Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File: 7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier: X4JQ0v9No13tjFlwG9IfSjrH/ejUDv54YPKV9jldnnk=
Subject key identifier: 1C:1B:22:4E:79:05:06:4F:02:39:5B:05:35:81:C9:DA:3B:E8:EF:E1
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial: 0195108FE4B8FCDB1F0754E24E890478D2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number: 1458
Signing time: Sun 16 Feb 2025 21:00:20 +0000
Manifest this update: Sun 16 Feb 2025 21:00:20 +0000
Manifest next update: Mon 17 Feb 2025 21:00:20 +0000
Files and hashes: 1: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: HUkEPWyTCL5UlcjEg2r2Ro1D3SvzVxPC8qE9XssImSc=)
2: ISP0TJJTh3tprVicVW974-nq9rI.roa (hash: pUMX+/MC+BS6vpOzP0rNo03/k6W3G+9Ru/0k0Am9kHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:e4:b8:fc:db:1f:07:54:e2:4e:89:04:78:d2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Validity
Not Before: Feb 16 21:00:20 2025 GMT
Not After : Feb 17 21:00:20 2025 GMT
Subject: CN=1c1b224e7905064f02395b053581c9da3be8efe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:70:49:25:77:36:7c:40:99:8c:f3:2d:6e:
2b:3b:cd:e5:ce:da:be:d7:36:5d:50:eb:4f:e1:6e:
7a:fc:a2:08:a7:eb:78:96:d4:f9:43:e5:15:64:0d:
85:03:3e:86:f0:a6:7e:26:81:33:5e:37:fd:8d:0d:
e6:d2:05:86:2a:56:c1:88:d5:b5:5f:40:80:01:ad:
e6:50:bd:12:ec:d3:64:51:9e:12:ba:e4:fc:2b:33:
b7:cd:70:06:5e:11:8d:9c:37:b2:db:28:c1:8c:15:
43:ce:67:2a:9a:3f:80:c5:33:11:3f:de:30:b2:65:
af:74:62:c2:42:ce:6d:c8:3d:52:ca:5a:ae:e8:58:
d0:00:93:c5:0c:8f:f5:6a:2c:e2:b6:43:e1:03:d2:
83:e4:8e:24:2f:7b:1f:27:43:3e:1c:3e:65:91:44:
dd:d7:fd:58:93:2d:eb:94:52:92:73:e4:c5:df:4f:
ec:54:d5:4b:69:85:5f:6a:7d:b9:39:23:93:ef:7c:
fb:3a:45:b1:10:13:94:24:9f:80:02:74:0a:69:11:
ca:c8:b5:bc:78:cf:22:07:09:2d:44:e8:71:8a:66:
5b:24:cb:7c:51:17:8d:2c:25:41:0d:1d:7f:5e:af:
c9:00:e2:58:45:31:31:f3:36:eb:88:af:35:c4:82:
aa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1B:22:4E:79:05:06:4F:02:39:5B:05:35:81:C9:DA:3B:E8:EF:E1
X509v3 Authority Key Identifier:
keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b3:dc:fa:25:ba:7e:01:c6:5a:9b:32:63:16:96:b9:e2:46:
d0:3e:23:7f:a7:65:a2:c8:c6:85:88:f3:82:40:b5:64:9b:0c:
ec:6c:67:ab:e8:d8:a7:56:b9:7f:64:ea:05:00:8b:c6:23:ab:
13:29:54:82:7b:55:bc:0d:c4:04:cf:f4:8e:6d:51:19:1d:12:
6c:40:f8:9f:d1:3f:a7:e2:44:7c:2b:f8:ed:c4:ac:ce:3e:e3:
5d:30:68:d2:9f:4f:71:74:b3:bd:8e:7d:02:b7:53:03:8b:04:
38:f6:75:31:5a:b8:d9:b9:17:24:75:19:18:56:12:99:a4:85:
e7:94:5e:df:82:f5:4c:04:f6:da:15:f1:08:4d:9e:10:35:9e:
a1:b3:20:c4:1c:b0:5d:98:c0:fc:28:e8:65:a4:11:b1:0d:a9:
f4:db:97:da:7a:ad:fd:38:7c:3d:25:4d:c0:3b:dd:d6:b8:e0:
b8:cb:a6:d5:9f:f8:b1:2f:e7:89:d6:df:c0:f4:90:83:9e:7e:
b2:da:34:29:d6:33:74:b3:b1:ec:44:06:c9:c9:11:01:ed:9d:
7d:10:22:bc:97:58:84:8b:fe:ab:03:64:b0:6a:82:a8:01:0f:
a7:77:16:c5:f5:f1:45:11:41:40:2e:78:66:a0:3f:0b:48:32:
fe:06:fa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:44 2025 by rpki-client