Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
File: rFjrfGF1DM4zPNACbHfJPL5GXZg.mft (raw, json)
Hash identifier: dYUZSsNPODpx/DPUjK0PHlmEs69p3w2AIRXUW61MRQY=
Subject key identifier: 43:14:77:6E:8D:35:36:D7:89:14:9D:F9:1F:1E:92:68:5F:74:BA:4B
Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
Certificate issuer: /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Certificate serial: 019510FDB7451889F845C4D477B0C0EC3487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
Manifest number: 08A5
Signing time: Sun 16 Feb 2025 23:00:17 +0000
Manifest this update: Sun 16 Feb 2025 23:00:17 +0000
Manifest next update: Mon 17 Feb 2025 23:00:17 +0000
Files and hashes: 1: dYveMxpV9vTvL48rADeNQga7MgQ.roa (hash: cc3Bn2ZybQkob9bKAAN2kkILYEKK4Ym19QeA8svRfJQ=)
2: rFjrfGF1DM4zPNACbHfJPL5GXZg.crl (hash: TEAKIBdube++GNpT3GinJeCFzvECJCuCEP6VmUdmgxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:b7:45:18:89:f8:45:c4:d4:77:b0:c0:ec:34:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Validity
Not Before: Feb 16 23:00:17 2025 GMT
Not After : Feb 17 23:00:17 2025 GMT
Subject: CN=4314776e8d3536d789149df91f1e92685f74ba4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:26:7a:ca:57:20:81:8d:4a:5e:6a:96:27:
b1:0d:7a:b2:50:4a:ca:8b:48:be:90:e7:b9:8c:a8:
2f:38:b4:40:c1:c2:35:f2:16:02:fe:1a:c8:56:60:
98:72:94:ea:f0:d7:e1:16:cd:a1:c9:f5:19:69:6f:
5e:75:cf:b9:c9:fa:4f:0d:6d:6b:e8:9a:e5:21:28:
f6:44:a5:22:1f:7a:54:64:dd:1d:f4:9e:f8:a8:c7:
41:3c:5e:c5:fe:c3:2b:8d:0c:81:67:e0:b5:66:f5:
2c:bb:32:4a:42:ee:73:fa:c1:96:55:47:1b:c4:80:
02:ae:f2:a5:1e:8b:1b:e1:0e:fa:66:9c:42:9e:5e:
d2:9f:1b:f6:a3:39:70:d3:38:19:3e:c1:07:7f:71:
5c:b3:e3:34:86:b4:bd:76:11:f6:1d:c4:45:66:9b:
5b:6d:07:84:2f:f0:be:76:2b:66:5a:64:fc:b5:bb:
e4:eb:3a:15:1a:1c:d8:2c:c6:cf:04:cb:f7:b3:74:
2f:23:5d:03:23:ed:e5:a0:f6:5e:35:af:3c:99:67:
e7:97:93:18:55:f0:66:21:1c:77:ec:0c:02:4f:52:
72:29:67:56:29:9a:20:4d:7f:d4:34:91:d3:0d:ef:
97:bb:80:a6:ce:28:c1:73:9f:b8:07:7c:f1:9f:a0:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:14:77:6E:8D:35:36:D7:89:14:9D:F9:1F:1E:92:68:5F:74:BA:4B
X509v3 Authority Key Identifier:
keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:18:62:18:48:08:06:33:59:e2:a3:42:83:9b:3e:cb:d4:30:
be:68:51:12:ee:43:ae:a2:98:9d:a7:18:ef:71:c1:f1:bb:8d:
ba:a8:00:2e:44:45:a0:e0:49:98:bf:f7:43:12:27:aa:75:82:
96:f2:19:03:0a:0a:8c:2e:e3:80:1c:87:e9:2f:ca:02:a9:32:
f5:1b:8f:e9:d5:49:f1:c1:43:02:97:33:a7:a2:b6:63:29:8f:
c5:31:89:e2:5f:bc:6b:7f:52:fc:66:e0:e9:56:0e:4c:3b:43:
28:d9:82:67:c5:c3:1c:88:51:5e:8e:5c:a9:94:54:bd:46:07:
be:82:f4:9d:15:66:9c:e0:c0:6d:68:36:22:6f:c1:48:5b:8b:
18:6b:de:4d:31:fc:21:8f:ed:eb:bb:16:0a:35:e8:4c:89:d5:
4c:f4:c5:0c:6b:1f:93:32:0f:75:d8:2b:9e:ee:43:ed:0b:31:
6e:d3:05:34:e0:a8:40:7f:ab:a2:47:0c:0c:ce:d2:11:e9:7d:
3c:49:06:38:a5:82:f7:a6:01:47:8f:2b:08:c7:f9:d2:2a:2e:
7b:b4:50:a7:33:8f:ee:3a:38:1a:b9:65:d3:8c:fa:d3:09:3b:
06:d5:e9:64:06:05:82:ce:3d:47:58:d0:71:f2:50:db:15:8b:
23:b8:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:57 2025 by rpki-client