Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: bkaTmodl91i2XclxZBmmA2NrzXnAmdi85zT/28u24Q4=
Subject key identifier: 3A:7F:1F:82:A3:03:21:86:C4:DD:FB:5A:D7:95:B2:6F:55:ED:6A:9B
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 019510C6FF7FD720A17D35283C989838E930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 143F
Signing time: Sun 16 Feb 2025 22:00:31 +0000
Manifest this update: Sun 16 Feb 2025 22:00:31 +0000
Manifest next update: Mon 17 Feb 2025 22:00:31 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: pMKPSbixOrOwo561tFm6/6WWdgY+uzjRJS+gbTz6XxA=)
2: SJe0yiKrFFgre-LwlA373na16-M.roa (hash: W+lZ86QtGfH27JSeGBvOgaus0tZU6nh0IODmn6TYevo=)
3: rXYQihXZcHzDYDPfOCw2uf0QxOs.roa (hash: mgxpGPq3j8kcIVwK/lsmtpT+En8AA3E9GG8LueVY7g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:ff:7f:d7:20:a1:7d:35:28:3c:98:98:38:e9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Feb 16 22:00:31 2025 GMT
Not After : Feb 17 22:00:31 2025 GMT
Subject: CN=3a7f1f82a3032186c4ddfb5ad795b26f55ed6a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:06:df:0d:7c:e2:76:54:7b:79:ba:a0:1e:
44:c2:6e:61:dc:ac:bc:37:62:b2:2b:54:f5:d3:fd:
7d:4b:20:a7:e8:70:b6:20:54:d9:08:4f:7a:c8:f5:
c0:01:6c:cf:d7:41:0b:e1:54:94:00:12:5e:96:e1:
ce:14:87:cb:92:be:ca:00:b2:48:10:44:d8:a4:7c:
78:d2:84:d5:88:c0:c1:e4:f9:1f:ef:6b:d4:e1:33:
68:ed:f9:6e:3f:3b:51:7f:2e:a4:66:14:22:01:15:
dc:7d:a4:6c:a2:72:6f:23:86:53:8d:62:72:8d:c4:
26:96:01:80:45:d2:53:54:50:3d:75:92:14:66:cd:
73:38:ca:84:d7:53:83:db:7b:d8:1b:6f:f0:f4:84:
50:5f:4f:49:ae:dd:43:b5:45:ad:ef:ca:ac:8b:9d:
05:7e:81:b9:98:f2:15:8a:94:fa:29:ee:be:f6:05:
90:ec:b9:53:5c:60:49:8f:9f:42:38:80:3b:08:f2:
f6:7d:31:d7:ef:22:0e:28:23:27:2c:3c:72:65:95:
45:60:4f:63:e4:7b:f1:8c:61:c9:6a:0d:68:f3:1a:
f5:48:4f:a2:56:77:53:e0:3f:c9:d8:4a:da:45:0b:
60:22:e4:32:06:1a:30:ad:55:18:a5:6b:01:06:b9:
cf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7F:1F:82:A3:03:21:86:C4:DD:FB:5A:D7:95:B2:6F:55:ED:6A:9B
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f6:32:84:9f:cc:a3:df:39:88:46:e2:42:ac:55:90:5d:eb:
83:17:1b:41:ae:2e:5f:d7:7d:a4:8a:5d:33:5f:09:07:9e:b2:
e3:6f:71:c3:76:68:ed:94:df:30:c1:38:91:3b:91:bf:95:ec:
b6:52:26:6e:47:da:aa:22:a8:91:68:f3:8d:3b:c1:68:db:1e:
0a:84:e8:40:31:8d:e7:30:1a:1b:1e:cc:7c:ef:6d:71:df:2a:
ed:bc:61:a7:ee:55:f0:66:5b:23:a0:20:c0:2c:89:e1:14:88:
28:45:9c:26:6c:a7:5c:ac:ed:da:c6:bb:fe:f4:d5:88:cd:37:
1c:27:3d:8c:a7:8e:c9:96:c5:5d:3b:14:0c:bd:7d:c3:b3:59:
66:5b:93:8a:42:a3:ef:48:47:fc:47:c2:30:e6:91:2b:d5:9c:
40:5a:4c:ed:09:67:36:06:20:f4:1f:94:11:fb:86:6b:37:7e:
07:aa:e0:c8:42:10:c7:ef:b5:87:49:e3:a6:7d:58:e5:92:e6:
e9:17:2c:67:a4:64:3c:1a:bd:38:ef:e3:c5:f9:a6:be:16:0b:
64:11:fc:9d:db:21:b1:2e:22:0e:8a:8b:8c:23:3a:fb:40:50:
b2:bb:3a:2d:a9:c8:12:98:7a:33:cc:6f:c8:27:2a:96:90:c9:
45:fe:12:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:48 2025 by rpki-client