.roa (hash: m9j0WMeURx0X/gO3nVCQhucXNdsmWk+LDFj4hOxWEBE=)
2: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: /E3ZMKNMS3kpGOtbqZs6105ajOor9KLXXxcWzk2boK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:9f:95:c9:56:a8:13:a5:b0:1e:6a:d9:2b:d2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Feb 16 21:00:02 2025 GMT
Not After : Feb 17 21:00:02 2025 GMT
Subject: CN=30cec0c67f6ec8337f1a632c7e19229b5f51440a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:87:71:70:0c:fd:e2:47:fa:52:ba:9e:15:
b6:64:2a:26:07:d8:1d:8b:82:22:7f:d6:8d:29:0a:
75:53:4a:cc:20:0c:92:68:b7:de:e7:af:4a:2b:b8:
d8:76:cc:9f:85:a0:02:48:b4:46:ee:53:54:21:ca:
d1:e8:43:bf:d1:e5:3b:fa:18:4e:32:cb:3a:eb:3d:
b0:d8:c0:c5:31:00:8c:a0:ad:28:bd:84:d8:7b:f1:
6a:59:d6:52:63:5e:39:f2:58:74:b3:df:2b:ac:18:
4b:6f:ca:67:05:45:e1:be:8f:ce:25:5b:df:a8:f5:
72:6b:9c:32:0f:fd:23:b9:f7:ef:a0:fa:1d:cc:23:
37:26:85:96:35:ef:39:ba:a3:cb:7c:30:0c:6e:88:
bb:82:48:2f:50:14:06:8e:93:0c:74:43:d5:f9:93:
c7:bd:83:2a:36:78:6c:af:03:b6:38:c8:1e:ed:24:
e0:fb:37:87:a9:82:19:95:78:e5:85:b1:05:69:ff:
88:54:d7:b1:ca:40:0a:0d:45:1c:3b:19:6d:54:01:
d8:ab:c1:18:4d:d1:97:b7:50:ac:7b:f1:17:43:34:
27:7b:26:25:00:b6:f5:3a:d1:e8:b1:47:ed:61:98:
b3:8c:3c:1b:f1:be:11:f5:ad:b5:6d:f5:dd:fb:63:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CE:C0:C6:7F:6E:C8:33:7F:1A:63:2C:7E:19:22:9B:5F:51:44:0A
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:46:1b:0f:00:ce:9a:58:06:3b:5b:5a:a8:4e:bd:ff:f2:97:
20:db:40:d0:0a:25:5b:7b:fe:49:1e:a0:25:61:ab:9d:e8:d3:
29:7b:54:90:26:78:d4:b8:c5:bb:b9:28:28:22:68:d9:9c:ce:
ee:c4:d5:6b:bb:6b:ee:66:50:ea:0c:11:45:01:c1:cb:a6:2c:
9f:43:52:c5:82:14:b8:ce:71:31:a2:f8:16:e9:32:98:13:7c:
d5:8f:12:99:41:13:13:c6:c3:c6:43:17:91:44:0a:cd:76:2b:
68:f7:ab:15:2a:5e:e5:3c:71:24:8a:b1:1a:95:76:a2:dd:fb:
e2:75:88:30:b4:89:3d:8f:7b:2c:13:11:de:c1:a8:03:9f:c5:
6d:44:c0:63:e0:56:ea:58:16:71:64:6c:bb:6a:bf:1d:f8:ae:
bd:44:a6:12:51:79:d5:a6:15:76:5b:1e:de:3d:9b:b8:a6:39:
4c:0b:ca:38:26:e1:d0:f6:63:9f:67:9c:d2:38:4a:39:95:c2:
29:15:66:d3:b2:2a:b3:6b:01:af:83:87:44:f5:28:22:52:91:
e1:f0:9d:95:2d:aa:6a:d0:01:7d:24:59:43:c4:b7:fa:ae:8e:
ac:80:6f:f3:73:37:b3:10:5f:e2:f1:09:a4:b7:5e:46:fa:e7:
df:23:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:04 2025 by rpki-client