Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File: mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier: L1RRVd6+UucsKXzmoKfCKKwuJxCjKz5P7ByKE7FR+0I=
Subject key identifier: BB:CF:86:9D:62:28:19:69:F2:14:FC:82:53:AA:09:79:A8:A1:48:23
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer: /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial: 0194C507EC2ED66FDB00A334718B803FA9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number: 03A3
Signing time: Sun 02 Feb 2025 05:00:18 +0000
Manifest this update: Sun 02 Feb 2025 05:00:18 +0000
Manifest next update: Mon 03 Feb 2025 05:00:18 +0000
Files and hashes: 1: eVKsEsZr6gB68Zo9TNcu-9I752U.roa (hash: EZGdWjVxX6cyHbSc76sTqplIRnZDqoYAvS/hd1OeT4Q=)
2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: ojDqfhtjawrXHL/GbT6PDFjvKuI+hKE9ChVn5HE/vlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:ec:2e:d6:6f:db:00:a3:34:71:8b:80:3f:a9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
Validity
Not Before: Feb 2 05:00:18 2025 GMT
Not After : Feb 3 05:00:18 2025 GMT
Subject: CN=bbcf869d62281969f214fc8253aa0979a8a14823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e4:64:26:fa:cf:21:68:8f:2c:bb:ad:0d:be:
36:61:ef:8e:3d:8b:ad:fb:4b:fb:c5:c8:fd:56:af:
93:0b:83:6b:48:72:d5:b0:ff:0f:cd:c4:2b:8e:ed:
99:95:e9:b2:fa:09:85:52:77:bb:d6:5d:29:c6:07:
4d:b6:e3:6e:3d:55:cf:1d:46:96:00:a9:5a:91:41:
23:61:c9:0a:56:02:7b:18:6e:cd:4c:fa:94:f2:b5:
4a:2c:84:0f:15:c9:c9:ba:8b:c8:21:56:8e:fe:0a:
85:a0:eb:c6:82:8f:92:e6:ae:5c:44:42:10:03:bc:
cd:92:60:11:d4:7c:e2:fa:01:21:1f:26:f4:06:57:
fc:ac:33:d1:aa:47:23:b8:75:88:48:a1:0e:be:be:
c3:46:c9:92:ab:ac:76:a1:4b:2a:02:4e:6a:37:1a:
c3:84:3a:1d:ca:6c:1b:71:41:11:20:81:fe:48:95:
02:a9:19:6d:3d:67:89:c3:25:b3:4b:3d:d2:10:5a:
7d:c7:9c:70:4f:be:cd:dd:ec:bd:ec:06:cc:57:fb:
c9:b5:4e:b8:4e:9f:6a:47:e9:44:d3:b6:c4:c5:cd:
e4:d0:0c:df:ae:3c:fb:ad:ce:40:4a:8e:1d:d0:31:
6e:93:39:37:ac:2e:cf:32:f0:e1:00:5b:b7:5e:2e:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CF:86:9D:62:28:19:69:F2:14:FC:82:53:AA:09:79:A8:A1:48:23
X509v3 Authority Key Identifier:
keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3f:b0:84:bb:21:d9:6b:55:f9:8a:57:f7:a5:94:b3:bb:c1:
62:ef:d3:a5:8b:4d:4e:df:c1:47:6e:29:ea:1a:91:b5:1e:76:
00:3d:e5:9e:cf:aa:59:b6:73:cc:37:2f:d6:ba:c2:19:89:43:
9a:b8:71:00:2d:46:08:56:2c:5a:38:50:3d:e7:96:8d:f7:7c:
65:9f:43:39:e7:bc:99:45:91:82:27:b1:27:0f:37:37:67:8f:
b5:2d:48:57:e8:64:8c:26:1c:ba:fc:d0:17:60:4b:4b:b8:76:
d5:77:c3:a7:b2:cf:d5:02:e3:21:1e:e7:b5:72:79:be:85:0d:
d3:80:7f:56:fb:6b:d9:1b:b5:7d:61:9c:9c:f8:04:2e:3d:79:
5d:ea:bb:db:41:3a:6e:0a:92:96:de:c9:0f:16:a5:70:0b:32:
41:9b:2d:e6:2d:ea:76:79:2b:c2:ac:7b:66:aa:15:59:34:42:
ee:54:7e:df:88:a6:db:f7:5e:f5:15:86:69:ec:49:28:44:b8:
48:f2:81:86:64:78:66:6b:52:20:d6:7d:ef:ae:05:e7:87:0a:
c9:61:15:70:8f:e9:00:ed:0e:c1:6e:11:b8:46:db:e8:25:7c:
ed:b7:22:9f:1f:a0:b6:5a:69:93:c4:90:54:c4:f2:74:64:09:
0d:a1:26:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:04 2025 by rpki-client