Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
File: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft (raw, json)
Hash identifier: ZtTOiyWsahD6eAiJFkWEAJCEEEKyBZIuoMqyfiGJWYM=
Subject key identifier: 3F:34:D7:46:3E:2F:76:D1:02:A8:EA:A2:B2:9E:17:45:EF:77:8C:B1
Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
Certificate issuer: /CN=7fe0e759354e83cc19320381109de22da0f1a700
Certificate serial: 01951210517CDF4BD107F7206480964EFF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
Manifest number: 145C
Signing time: Mon 17 Feb 2025 04:00:14 +0000
Manifest this update: Mon 17 Feb 2025 04:00:14 +0000
Manifest next update: Tue 18 Feb 2025 04:00:14 +0000
Files and hashes: 1: J0_szuc94cDOPgNJ0yLN783Wnvs.roa (hash: 9y3mjauYNrbe3lUEgqyehF1KTbocvn7jwNFB7RZHERI=)
2: J1Y1sr_zchu3Z4XMLqO-OvK8UPY.roa (hash: wEQuNZ06+AXloUeRMR6QwQxwPhXa3MGT1uIFt5gyxuw=)
3: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl (hash: arGl0vgPP5v/+qN+FqbkQ5Cd4oOWVRcCT7ryQpdvYEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:51:7c:df:4b:d1:07:f7:20:64:80:96:4e:ff:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700
Validity
Not Before: Feb 17 04:00:14 2025 GMT
Not After : Feb 18 04:00:14 2025 GMT
Subject: CN=3f34d7463e2f76d102a8eaa2b29e1745ef778cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:ab:1b:09:44:11:ab:cf:5d:72:af:c5:51:
c3:99:f3:79:e9:cf:1c:7a:b6:d7:02:55:3c:d6:4a:
e4:9e:a3:9b:b2:af:5c:94:99:45:4d:1f:a2:cd:87:
cb:aa:32:94:4b:80:22:0e:de:65:bd:7b:a5:1b:f5:
94:ae:f7:3d:ba:4a:de:a3:58:94:51:0e:e6:68:7c:
50:e1:ee:e4:50:f2:e7:11:17:f4:c2:d5:ff:8e:bd:
ea:e5:a8:f2:59:99:fd:a4:d3:6f:a9:26:d0:06:d6:
99:fd:42:7d:a1:5b:ab:30:7f:2e:3f:6b:64:30:b7:
11:55:46:be:a1:d8:0c:9a:7f:84:63:46:41:d0:8f:
d2:35:16:21:f9:57:1f:87:c3:e9:6e:1e:75:52:7b:
c5:0f:90:e4:3e:67:e8:03:50:d9:ca:5c:69:e8:42:
06:4b:07:0b:84:e2:cc:4c:e5:d4:32:f1:e5:24:43:
67:b7:b8:64:40:ea:88:ec:41:6a:40:a0:c0:30:f0:
93:a3:5b:ff:e2:90:16:23:88:23:16:dc:08:cb:ab:
c9:fa:94:c8:00:fa:48:23:3c:00:02:15:4c:0c:d2:
6d:ef:b7:6c:4b:7e:ca:9f:7b:9b:6a:fa:e4:9d:4d:
82:0c:d4:7f:e3:db:36:06:43:b9:5e:af:e0:6e:a4:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:34:D7:46:3E:2F:76:D1:02:A8:EA:A2:B2:9E:17:45:EF:77:8C:B1
X509v3 Authority Key Identifier:
keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2f:1d:99:7b:76:a4:75:c2:c0:d8:02:7c:52:cb:b6:91:c4:
76:4b:0b:d9:ec:f1:34:f8:e0:e9:5a:08:86:c4:a9:49:c0:26:
7b:63:c4:fe:52:40:9f:38:1c:51:a8:b1:eb:94:a8:73:f7:5b:
49:49:c6:23:ed:6e:06:d4:90:4e:f7:df:7e:b4:fa:bf:13:3b:
d6:72:01:a7:b6:bc:2f:97:fa:dc:25:13:6e:39:2c:10:fd:20:
a7:f8:b4:b2:92:ba:f4:44:c4:2e:df:92:16:eb:ac:d2:0d:27:
cb:28:61:bf:c8:d2:fc:05:72:5a:f2:73:c1:f9:70:e6:58:06:
80:69:52:73:eb:cd:0b:01:cf:41:62:f2:3b:0f:f1:95:b3:22:
0c:cc:96:f4:5c:40:55:1e:d8:00:de:b7:06:4c:a0:8c:12:fc:
67:0c:79:de:0f:f2:ab:a6:1a:5c:bc:c0:88:06:0d:b7:85:f9:
ab:f1:f5:e8:3d:11:5d:2d:c1:37:99:af:3b:c8:53:8c:0e:d1:
35:01:c3:10:19:7d:92:03:25:6b:40:f5:59:7d:3e:a6:e1:3a:
3d:56:7b:a9:88:87:2e:b0:b9:92:e8:79:16:4b:ea:cd:6b:fa:
f6:54:04:4a:b9:9a:ce:84:80:d9:33:02:8c:3c:08:f9:c1:36:
23:63:58:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:58 2025 by rpki-client