Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File: 4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier: iU3Gx/yOgxLVuRiwA3mD50mop+ksFrtnq3dVDpei1T4=
Subject key identifier: DA:45:E2:69:29:4C:62:57:9E:79:F4:28:3D:36:1B:B7:52:94:E2:BB
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer: /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial: 019511A2539B19D2DB77008AF568A2CC47C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number: 13AA
Signing time: Mon 17 Feb 2025 02:00:05 +0000
Manifest this update: Mon 17 Feb 2025 02:00:05 +0000
Manifest next update: Tue 18 Feb 2025 02:00:05 +0000
Files and hashes: 1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: J4nedQigznXvu/9fdayQ+ZYA1AhPyDaO+mJjBQy/kzo=)
2: C_W5uFOffH81U1XB_VG_eFr8n_A.roa (hash: kM5BT5a8AHJ+VqwyNcuISudnKqdFzEc+qETwFrySAkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:53:9b:19:d2:db:77:00:8a:f5:68:a2:cc:47:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Validity
Not Before: Feb 17 02:00:05 2025 GMT
Not After : Feb 18 02:00:05 2025 GMT
Subject: CN=da45e269294c62579e79f4283d361bb75294e2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:3c:4e:12:79:d4:36:32:69:cd:fa:89:38:
cf:a4:0a:44:83:62:75:41:29:ed:b6:fa:1e:04:f9:
72:d5:e0:ee:29:2d:93:9b:87:27:09:ad:2d:60:a2:
78:e4:7c:2a:b8:76:81:e6:1c:34:00:fc:49:2a:3b:
de:2f:42:76:ec:a4:c0:f5:f8:f0:c9:b0:2f:e3:bb:
d0:05:a0:be:ca:4e:47:6f:26:37:4e:15:00:dd:6b:
23:b8:27:b5:2f:44:fa:0f:51:33:a5:59:97:27:e0:
64:3e:9e:d6:da:02:22:05:e3:0d:3c:2c:91:39:a1:
e8:1a:a4:71:cd:31:2c:6b:4f:ae:ed:45:c2:08:45:
d3:22:41:04:64:c3:eb:90:d9:7d:57:e5:38:1c:54:
6d:8f:a2:8e:fe:35:83:96:7f:24:3a:c0:f3:43:53:
7b:61:68:26:88:6b:ef:4d:4a:87:8a:42:af:60:70:
a5:be:8b:47:1d:6f:ac:69:99:96:3e:40:82:c0:4d:
c8:33:8a:c6:6b:c8:e2:c9:d3:94:83:da:e3:91:cd:
82:df:27:30:19:06:01:8c:98:c2:6e:8d:8f:a4:b6:
46:ca:eb:d8:e9:a3:3e:4e:22:2b:8a:03:cd:55:b2:
b8:a0:bc:10:7f:b6:0e:6a:37:98:78:df:92:a7:26:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:45:E2:69:29:4C:62:57:9E:79:F4:28:3D:36:1B:B7:52:94:E2:BB
X509v3 Authority Key Identifier:
keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:13:bf:70:6d:76:68:55:e5:25:d3:b4:47:44:c5:42:e5:f9:
1d:b2:75:6f:2b:6e:9d:c4:be:da:d8:db:f4:1c:e7:22:a5:cf:
a5:e3:e9:39:d3:b1:02:8c:e5:7c:ca:7d:15:79:3c:f1:58:ef:
97:49:53:9b:0f:ae:a9:8e:d7:64:2d:cd:aa:19:4e:08:f8:1a:
43:1f:39:52:12:23:c8:db:b5:6e:dc:05:f7:aa:51:51:7b:9a:
d0:ba:29:f8:75:3b:cb:13:7a:c6:34:49:a4:f4:64:f2:f8:9f:
03:de:48:87:83:a7:4f:d6:44:e0:2e:cc:db:d2:a9:c9:63:ef:
1d:af:70:42:0e:c1:4f:bc:c3:e9:23:f8:99:ea:d4:44:94:13:
f4:31:2c:13:cf:bd:d6:bb:ac:c8:b9:13:f8:e2:d8:7d:f4:67:
2e:22:4b:78:89:41:ed:20:91:59:91:ff:87:64:f1:74:26:10:
95:97:ff:45:c4:75:40:a0:19:89:a7:81:90:5f:ac:4a:f1:ca:
be:65:e4:c0:8b:c2:96:70:3c:28:ba:f4:03:7a:99:8a:05:7d:
e1:5e:9c:9e:4f:d6:75:58:5d:02:15:51:b4:0b:8b:fa:f5:43:
87:24:02:05:6d:6a:c7:81:16:00:9d:e6:bb:db:32:7f:1a:4e:
d9:b9:4a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:38 2025 by rpki-client