Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: fpaxi7ccT+esuzpVX0L2kUScdqyHEe2M0kTUBthnJOk=
Subject key identifier: C7:28:6B:0F:77:19:51:77:02:5D:E5:C4:45:7E:1B:E4:CF:2F:82:35
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 0195116BE8CFD4A039261EF33C3D4DA9315F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 0AE6
Signing time: Mon 17 Feb 2025 01:00:39 +0000
Manifest this update: Mon 17 Feb 2025 01:00:39 +0000
Manifest next update: Tue 18 Feb 2025 01:00:39 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: rjJBWNYb1kDxRi84KzsB/MGUP5WkjZoJIoY7N7QFgjE=)
2: 3ZY4SnX1yy3L1vAgX9voAeMkVFA.roa (hash: tg2AmRn5Z2Y+ThyLPd/HKMkLP9Uc9wkQQiNjIF3J+mw=)
3: ugCHO46pUQzd5zqdNawWJEPystY.roa (hash: BahKiNdd/pZ/56ATzb3cvkxPGvUYcM+QZnAs5IV/tZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:e8:cf:d4:a0:39:26:1e:f3:3c:3d:4d:a9:31:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Feb 17 01:00:39 2025 GMT
Not After : Feb 18 01:00:39 2025 GMT
Subject: CN=c7286b0f77195177025de5c4457e1be4cf2f8235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:4b:5d:ff:2a:db:1c:0e:e0:09:89:a7:aa:
59:60:d8:24:f0:71:90:48:27:51:87:f7:af:e4:56:
49:59:ff:86:b4:2e:24:81:7b:75:ad:9f:c1:2d:d5:
26:e0:3a:a7:55:2e:c8:02:a5:72:17:b4:75:a2:8b:
4b:99:9d:c3:c4:ad:1b:c4:f7:9a:4a:60:3c:f0:19:
34:3e:77:c7:96:58:3b:1a:4f:7a:e3:be:2e:91:f2:
4c:28:75:5a:4b:14:4e:0e:d8:96:de:bf:ac:12:e8:
75:40:f4:7c:d9:8e:f2:7d:bb:3e:dc:28:90:81:94:
f7:86:ef:e2:4e:bf:3a:fc:b7:70:c5:48:cc:ea:dc:
14:60:39:86:b1:02:82:d5:7a:85:f0:39:db:36:0e:
b3:17:68:8c:26:35:90:2d:2b:ea:c0:4a:b5:3a:42:
c5:9c:d3:03:76:d2:c1:eb:39:46:23:8e:0f:2a:17:
0a:f4:21:e5:0c:27:44:9c:97:8a:61:7b:1e:03:de:
6f:ae:bd:63:fc:78:36:7b:79:0e:06:a2:54:7d:d2:
cf:62:cd:de:83:7f:0f:90:66:c6:ae:f7:56:87:7e:
d2:33:26:06:a0:e7:5e:a3:9a:ce:4e:28:21:bf:ae:
17:29:ae:04:e4:83:f3:c5:8e:c9:4e:57:ed:b4:cf:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:28:6B:0F:77:19:51:77:02:5D:E5:C4:45:7E:1B:E4:CF:2F:82:35
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e8:44:68:d8:8f:a0:db:ea:fb:fe:89:26:e3:fd:03:ca:87:
05:e1:49:69:42:ba:bb:22:87:f9:f3:9b:38:2b:1d:4a:eb:18:
e8:72:3b:89:69:ee:2a:3e:bc:9b:e3:6f:e9:37:e5:1a:ff:b5:
57:11:8f:13:7d:90:fc:9d:eb:7d:2c:c0:84:9a:2d:74:75:e7:
a1:ff:48:7d:a7:06:8c:13:c4:51:32:d3:5e:9b:69:0e:a3:b2:
8c:79:73:c2:c4:5a:3c:d5:96:68:a6:a7:5b:2e:83:ad:ed:f2:
fe:d9:25:2a:64:6d:6c:44:f8:bf:c9:f0:c4:4f:6b:83:4d:41:
af:f0:01:3c:4d:85:24:af:90:e3:e3:c1:bd:90:b7:a5:38:4b:
a0:a9:34:ab:f1:93:15:94:85:6a:01:4b:ef:e5:39:8d:54:e1:
cf:e8:27:3c:04:ef:a6:4d:eb:98:5d:cb:9b:d8:8d:ba:38:4a:
50:e1:cc:d0:2d:22:7a:63:0e:f4:51:df:df:dc:87:f1:49:fb:
10:da:7b:da:c6:7a:c3:12:e8:8d:df:c5:51:e7:08:12:ff:2e:
e6:96:c8:6c:42:43:0e:06:95:85:51:ec:97:c1:79:58:4b:e2:
88:37:78:d8:aa:df:9a:a7:20:df:c7:25:39:2d:df:b8:2c:67:
a0:be:5f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:04 2025 by rpki-client