Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File: SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier: UNih7J+xhRVyvTbyXWW4XDcQI9jLWgdZM/hSb2rH75c=
Subject key identifier: 5A:01:D6:F7:D9:1A:68:B6:97:2E:F4:12:8F:0F:34:35:76:DE:1E:BE
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer: /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial: 01951134A76EF72E7A4B43A53974DCF46E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number: 085A
Signing time: Mon 17 Feb 2025 00:00:18 +0000
Manifest this update: Mon 17 Feb 2025 00:00:18 +0000
Manifest next update: Tue 18 Feb 2025 00:00:18 +0000
Files and hashes: 1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: aPJtjkTxW1+24agqtjd8XDFzShdwtsTLhQECcV1WxSE=)
2: gljPZRHD4o8JNjNIJxHbyh4kaRQ.roa (hash: ynLfSUBP+/RK0hSDUfdxyie+FGZVBwWsIpKno/W57hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:a7:6e:f7:2e:7a:4b:43:a5:39:74:dc:f4:6e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
Validity
Not Before: Feb 17 00:00:18 2025 GMT
Not After : Feb 18 00:00:18 2025 GMT
Subject: CN=5a01d6f7d91a68b6972ef4128f0f343576de1ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:7d:18:a9:46:56:fd:d7:5f:7b:43:af:84:
46:03:02:ec:87:5d:eb:9d:41:46:cb:f1:79:c7:0e:
f0:23:67:3a:4f:e5:20:ec:17:87:dc:1a:0e:d0:77:
72:cb:90:e2:76:8f:b5:3c:79:70:e6:25:61:87:a9:
d0:1c:95:1e:d8:3f:5b:99:bb:d9:b2:36:6e:c4:28:
6d:18:6d:e9:f5:6d:a3:38:c3:4f:4d:ef:8c:10:34:
bf:42:3f:32:d2:59:1b:d4:34:62:46:21:2e:45:48:
06:e3:98:2f:f2:f9:28:f9:cc:bb:b8:3a:5c:26:97:
e9:3a:ab:0d:f3:03:19:5e:3d:d9:c4:90:14:0e:3a:
d1:a7:cc:1d:04:82:07:ba:0b:81:77:f5:c9:e0:09:
e9:75:d0:5a:9f:b5:ce:ef:6f:4a:b7:18:ea:a6:c0:
52:00:1b:59:97:de:e2:d4:c8:75:2d:f8:1d:f7:ff:
1d:91:63:fc:9e:9a:57:e7:d1:6a:ea:be:21:85:b9:
53:36:40:05:58:f8:a7:95:84:d1:fc:60:7c:44:eb:
be:44:29:77:81:d4:ad:8d:1e:9b:d4:ee:a2:b9:1c:
8d:e4:80:63:90:60:63:cd:95:c9:ae:90:b6:ba:25:
8b:f8:e0:fe:03:ac:2a:b8:99:f6:6d:3c:08:32:0b:
c7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:01:D6:F7:D9:1A:68:B6:97:2E:F4:12:8F:0F:34:35:76:DE:1E:BE
X509v3 Authority Key Identifier:
keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f3:e9:b3:e7:44:98:cf:06:87:51:22:02:a1:55:d1:fe:4a:
30:f0:9a:f1:ff:1a:48:3c:34:4e:25:2b:28:aa:43:be:3a:1f:
23:41:b8:53:f9:93:f4:a8:e6:a0:7a:47:5a:ac:69:61:13:85:
c6:53:bf:89:17:17:2b:8a:cc:02:5a:15:dc:77:3b:7a:7f:14:
85:b2:42:44:59:00:31:82:00:ed:cf:62:a0:df:76:d4:3f:60:
14:e0:03:47:09:7b:3f:ea:bd:7a:52:28:9e:16:e2:c5:8d:c7:
cc:2f:57:5a:a2:bb:12:61:59:05:1b:5b:f0:43:65:2a:51:0a:
c8:09:38:e4:17:2b:82:0b:4f:3a:76:06:c7:ee:bd:fa:82:41:
c1:98:11:92:ab:7c:88:1f:1c:b7:65:78:b7:ce:8f:ee:4e:48:
ef:7b:a1:7d:df:c6:b9:ad:8c:95:e3:7d:f0:06:e6:7b:59:c3:
1b:79:b7:23:69:9f:fe:29:74:2c:01:51:75:96:f2:39:cc:a3:
26:9e:eb:4e:b9:ea:c3:a8:18:0d:8e:47:b2:e8:16:ed:ac:14:
d9:1a:c1:53:c8:a9:42:6c:9b:e1:b5:93:de:fd:6b:18:74:c3:
56:03:96:32:67:ca:0d:f2:73:fe:64:b3:ed:b5:b9:f4:49:33:
91:24:a0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:05 2025 by rpki-client