Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier: SxFpBmNL4Q5fTQt9aCJ3Eg3/BQxjIlTQwWIu0TCLQCA=
Subject key identifier: 72:EC:D3:00:D3:6E:F7:1C:97:38:22:4B:06:89:45:80:D9:2B:0D:40
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial: 019510C7A0AEDAB20991769C647A07FDF5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:01:12 +0000
Manifest this update: Sun 16 Feb 2025 22:01:12 +0000
Manifest next update: Mon 17 Feb 2025 22:01:12 +0000
Files and hashes: 1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: XMCwlD2J7reL3hmhOLpXwaodS5fzmEZiIRGecwaNbv0=)
2: lsGbzxHmmLCraaV9m6GpjO-iIBA.roa (hash: Z6I8DbUnNuqgSWO6SRPbYw4EfdxPDhEpV2EFYvnSy8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:a0:ae:da:b2:09:91:76:9c:64:7a:07:fd:f5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Validity
Not Before: Feb 16 22:01:12 2025 GMT
Not After : Feb 17 22:01:12 2025 GMT
Subject: CN=72ecd300d36ef71c9738224b06894580d92b0d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3d:85:d4:f5:0e:7d:c2:c5:24:b6:26:44:e8:
a0:17:fc:92:6b:23:0f:7e:36:39:92:04:14:c7:a9:
ef:7e:1d:40:0a:ff:0c:87:f0:2c:e4:c1:15:2e:41:
13:a6:55:de:f5:df:af:22:6f:6e:12:57:ad:00:2a:
96:63:d8:3d:f0:be:ee:19:80:f3:f7:14:09:fb:65:
05:70:4e:9d:f6:b0:25:15:d3:38:05:c7:55:2e:f4:
e1:76:b6:a5:00:1a:d9:df:87:15:f5:cb:cb:32:35:
6a:ae:60:75:df:d3:eb:4a:42:45:8f:1a:75:ac:e8:
86:51:58:96:dd:fa:e5:ec:11:c0:73:24:a1:9d:a7:
25:c2:8f:67:b2:86:9c:1b:27:c6:39:9d:a2:09:d0:
30:fe:21:dd:aa:39:96:dc:e7:e8:0d:57:7c:f9:18:
52:96:a7:de:f8:1f:90:a8:6f:89:64:72:04:6c:4c:
3f:07:f0:f0:78:e6:92:cd:85:9c:80:c0:e0:70:6a:
2e:a3:c0:01:36:25:2e:08:b6:c1:e8:0b:64:bc:08:
93:79:d7:c0:af:f3:83:35:9e:b2:0f:d4:c8:ea:09:
df:71:39:f8:8b:1a:88:4f:6b:e8:a8:74:bc:b7:91:
4f:8f:be:21:17:77:8f:bb:d9:f9:e0:57:98:4a:af:
83:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EC:D3:00:D3:6E:F7:1C:97:38:22:4B:06:89:45:80:D9:2B:0D:40
X509v3 Authority Key Identifier:
keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ec:87:6b:3f:e2:eb:74:16:64:9a:f2:d3:4c:7f:f4:37:06:
f2:f0:08:6e:00:31:39:0a:8f:62:7d:1c:43:70:48:68:53:9a:
65:be:db:ad:cd:3d:32:12:0e:ba:96:df:61:93:b5:91:6a:15:
be:15:4d:6b:78:ba:f1:28:94:e5:58:22:ba:70:30:f3:e6:82:
3d:05:8e:f6:27:15:50:75:8f:dc:48:bd:90:4d:2f:15:9f:20:
c9:7b:4a:c3:19:74:df:f5:a5:6d:90:49:31:28:7d:22:18:78:
9f:1c:ed:63:0c:bd:9d:9e:5d:e6:b1:2d:1a:ca:4a:61:23:e2:
8e:8e:f3:4f:d5:8e:4a:10:1d:f8:c7:9d:63:52:a2:2e:ac:45:
e1:9d:a3:0f:41:8c:3b:89:a1:f7:e3:1a:22:da:ff:8c:ed:d0:
ea:f1:d2:bb:ca:42:ab:28:91:23:8e:64:e3:c6:39:4b:ea:e5:
dc:c8:93:b3:2b:ce:72:f5:f4:b7:50:ef:61:76:b1:7b:9a:79:
6e:fa:1c:07:62:c0:2d:ee:9f:48:f5:28:fd:c7:9c:36:02:73:
fc:27:eb:1e:cb:23:f9:2a:ca:fe:01:9c:c2:ee:c3:da:37:33:
d6:10:8a:4f:ab:47:26:04:43:61:e0:cf:ad:2a:a7:8c:11:64:
22:a6:13:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:59 2025 by rpki-client