Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
File: dhwFdTsZvNtTL9x_b0fpfpNboKI.mft (raw, json)
Hash identifier: /Zo/NULkEv/5+pLah2exFAeD0rHSqQrlmO6W8p0KuiM=
Subject key identifier: FB:28:72:03:17:54:A8:68:0F:9B:A6:85:D2:C4:D3:9D:B9:A5:55:F5
Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
Certificate issuer: /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Certificate serial: 019511A3129A63BD6D9C1CA3667103A2ECF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
Manifest number: 0F36
Signing time: Mon 17 Feb 2025 02:00:54 +0000
Manifest this update: Mon 17 Feb 2025 02:00:54 +0000
Manifest next update: Tue 18 Feb 2025 02:00:54 +0000
Files and hashes: 1: dhwFdTsZvNtTL9x_b0fpfpNboKI.crl (hash: 5BmLb5v/9uCap7d77vl4+f1+E5NPxjqWC3080h3At/o=)
2: xzA5d-E1vgeb4mwlvmzNBazR01w.roa (hash: ajfP28ApDq4Q5y/sbVJlhsT7w2HrFwDNTtJP+3l1w9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:12:9a:63:bd:6d:9c:1c:a3:66:71:03:a2:ec:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Validity
Not Before: Feb 17 02:00:54 2025 GMT
Not After : Feb 18 02:00:54 2025 GMT
Subject: CN=fb2872031754a8680f9ba685d2c4d39db9a555f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7a:fd:8f:4a:36:3a:1b:a0:b0:c4:37:dd:ef:
5c:df:8d:13:fd:f4:8b:ef:93:85:bf:9c:97:ca:60:
8c:92:f9:d4:c0:1a:34:99:c8:36:7f:6e:bd:97:a4:
b0:98:c2:a1:c7:b2:77:2f:53:54:d5:f4:c9:21:54:
e2:8e:75:73:3b:92:f0:9c:59:47:b4:1e:d8:e7:3e:
c4:bb:4d:1b:42:ed:ba:42:ec:5e:15:0d:65:ea:b7:
da:dd:4b:b8:d6:37:99:16:84:db:04:89:30:4f:83:
41:da:10:ff:e6:0a:5e:8c:a8:a4:6f:30:c7:f8:8f:
02:23:e8:3e:72:c1:83:86:c8:45:10:6b:d8:8f:e2:
9f:1e:87:f1:d7:15:21:b5:02:31:34:93:8d:79:84:
6b:af:08:26:1b:08:20:c7:2a:f3:5d:26:11:c2:ee:
45:cb:2f:33:ac:d8:49:a7:f7:62:c0:02:a4:04:4f:
f4:6d:b5:0e:db:c3:fe:11:71:bf:e0:2f:d2:65:8e:
6d:4a:4d:44:9f:1e:76:90:dc:2f:52:a5:38:00:53:
c7:81:0f:2e:92:6f:2d:7b:92:1b:91:30:5e:cd:9d:
8f:05:08:0c:66:7f:9c:f4:41:c3:5a:e5:8b:db:37:
87:eb:1f:0d:7f:d3:59:80:c0:b0:27:e3:2b:f4:1f:
0a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:28:72:03:17:54:A8:68:0F:9B:A6:85:D2:C4:D3:9D:B9:A5:55:F5
X509v3 Authority Key Identifier:
keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9d:c5:15:50:7a:1c:bf:ce:2d:82:c5:65:9e:6c:70:7d:f1:
fe:a0:ce:15:10:15:66:39:a1:84:4b:05:a2:cc:f1:a8:fb:b8:
a3:c2:5c:56:33:00:73:23:1d:f0:9b:30:27:f2:78:00:74:f7:
4e:b9:7a:fa:1b:0a:48:a4:fd:cc:0c:d8:b6:53:ae:c1:e1:38:
15:3e:2a:c4:be:fd:41:80:91:d5:82:86:81:75:90:0f:e3:82:
bd:48:30:90:e4:04:dc:ad:7f:47:52:43:bb:18:c1:9b:4c:c3:
3a:18:cb:7d:b9:2b:dd:5b:cc:18:34:92:03:c0:f4:24:21:73:
a0:04:e2:12:79:8f:72:a1:10:e4:82:fb:60:ab:f6:94:b5:5b:
ce:0b:aa:5c:b1:b4:9b:c7:8a:f3:d8:67:98:42:78:d3:6f:7d:
e5:3f:ca:85:74:3b:ad:9c:12:70:7d:49:ae:6e:4a:a4:37:41:
59:5d:92:b1:84:a2:b5:be:67:91:9e:b4:ac:56:62:0a:3f:0e:
69:81:f7:09:3c:07:f6:84:ee:fa:a2:9c:06:7d:d1:f5:6c:a9:
60:2a:82:48:9c:12:f0:64:e8:4c:56:74:e2:32:cb:0d:fa:c4:
03:c1:f7:be:8d:65:d2:4a:aa:93:fd:61:e3:04:2b:3a:10:47:
ae:1a:9e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:46 2025 by rpki-client