Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.mft
File: M12DGvzJ10zPPuQKDraPmQhbmN0.mft (raw, json)
Hash identifier: pEvmSfUiVGRHMB6Q5ei3JzR23NwkgurOIO2+9k2hrnU=
Subject key identifier: BA:14:AF:FB:D4:49:41:F0:7E:70:00:07:8F:22:F5:58:FC:16:AF:D5
Authority key identifier: 33:5D:83:1A:FC:C9:D7:4C:CF:3E:E4:0A:0E:B6:8F:99:08:5B:98:DD
Certificate issuer: /CN=335d831afcc9d74ccf3ee40a0eb68f99085b98dd
Certificate serial: 019510FDCE3A0A0C22AC08B3996E935B8048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M12DGvzJ10zPPuQKDraPmQhbmN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.mft
Manifest number: 090C
Signing time: Sun 16 Feb 2025 23:00:23 +0000
Manifest this update: Sun 16 Feb 2025 23:00:23 +0000
Manifest next update: Mon 17 Feb 2025 23:00:23 +0000
Files and hashes: 1: M12DGvzJ10zPPuQKDraPmQhbmN0.crl (hash: QreqWAD5HFw64+qum3Vt6vXz+dWMbb4qQ45C1oL91zQ=)
2: R9RvWbhDm0SQa4wbE9QSWeXh3Vk.roa (hash: ErtYPmRmXoAaumaJ3Qu1+zPb7HB9aNdfUQEtd+bYSjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/M12DGvzJ10zPPuQKDraPmQhbmN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:ce:3a:0a:0c:22:ac:08:b3:99:6e:93:5b:80:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335d831afcc9d74ccf3ee40a0eb68f99085b98dd
Validity
Not Before: Feb 16 23:00:23 2025 GMT
Not After : Feb 17 23:00:23 2025 GMT
Subject: CN=ba14affbd44941f07e7000078f22f558fc16afd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:e2:b1:d3:43:89:86:17:88:85:e7:c1:d3:
54:30:73:48:20:f7:c8:7c:b6:93:5f:75:00:dd:63:
48:88:b6:16:a9:1a:1a:06:76:17:00:88:a5:27:0c:
0a:70:85:30:1b:51:ec:fa:64:57:f7:ea:d0:a6:4c:
79:43:0d:e4:cb:b1:0b:bb:4d:72:2f:f0:85:76:e5:
6e:05:c7:e9:39:87:c1:21:d7:e7:74:28:08:bd:af:
fa:60:4d:7d:b2:f4:38:63:97:d1:96:04:fd:c5:c7:
d8:f9:98:42:bd:ac:d7:14:97:5d:d6:e2:3a:3e:13:
cb:ca:ff:f7:b5:7f:18:c2:49:07:45:cf:6a:33:41:
7f:d2:0b:d3:ba:9c:1f:da:29:1a:13:ac:c4:f0:a0:
28:36:1e:49:84:61:5c:56:d5:6d:f8:5d:63:ec:1a:
58:27:92:0d:4a:24:3c:fb:56:05:82:1e:e3:cf:32:
9b:37:21:92:74:e1:ec:63:04:43:d9:81:7c:9b:62:
46:e8:fb:ee:bf:27:16:df:16:51:50:fb:f0:84:e6:
61:8a:89:17:1b:01:b1:93:ff:20:e0:d3:79:45:67:
12:7e:6b:7d:a2:b3:c5:27:b0:8c:fb:37:11:c7:da:
05:8f:e6:5b:0f:f8:1e:e8:92:29:fa:c5:5f:ba:96:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:14:AF:FB:D4:49:41:F0:7E:70:00:07:8F:22:F5:58:FC:16:AF:D5
X509v3 Authority Key Identifier:
keyid:33:5D:83:1A:FC:C9:D7:4C:CF:3E:E4:0A:0E:B6:8F:99:08:5B:98:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M12DGvzJ10zPPuQKDraPmQhbmN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2f:47:ed:6a:33:03:7b:03:c7:4e:be:1f:34:40:85:fd:c5:
5b:87:4c:24:10:72:ef:2d:3d:fa:2e:b9:4d:5b:e0:9e:59:f5:
f3:fd:1f:2e:72:77:a5:8e:8b:e0:1e:88:5a:ce:28:e3:4d:0f:
83:49:b2:46:3d:c2:4a:65:2b:29:27:68:2b:21:1e:77:86:a2:
80:81:81:5f:54:5f:c8:e8:0f:77:60:ce:92:43:79:1c:d1:53:
f9:d5:12:c1:f8:ef:9f:56:e0:2a:e7:0e:cf:1a:4e:84:4d:ea:
55:9e:b0:d6:0f:0b:7a:2a:7d:5d:46:a0:41:e8:1c:06:8e:73:
3a:5c:f8:c0:9f:83:e7:32:23:99:83:cb:4f:89:83:b7:02:c8:
f3:c7:60:81:5c:f0:77:29:64:eb:77:4b:52:16:64:45:b0:90:
29:31:0d:8f:70:6e:97:0c:9a:50:7d:6b:43:d3:b6:7d:db:d4:
0b:1f:c0:9e:58:a3:62:41:b9:3f:ed:04:93:e5:83:6e:1f:a5:
86:ec:ab:d0:45:a9:19:43:c6:58:96:e6:7f:57:01:37:09:ea:
c7:0d:a8:d9:66:7e:67:37:f4:58:ac:8f:d4:28:c1:3c:a6:df:
d5:03:45:f6:9a:3f:72:4d:a1:0e:48:28:8e:fb:37:f6:7a:81:
5e:dd:c8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:32 2025 by rpki-client