Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
File: I50GV-qu8Ja-yUsR9NadDT7QTOY.mft (raw, json)
Hash identifier: nvMTfb2mC1EZ6CZdymEMBGIaEpLB8wnFLXHhh9fCaAQ=
Subject key identifier: 48:C7:2D:B0:27:1A:2A:09:73:6F:CC:44:C7:70:20:7F:D6:66:F5:93
Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Certificate serial: 0195116BDB941E8B58F38C4F13AFD997E2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
Manifest number: 119B
Signing time: Mon 17 Feb 2025 01:00:35 +0000
Manifest this update: Mon 17 Feb 2025 01:00:35 +0000
Manifest next update: Tue 18 Feb 2025 01:00:35 +0000
Files and hashes: 1: FciKzBJuJmXxMHbhg7vtxvJaFpg.roa (hash: LJXoq9acQBnheF7twxm9ozyA/I0gm87jr1W8PivL0eA=)
2: I50GV-qu8Ja-yUsR9NadDT7QTOY.crl (hash: Z4Rk7Vz2HdmkBwET1gEherFWPQLgQU8GMZCcfO8vSOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:db:94:1e:8b:58:f3:8c:4f:13:af:d9:97:e2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Validity
Not Before: Feb 17 01:00:35 2025 GMT
Not After : Feb 18 01:00:35 2025 GMT
Subject: CN=48c72db0271a2a09736fcc44c770207fd666f593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:3c:42:c3:85:b0:87:38:01:17:68:dd:33:
50:3b:fd:47:45:ab:8e:78:a2:7b:80:b5:2b:2e:4e:
41:20:3f:00:91:48:fa:56:15:4e:3c:6a:fe:84:34:
2a:7c:b8:0a:0f:8c:24:71:7a:6f:12:98:e2:a6:5a:
d0:78:c2:73:f5:3c:8d:b0:70:4f:e9:d6:c6:24:38:
ca:a9:97:45:30:43:42:57:8c:af:a4:fe:9e:fa:46:
94:0b:1b:90:d3:e9:e2:12:83:3d:d3:69:e6:8d:6d:
86:f4:64:2f:e1:82:b9:65:0e:44:4d:5f:51:aa:23:
42:80:62:35:5c:63:d5:45:37:93:12:5a:64:dc:c2:
0a:b3:3d:c8:db:e9:9b:47:58:a1:91:67:aa:28:37:
49:5c:4a:23:0a:0c:b5:a9:63:f2:37:53:67:e3:39:
db:5f:5e:44:10:0c:c0:8b:d8:65:71:b9:29:7b:94:
e8:45:93:2e:88:75:a8:1d:7a:b2:cd:ed:ec:bc:f5:
cd:a2:51:13:8b:2d:40:9e:29:5c:58:d3:21:46:5d:
de:ad:88:68:2c:92:72:b9:68:f5:8a:44:11:4f:6c:
6b:1d:41:6a:d6:8c:9d:49:ba:44:b6:c3:e5:3b:3a:
e0:fb:03:a3:91:74:86:53:57:46:ec:45:44:fb:fa:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C7:2D:B0:27:1A:2A:09:73:6F:CC:44:C7:70:20:7F:D6:66:F5:93
X509v3 Authority Key Identifier:
keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:aa:f6:7f:52:9c:26:99:68:36:22:5f:84:13:3f:ff:de:88:
02:69:ea:bd:10:5e:de:30:7b:3a:60:9d:f5:f6:2e:f4:9b:12:
07:31:0f:2b:0c:46:34:50:f3:f5:2d:f8:ad:8a:f5:18:ca:bd:
26:2b:d3:f2:3b:c6:b4:45:ae:e4:59:6e:36:d6:ba:dd:73:00:
c2:f2:f8:84:a5:e5:a5:92:68:3d:da:8d:bb:87:d6:b4:8a:28:
8e:82:fc:a9:73:77:53:11:3b:36:62:d0:27:a3:3e:98:77:38:
40:ac:80:55:2e:f1:81:d0:76:18:9c:44:cd:49:6f:2b:ec:c5:
c7:2d:f1:0c:23:25:c7:f1:25:11:fe:7d:6f:e6:6a:8b:16:19:
47:a2:d4:ba:1a:2a:99:2c:9a:3c:fa:88:e5:33:67:3b:54:bb:
ab:3f:86:12:e3:3a:b7:ec:65:4f:32:cb:43:5a:e1:ae:2b:07:
a1:6d:f1:93:4b:0f:c7:33:cc:f0:d0:7e:cb:f0:83:bb:0b:bd:
4b:b0:f9:59:16:a5:9b:55:e3:67:0c:06:f4:f8:17:3d:a6:b7:
47:28:6e:2c:24:3e:e6:51:60:5a:f4:e6:19:4e:1b:d8:a5:6b:
b3:b9:7a:d2:fc:0c:47:83:e8:14:44:b4:6c:24:e3:24:3d:7a:
5d:84:c5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:58 2025 by rpki-client