Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json)
Hash identifier: YLwNPcgMdV/mNqgbR6GV9/c0dp93b/BpQRy5grXIhWM=
Subject key identifier: A7:55:1C:08:0D:D6:92:0D:AB:14:BE:B2:E7:75:87:0F:32:05:D3:A4
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 019510FDE97BC1DE060B9B2DE8CD0BFBB6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
Manifest number: 048F
Signing time: Sun 16 Feb 2025 23:00:30 +0000
Manifest this update: Sun 16 Feb 2025 23:00:30 +0000
Manifest next update: Mon 17 Feb 2025 23:00:30 +0000
Files and hashes: 1: So0J85BPs3UG_C6BWLfnLZ9c_3I.roa (hash: +ubxlITiYsafbFryEurkXW802YUQIUAFsrYygMwxezQ=)
2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: /qsVPX2v28MTbBL0OdRCunXP7wppkCPzEttQ0uzWCy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:e9:7b:c1:de:06:0b:9b:2d:e8:cd:0b:fb:b6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: Feb 16 23:00:30 2025 GMT
Not After : Feb 17 23:00:30 2025 GMT
Subject: CN=a7551c080dd6920dab14beb2e775870f3205d3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:17:68:89:00:06:a6:dd:19:78:e7:5c:6c:
34:22:f9:cb:7b:e9:f2:4a:68:a4:88:0d:b2:6d:73:
68:89:61:5d:13:f4:bf:d4:42:9b:21:0b:3b:17:71:
bc:18:b4:c0:64:cc:7a:0d:a4:41:c8:77:e1:58:79:
29:c7:ae:ae:38:96:a7:b1:69:3e:53:83:34:b8:92:
15:9d:d5:af:e1:42:4b:17:3d:64:2d:2f:8c:fc:1e:
05:57:14:b4:a5:67:2b:f9:f6:6c:a3:40:9c:e5:b5:
83:c9:33:1e:0e:22:38:55:b8:1e:7e:15:c6:46:8d:
9b:3d:2b:95:69:11:f1:ec:e7:74:8f:1f:da:fd:c8:
77:c3:03:4f:35:71:5c:44:d4:e4:07:84:fb:d9:fb:
8b:f8:03:40:76:98:d8:38:d8:86:31:3d:4b:de:5e:
7a:fb:c7:62:0c:07:db:10:9e:22:72:04:64:08:32:
61:a5:76:80:86:fd:c2:81:70:e9:f7:50:3f:30:e2:
f9:90:02:c1:5e:18:c5:32:93:9e:c7:3c:ca:04:30:
ee:ae:54:0f:c3:d0:ff:b7:dc:19:82:b1:a1:5e:24:
34:3f:47:48:a5:9a:94:14:c0:ae:32:ae:eb:b1:5d:
09:4c:16:cc:e1:ab:57:67:73:97:ef:b8:94:ab:d1:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:55:1C:08:0D:D6:92:0D:AB:14:BE:B2:E7:75:87:0F:32:05:D3:A4
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6e:a4:f5:57:0f:e2:f3:57:2f:29:0a:d9:74:4d:bb:d8:51:
65:e4:c9:62:eb:07:68:95:43:cf:d9:71:8d:4d:da:50:0f:d1:
0c:79:6d:1b:49:e0:c1:76:cd:d8:6e:1c:cc:f5:c5:a2:01:f9:
47:f7:40:9d:ec:4d:b4:6c:b7:7c:e4:98:17:b2:aa:52:59:71:
68:ac:93:23:b4:f9:82:21:61:3d:9e:ed:6a:e1:84:1c:b3:7b:
e2:52:3b:3c:1c:6a:c8:dd:f9:26:d7:9a:0c:40:1d:70:78:02:
15:fe:5d:3d:46:3e:e7:f9:45:a1:3a:45:c6:5f:b2:63:65:ac:
bb:65:f9:d9:5a:fd:49:b0:5c:23:74:08:e9:1c:ae:5e:e4:32:
fe:3e:28:04:23:9b:03:8d:0f:35:09:2c:82:5d:f4:20:52:3c:
3b:cb:8d:9e:29:64:8f:9d:1e:2c:f0:ff:16:3c:6b:f6:0e:cb:
e8:eb:f9:c9:50:4d:17:0f:4f:5c:00:ed:d8:04:52:8d:da:96:
14:5a:8d:75:79:6d:b5:0a:af:78:68:e7:67:d1:87:24:65:39:
9c:56:37:18:d3:6a:47:07:ba:1d:95:97:48:b6:d6:8b:3b:b5:
64:f1:65:d6:4b:e1:47:fa:4a:37:d1:0f:8a:77:8a:b1:4d:38:
2a:65:33:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:16 2025 by rpki-client