Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier: 40CmtWV+UapAKbfzcPfDWddAtPpkhK+4dVLXQPB1/ak=
Subject key identifier: 79:1D:49:54:84:9C:74:BC:70:E8:FA:AF:97:2A:68:30:B4:2A:20:C0
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial: 0194C46391D4432B42442690237D990AECD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number: 3C
Signing time: Sun 02 Feb 2025 02:00:47 +0000
Manifest this update: Sun 02 Feb 2025 02:00:47 +0000
Manifest next update: Mon 03 Feb 2025 02:00:47 +0000
Files and hashes: 1: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: u5yQvYG44NjjRsiHN48pvxSWNRUQbwDvb3Tjme5Y/dk=)
2: jMIN8b0BVc9eEY8W0xUyZYn9gu0.roa (hash: T+38e+ztuuV+6KtpVMPU6c7/hBQtyKbXl9bJ797XzNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:91:d4:43:2b:42:44:26:90:23:7d:99:0a:ec:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Validity
Not Before: Feb 2 02:00:47 2025 GMT
Not After : Feb 3 02:00:47 2025 GMT
Subject: CN=791d4954849c74bc70e8faaf972a6830b42a20c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:83:53:fe:42:b3:5f:0a:ef:d4:bf:17:d9:
af:7f:3f:f8:87:d7:de:1d:27:57:fc:ea:f0:7b:fe:
d5:90:59:b0:d1:9b:ee:7f:2f:4c:ba:c9:a2:24:ef:
62:d1:e6:53:bc:17:cf:3c:a4:64:bc:db:5b:29:51:
83:17:fb:0b:14:bc:ae:1d:e6:1a:ed:84:63:b8:be:
94:97:f6:ed:72:af:d2:39:76:4b:17:17:10:3d:6f:
f8:d8:98:34:f3:e6:c9:b8:04:15:98:0c:ce:f3:30:
de:0a:d5:8e:f5:a3:a1:e4:5f:e1:25:ef:89:48:5c:
e4:15:86:a4:23:cc:c8:77:12:01:db:8b:74:17:60:
c8:6a:d2:0e:af:42:5b:db:b1:0f:8f:22:f2:5b:81:
1d:20:01:30:64:bb:b2:51:90:5b:fb:d8:23:26:1c:
30:59:a0:b2:af:3c:a4:db:2c:aa:d7:b8:b4:aa:66:
ff:cb:c4:c8:65:5b:fe:2f:1e:63:b3:13:7f:a7:3a:
dd:d3:ec:f8:ae:9d:c6:35:b1:71:53:7a:88:09:58:
07:a5:b9:66:6e:ee:78:a1:a1:8a:e0:e5:10:e9:f2:
7b:0b:05:49:ff:a2:33:fd:9c:66:3f:dd:11:86:0f:
cf:e0:6d:51:ce:f7:81:53:92:a3:bd:ac:78:86:c5:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1D:49:54:84:9C:74:BC:70:E8:FA:AF:97:2A:68:30:B4:2A:20:C0
X509v3 Authority Key Identifier:
keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:67:18:c7:b7:93:3a:6d:c9:ed:c4:ce:9a:34:02:fb:11:fa:
0f:3d:03:29:d0:3b:00:90:f7:b9:12:0b:4d:ff:0f:db:cf:02:
29:62:49:a2:9c:52:79:76:26:6c:73:e4:57:00:44:7a:68:a6:
9e:db:f4:d9:13:67:2d:17:71:2f:1e:e8:dd:c9:39:36:e2:7f:
c6:f0:eb:2d:b2:72:3a:89:d7:64:81:1b:01:8e:74:67:ec:59:
89:de:96:e6:d4:59:5b:01:be:89:00:20:e0:e2:29:3c:86:62:
43:09:ac:cb:d9:5e:b2:8c:f9:e8:22:44:ff:48:ae:2d:d1:a2:
79:20:85:49:90:b8:d3:fc:b8:4c:17:e2:46:b5:4d:4c:d6:06:
16:d7:39:91:b2:9d:87:24:12:34:dc:6d:71:ef:ec:ab:30:4b:
72:5d:0e:f1:93:2f:f8:68:30:28:85:29:69:73:3e:f6:2d:20:
1c:f5:aa:c6:e3:35:55:17:a5:53:5f:21:aa:36:4f:69:57:e8:
dc:29:ea:58:6c:64:2c:e2:36:8f:70:eb:b6:1a:23:b5:f5:45:
3e:f5:a0:6f:27:7e:36:2a:b1:23:96:9f:7c:fc:df:92:80:a0:
75:63:45:3f:63:2c:63:bb:ee:b7:d9:5b:8a:b3:72:ca:60:2d:
b4:85:eb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:24 2025 by rpki-client