Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: oTto3tE/hBvchzQ5nq19zDUGe8W7GmF1qDq11teXFiA=
Subject key identifier: 7F:F9:3B:EF:69:FF:03:7B:36:21:A5:0E:89:7C:DD:2E:23:62:A1:5A
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 0195108FFE2F6D0734C04BA222EFE2167C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 145C
Signing time: Sun 16 Feb 2025 21:00:26 +0000
Manifest this update: Sun 16 Feb 2025 21:00:26 +0000
Manifest next update: Mon 17 Feb 2025 21:00:26 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: knob/L/LFsXQMhAw354CLhxtZVgHsRdBiydgGotFK5w=)
2: kXAoycjFnk5ToJYqqTkBxzOraGU.roa (hash: +7rp8yWmgsLGmzgq1w+1h/kN+7iJKvOfloIbj12Qykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:fe:2f:6d:07:34:c0:4b:a2:22:ef:e2:16:7c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Feb 16 21:00:26 2025 GMT
Not After : Feb 17 21:00:26 2025 GMT
Subject: CN=7ff93bef69ff037b3621a50e897cdd2e2362a15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cd:a2:c4:0e:18:52:ba:b4:5f:2d:45:f9:8e:
af:06:71:37:72:fb:cb:0b:64:a2:68:19:7a:f7:10:
64:81:66:97:db:1e:92:c2:85:a1:85:ec:f6:30:ab:
10:eb:c4:f7:85:3a:6e:e6:1d:06:58:3b:ae:e0:1f:
4f:47:ed:cd:a5:cc:11:db:1e:c1:4f:1d:dd:45:c7:
29:73:0b:c4:b7:50:aa:d0:a5:5f:7a:25:97:df:db:
b7:b4:36:5f:5e:b8:c6:db:00:74:b4:12:60:87:3a:
f6:ec:8c:21:44:ee:70:ab:72:67:ca:b1:e1:bd:2e:
d3:55:9b:83:dc:67:fa:51:d5:10:68:75:71:14:ec:
c9:b4:b4:98:c3:44:61:d0:5b:9d:19:eb:16:c7:d5:
b8:b3:18:90:a0:fd:4f:d1:b2:0a:c1:ba:a3:28:a2:
74:07:4e:c7:12:ad:47:68:35:bc:a4:49:34:ec:7a:
07:2c:74:1d:3a:26:8c:db:d2:95:ae:bf:4a:85:3f:
94:04:7f:af:d9:08:99:86:5c:61:97:9d:a2:95:b7:
6c:68:d9:6d:81:b1:26:e5:f9:f6:69:f9:88:de:ce:
e0:ce:93:7d:98:bb:e3:d0:aa:de:db:75:d8:36:4a:
96:56:21:4e:cc:f6:15:b5:47:88:bf:da:17:05:be:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F9:3B:EF:69:FF:03:7B:36:21:A5:0E:89:7C:DD:2E:23:62:A1:5A
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:17:68:21:72:6c:cf:2a:70:58:38:66:5c:74:17:9f:b3:08:
4f:77:ec:ff:23:65:a9:d1:3e:57:8c:5f:d7:6f:dd:36:d0:7e:
22:24:dc:4e:33:b3:fb:3d:a8:f9:8e:d7:a8:35:c0:e3:f2:a5:
b4:ae:65:1e:48:fd:08:33:45:58:83:4b:2a:61:e4:e8:bf:a0:
bb:c0:98:9c:41:f5:17:69:c5:01:47:ad:19:ff:aa:46:00:fa:
dc:83:77:8e:59:48:e2:6a:8d:38:eb:c7:2b:59:3a:35:4b:f4:
ce:67:34:9b:4e:17:70:24:18:af:91:93:a0:8c:6f:ea:07:15:
f9:69:fa:1a:7c:15:b9:74:b2:98:ba:0f:ee:8b:c8:c0:30:04:
b0:e0:63:49:68:10:8c:83:44:01:84:6d:93:2d:9a:53:c7:a5:
a8:a4:29:4f:cf:4d:3c:c1:53:da:f4:66:7a:1f:f1:fe:64:56:
68:0d:db:b4:15:3a:49:62:f1:54:e1:4d:6f:24:9e:6a:19:d6:
08:e7:5a:31:d0:bd:ad:2e:63:81:73:ce:70:dc:1b:9a:c5:a5:
a2:66:1f:45:f3:bf:4a:d3:bc:3e:53:73:52:62:93:b9:57:a0:
ad:00:e3:b2:f6:b9:bc:a6:0d:5a:f9:ef:27:bc:0e:df:65:32:
c0:4e:3f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:32 2025 by rpki-client