Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File: piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier: tJENt+PcMS5LFwZT76elcYs7Pm3+19r1IhbctAyAnog=
Subject key identifier: FB:AD:14:A5:32:55:85:75:5A:55:F4:5C:74:7F:FC:18:7D:AB:63:52
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial: 019510C6FAEF6F60DB4BE6FB7437044A1CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number: 0899
Signing time: Sun 16 Feb 2025 22:00:30 +0000
Manifest this update: Sun 16 Feb 2025 22:00:30 +0000
Manifest next update: Mon 17 Feb 2025 22:00:30 +0000
Files and hashes: 1: BxgD-RrZabBuEEfFQkOR7JzPkYA.roa (hash: Dbgg4n4USIHYY1LVI9yt8KqtluJXraRBx7hK71/1AxU=)
2: _HboziFCCXY6Aftni-9e_QXHS7Y.roa (hash: 1Dtm7p4VO9zPNWsz+P/VL1I6c+v4X7GMgtJoAtf8pBU=)
3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: j1ETeBqsLtKWvS5NRloRnvgr4Yy5F3Pudbw5WV/AdlA=)
4: y3UMX5qqKpS7PayD_PFfS-9xYiA.roa (hash: 1x0+PMsy7NMRlTF0Iq4hoHsB7a+mNEhOddx/6ZAYPrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:fa:ef:6f:60:db:4b:e6:fb:74:37:04:4a:1c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Validity
Not Before: Feb 16 22:00:30 2025 GMT
Not After : Feb 17 22:00:30 2025 GMT
Subject: CN=fbad14a5325585755a55f45c747ffc187dab6352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9e:40:0f:dc:a9:f1:2b:f4:35:bc:e3:b4:62:
a9:ce:ec:0e:5d:10:44:f7:ba:2d:cb:f8:4f:6b:b5:
2e:e7:ff:c5:ef:f0:20:59:60:c8:bc:ab:1c:2b:9e:
c7:de:7b:e1:0c:ab:c8:9e:19:1d:f4:92:ef:cd:d1:
5e:cb:ee:f3:42:10:c5:e4:b7:5d:bc:b8:fd:24:20:
8b:b9:cf:65:62:2a:3c:f6:c4:14:9b:85:df:be:71:
82:08:b3:4a:a7:bf:73:0f:f1:80:de:a1:61:04:08:
25:92:1d:b5:2f:03:d6:d0:f8:4f:61:b5:07:a5:0d:
e4:23:02:fd:6f:2a:fb:73:6e:e7:f5:94:c8:98:a6:
57:a9:b3:96:88:d4:b8:60:1d:15:60:f5:e2:79:24:
22:f1:5e:a2:78:b6:a1:2a:59:1f:30:96:29:14:37:
f5:a2:97:9c:43:e3:76:83:b8:e7:7f:1b:fa:10:7c:
24:11:6c:d4:fb:3b:f8:2b:f3:f3:12:60:b7:1e:89:
02:04:63:29:c3:cd:bf:cd:5a:7b:6d:cc:1f:ad:b8:
28:ef:b1:1a:58:bd:5f:5a:f7:63:d0:30:f3:9c:c3:
c4:3f:c7:54:56:c2:da:f1:b7:95:ee:c6:15:d8:74:
38:5b:25:c6:17:f1:c9:54:86:b3:52:55:83:27:3f:
5c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AD:14:A5:32:55:85:75:5A:55:F4:5C:74:7F:FC:18:7D:AB:63:52
X509v3 Authority Key Identifier:
keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f5:5f:28:2c:ef:49:8d:c9:c9:e8:9a:f7:b5:12:99:51:47:
a6:b3:db:de:ba:85:4e:cb:9e:1d:ab:c3:d5:42:ff:4e:4f:50:
ec:79:ba:2d:9a:ab:f0:9b:27:9d:de:a0:70:7a:c9:9a:e4:f9:
74:ff:d0:f4:ce:3f:a6:a6:40:ee:fb:7c:6e:16:55:42:c4:f3:
0d:c9:81:2d:84:05:06:ff:95:56:71:f7:d2:86:50:1f:d9:41:
30:30:3e:74:9f:94:af:36:6a:c7:b6:a7:5e:b7:05:c4:69:62:
29:f7:e3:04:ca:56:24:f6:84:cb:63:01:84:a7:26:b0:b6:eb:
12:54:71:14:bb:1e:28:f1:2f:bd:83:37:5c:b4:60:b2:11:4d:
04:34:9e:b3:e7:43:67:1f:b8:2a:e1:c4:9b:d3:72:00:a1:bb:
01:0f:01:7c:09:7b:39:d3:70:0c:c4:a1:7c:a8:98:00:5b:b9:
f5:25:35:6e:b8:01:02:ee:1f:fc:38:9b:30:3b:c0:32:b1:00:
f4:b0:22:27:44:5a:39:47:30:59:88:c8:c3:68:bb:9e:6c:0c:
89:bd:80:23:63:a7:d0:d9:1b:d0:7f:64:d8:a9:4a:5b:99:54:
13:3e:4b:71:55:d5:ec:1f:6b:c0:75:66:ce:5a:8c:40:b1:71:
2b:5c:ea:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:46 2025 by rpki-client