Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: JAlAj6Lkhz5ZpePiwatP6ijNmScOmp/34iINMB9uXfw=
Subject key identifier: DC:94:68:48:07:4D:FB:F6:F6:9E:1C:23:56:BA:68:08:28:FF:BB:DF
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 019511D9C4AC08B84E29ED1B70C256A17E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 1467
Signing time: Mon 17 Feb 2025 03:00:39 +0000
Manifest this update: Mon 17 Feb 2025 03:00:39 +0000
Manifest next update: Tue 18 Feb 2025 03:00:39 +0000
Files and hashes: 1: 1-ANTwxkMiMKQB8xGwWXlceOK28w.roa (hash: CGGHdGVU7wSNMOEYT0PFZuvvNwO+aPmiIHIahEg7OsM=)
2: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: Opp6MM+8D/L5RKHVILHnE5biFUkSuZN8vQuzCwNBhvo=)
3: OVvSE0umfCafdF8GBhnUzkw6GgQ.roa (hash: uBO3ZxlAsPptAYBmUB8o0+apZBCG8SM73O12SZ0wtoI=)
4: PB7iIGKrDK97LW2R8MB2s86RYac.roa (hash: WmZvf5hoyroankBIMBpV0PHxkWR9+aExsWVo3nYOgg0=)
5: S7t59LlNCvxgMI7DsGNSR4qMw34.roa (hash: 4sO8Qj6ryDL8EQZQIGGVCpEKJDIwq55BmcA8TSzv0hc=)
6: bPTKlYF7fifjOqSTQNeQoeP_kuk.roa (hash: Ig5CuSUtEUSpLkPiPPlcB0rfKh8VZMxcp4q355338uk=)
7: k2MwpYy3078S260mykYqGyjDM9M.roa (hash: B5YQnM96hhYb/liddrILOeInZbquc/XQMtKwLnspcOk=)
8: tDMe4xxusG4_nRn5fi_c_u7WdKk.roa (hash: mHno5k7JcmFvfoqPEzv0djEKAYVxO3uLY89gsIjau0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:c4:ac:08:b8:4e:29:ed:1b:70:c2:56:a1:7e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Feb 17 03:00:39 2025 GMT
Not After : Feb 18 03:00:39 2025 GMT
Subject: CN=dc946848074dfbf6f69e1c2356ba680828ffbbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:96:5e:6e:9a:23:f8:eb:3b:04:b9:f6:ab:
86:52:e6:ed:12:a7:26:c8:40:ec:3c:85:4f:67:ff:
ce:5f:1a:9b:85:03:2f:46:87:b8:da:60:ed:52:6c:
73:13:03:71:f3:df:84:40:e5:e9:31:dd:10:ff:8f:
96:c1:33:75:28:87:44:78:9b:3f:26:21:f1:32:42:
21:b2:20:a6:31:a5:56:03:32:5b:11:d6:75:65:45:
e4:de:ef:47:78:0a:51:cf:25:50:5f:ce:d8:57:95:
9a:15:e7:37:90:ae:9e:d3:81:db:5e:fd:7d:27:8a:
c8:70:1c:a7:91:ed:f2:46:87:c8:49:df:c6:82:da:
7c:b2:cf:70:d8:30:95:59:0e:36:70:4d:27:5e:01:
16:a6:20:25:86:cb:4e:4a:94:6e:56:50:55:bf:6f:
af:1a:bd:03:9c:28:d8:d8:56:93:f9:cb:30:35:fd:
af:77:cc:db:ea:44:51:7e:d2:d0:a7:6f:23:17:11:
15:b9:eb:e4:0f:4d:90:94:ae:44:51:7b:0a:41:22:
8c:86:b8:25:21:1e:c6:82:33:aa:36:3d:21:71:b8:
8e:19:7f:9f:87:59:a6:48:c5:9b:99:47:20:1f:eb:
2e:19:71:ff:68:fe:fb:a4:ae:28:56:6c:1f:14:f0:
46:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:94:68:48:07:4D:FB:F6:F6:9E:1C:23:56:BA:68:08:28:FF:BB:DF
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9c:b7:8a:26:34:3b:9a:8a:1f:ed:26:ed:ee:0e:cd:1b:b3:
df:0f:b9:c5:84:20:67:2e:e3:fa:0d:a2:f6:56:68:fd:ce:58:
57:7c:56:d6:7c:58:c3:9c:5c:90:45:b3:fd:fb:2f:81:ff:69:
1c:f7:82:f0:da:d8:46:d0:69:44:f1:f1:8e:74:63:83:d8:f7:
fd:22:09:43:d5:cd:85:4f:9b:7c:8b:b7:f4:84:05:ff:eb:0f:
8b:ec:ab:53:03:fc:b7:10:57:6e:72:1a:51:bb:21:33:dd:52:
d4:73:a5:7c:1e:2f:0f:a1:82:de:27:59:50:32:62:ce:57:56:
1b:cf:06:e7:5d:a6:af:cd:85:b3:30:64:a2:b5:0b:0c:eb:35:
aa:71:54:f0:4c:de:1c:e7:6d:b7:d3:66:13:dd:c2:58:7c:9a:
48:53:6d:5b:01:bd:40:b9:d8:ea:31:d2:89:72:d1:4e:8e:ca:
8d:e0:7f:85:3f:d7:82:96:58:3b:83:5a:72:01:d6:5b:d8:d7:
c7:bb:b1:dd:3d:a0:f5:08:0c:65:6a:b7:2c:b8:ed:46:4f:44:
45:b4:15:c7:02:cf:0b:f6:e3:02:2a:a5:12:51:88:c4:a7:ea:
3d:58:ab:38:b1:ab:50:86:9a:59:5c:dd:37:06:ad:cf:6b:26:
b8:ed:ef:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:17 2025 by rpki-client