Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft (raw, json)
Hash identifier: 23mRk07/+7cNkbzQ5Hcg0NkoUpephRK719s4qcdYTAE=
Subject key identifier: A1:D1:53:2F:55:4C:BA:40:C9:1A:DE:57:F6:25:69:FF:5C:3D:EB:D2
Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Certificate issuer: /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Certificate serial: 019510C75C14AE5CB66DBC53C61A0B6F2731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
Manifest number: 0FC5
Signing time: Sun 16 Feb 2025 22:00:55 +0000
Manifest this update: Sun 16 Feb 2025 22:00:55 +0000
Manifest next update: Mon 17 Feb 2025 22:00:55 +0000
Files and hashes: 1: S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl (hash: DbCeaTPrsQMiPIJn1dvc50lO+v0U7USzjIAZ4ohnvYQ=)
2: ejjlASXkUcRdnr6-VdCF2Mgcm40.roa (hash: vzr2w6+iif68HBa0Udg4Ex8g0igxmMWxnsZRKLXilEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:5c:14:ae:5c:b6:6d:bc:53:c6:1a:0b:6f:27:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Validity
Not Before: Feb 16 22:00:55 2025 GMT
Not After : Feb 17 22:00:55 2025 GMT
Subject: CN=a1d1532f554cba40c91ade57f62569ff5c3debd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8e:92:52:e0:fc:85:b9:e6:2e:0a:11:82:1a:
31:14:30:ea:41:ec:ae:c4:6c:95:aa:e5:86:78:fb:
0f:1f:38:fc:70:20:8f:ce:ad:0b:b0:ed:73:a1:43:
e3:dd:3f:61:17:3e:67:5c:b8:f5:e9:9b:75:49:c4:
9d:1d:de:6b:f4:e2:1c:b3:33:ab:d9:9c:6e:15:f6:
c3:87:28:2e:f7:0a:e1:9d:5d:3e:8c:6d:31:11:93:
b0:fd:6e:dd:01:ff:7c:db:78:a2:79:0f:4b:26:f3:
1c:d3:1b:c2:27:67:24:8c:1b:73:1b:ae:71:bd:4c:
62:c2:9d:29:56:09:56:30:51:23:15:68:33:2c:86:
5c:02:92:45:25:f8:34:31:aa:01:0a:af:c7:17:e5:
a0:09:15:e0:a3:43:e5:cd:46:9b:9b:9e:99:6b:e2:
44:17:9a:cc:ed:a4:6b:e0:97:6c:a0:9c:e1:fa:12:
87:0b:1f:c2:02:93:75:1d:48:16:9d:20:b5:73:30:
6f:d8:aa:6f:9d:7f:e1:6c:46:30:42:f9:b9:49:92:
eb:e0:a4:ee:e2:c2:9b:e5:fa:74:c9:55:3e:65:72:
72:01:3f:82:a2:02:0b:e5:e7:45:8d:83:88:37:8e:
b5:10:36:f7:66:7e:8e:cb:e8:7c:0b:be:38:ff:f8:
26:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D1:53:2F:55:4C:BA:40:C9:1A:DE:57:F6:25:69:FF:5C:3D:EB:D2
X509v3 Authority Key Identifier:
keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:28:88:d9:44:4a:06:b2:85:de:ad:5f:0c:4c:f0:2e:35:3c:
9c:cf:94:31:64:e4:a6:32:51:9b:f4:95:ca:0d:1d:cd:18:04:
93:0b:41:67:00:bb:4d:77:29:25:59:16:d6:a6:77:03:de:ea:
82:f1:34:75:8b:4e:65:96:5a:8b:73:d8:b0:96:87:7d:d4:95:
36:21:71:33:d9:f6:06:45:2e:7c:3a:25:93:60:e2:ab:22:7c:
21:3a:44:42:83:d9:f9:8d:69:b2:58:58:7d:f6:90:bd:a5:0d:
7b:85:77:17:2a:fc:3c:8e:d8:8c:1e:c6:12:a2:8d:59:ed:36:
71:bd:41:2d:32:4e:62:d1:96:cd:f4:5a:1d:ea:65:6a:9d:9a:
77:57:42:66:4d:94:5b:c4:d7:db:e0:48:b5:59:8f:58:63:ab:
76:9b:cd:02:f1:70:ce:65:ad:84:8b:a0:02:3e:04:55:d7:87:
18:33:c9:59:7b:45:25:c2:70:5c:f8:b8:7b:a0:55:9f:d6:b1:
01:e8:06:a3:9e:1c:b1:73:5a:1c:64:aa:ae:b8:f7:e0:f8:45:
8d:65:a5:21:b8:c1:b5:7b:19:ee:6f:92:4b:27:31:33:70:6f:
56:d3:6d:c0:b5:6f:27:2a:3c:b2:47:13:d3:af:82:bd:42:60:
36:44:e1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:01 2025 by rpki-client