Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
File: j5D2t16RPyeC7VSetyFyxZzEevE.mft (raw, json)
Hash identifier: +03vQs1ya7hvXTUlTx+SR7cgs3rBYpl9nuyTO0DXyyY=
Subject key identifier: BD:8C:B9:1C:99:D7:CD:59:50:0D:1A:EF:28:3B:F5:75:7B:8B:C6:00
Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
Certificate issuer: /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Certificate serial: 019510FE001A86A87761ED88EF2E236C6865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
Manifest number: 145B
Signing time: Sun 16 Feb 2025 23:00:36 +0000
Manifest this update: Sun 16 Feb 2025 23:00:36 +0000
Manifest next update: Mon 17 Feb 2025 23:00:36 +0000
Files and hashes: 1: iyPNjwJabCXXK6p6-uFNI9tlBmA.roa (hash: gNpFReUeQCJp2ONtKUvB3iNXDc2qvV1lA6rnPgigdyw=)
2: j5D2t16RPyeC7VSetyFyxZzEevE.crl (hash: ue5zRUuy+xB86kKVKZS6RyeuzyWQQBO9U/FE7kyh4v4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:00:1a:86:a8:77:61:ed:88:ef:2e:23:6c:68:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Validity
Not Before: Feb 16 23:00:36 2025 GMT
Not After : Feb 17 23:00:36 2025 GMT
Subject: CN=bd8cb91c99d7cd59500d1aef283bf5757b8bc600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:58:e4:95:34:27:78:01:a6:cc:d6:d9:67:
be:77:cb:8d:c9:09:24:2f:7b:2f:03:fb:d1:9e:52:
1c:90:a9:f1:ef:d4:89:dd:3c:a0:e5:32:70:36:1a:
02:33:65:5b:a9:d7:84:cd:fa:03:8b:ce:f3:8b:11:
74:63:3c:0f:2f:bd:d1:fb:b1:8f:9c:03:a5:49:79:
79:ae:af:34:21:19:63:1e:34:99:91:c8:bd:74:52:
c1:77:89:fd:db:54:13:08:c3:0c:a8:be:0d:29:ab:
16:fa:a6:66:55:86:4b:2f:0b:e9:77:14:f1:50:49:
e5:fc:d2:7d:ce:55:a7:7e:27:1e:1a:c4:75:d4:fe:
26:7d:36:12:e2:36:44:c8:83:d6:8b:c2:72:6c:5e:
1b:49:4d:19:4d:e0:ca:1d:a9:9e:8e:28:99:5f:0f:
a1:8b:23:c9:79:4b:cb:7a:a7:1d:ff:0e:a3:9a:75:
46:0c:80:47:27:13:fc:2c:25:1b:ac:ab:8b:c5:a0:
48:5e:53:71:1f:59:8c:74:54:73:50:3d:86:72:47:
86:37:42:8b:96:7a:c3:db:3c:e0:8c:0b:78:42:de:
31:06:4a:e3:13:5d:3a:44:26:1f:44:ff:e1:db:a0:
98:46:cd:7e:82:69:2c:92:7f:15:2b:5b:bb:92:8a:
1f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8C:B9:1C:99:D7:CD:59:50:0D:1A:EF:28:3B:F5:75:7B:8B:C6:00
X509v3 Authority Key Identifier:
keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:77:6a:02:8d:f3:0c:ea:76:77:b6:0a:40:de:80:6e:91:ee:
d8:af:29:13:93:c7:69:28:9f:dd:e5:32:86:57:f7:f4:26:c8:
14:07:ad:06:e2:3f:a6:c3:a3:2a:ea:fa:d0:be:a8:51:e7:00:
7c:93:c3:93:87:b1:23:31:72:6d:e3:4b:a2:a3:08:78:8c:05:
37:9f:0c:7f:9f:e8:81:f0:c2:bc:f8:5b:4e:4f:0f:74:5e:e0:
e8:cd:4a:7a:f0:ad:a5:87:66:bf:d7:43:f6:96:e8:7f:1c:fc:
47:99:64:80:8b:f1:c7:3c:e9:9c:56:24:c9:23:4f:bb:76:f0:
4c:57:bd:a3:e5:b0:c4:ce:ed:92:66:5d:d4:71:a2:9f:53:7c:
a5:50:d5:f6:7d:aa:5f:5f:36:0c:e4:c1:37:c3:49:71:b0:17:
da:6e:0a:d1:a6:da:fd:83:2e:59:38:e9:39:b6:46:c0:26:c1:
c9:f3:20:06:cc:7b:98:a5:36:ac:52:de:d4:2a:93:f6:4a:a8:
c5:3d:fc:b9:80:7a:a8:c2:77:68:9f:ab:33:dc:a1:12:51:ec:
69:81:25:6e:92:1a:d2:c3:ca:b7:fe:85:cb:8c:27:ba:1a:ac:
a6:b6:56:a5:2a:5d:74:1a:ce:5e:e7:74:35:5a:48:51:c2:df:
78:56:7d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:56 2025 by rpki-client