Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
File: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft (raw, json)
Hash identifier: gW5ww5VfDAwAKeCkqaRCgASRnRj8dbal5QenyYzE/YQ=
Subject key identifier: D9:51:EB:97:36:F4:BA:A5:17:96:1A:D6:E2:01:8C:35:DE:7C:54:E2
Authority key identifier: DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
Certificate issuer: /CN=dd189621d2fa872166e6a05ee47a7d756243e919
Certificate serial: 019510C702BB2373F681918E601C4B0ACE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
Manifest number: 1455
Signing time: Sun 16 Feb 2025 22:00:32 +0000
Manifest this update: Sun 16 Feb 2025 22:00:32 +0000
Manifest next update: Mon 17 Feb 2025 22:00:32 +0000
Files and hashes: 1: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl (hash: A1VJ2qTr3GdfD1zStB4SKLCptKKnMdnwS7HntZBUk6E=)
2: QrmnbjgSygFDWHsO09VpW_iZC0c.roa (hash: VHw1+Cgx8Es+YaWERxb3+M1gB2Ndwqk8aRAjsalZIcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:02:bb:23:73:f6:81:91:8e:60:1c:4b:0a:ce:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd189621d2fa872166e6a05ee47a7d756243e919
Validity
Not Before: Feb 16 22:00:32 2025 GMT
Not After : Feb 17 22:00:32 2025 GMT
Subject: CN=d951eb9736f4baa517961ad6e2018c35de7c54e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fb:d6:d7:c6:14:1f:cf:72:42:c7:87:83:c5:
74:b4:3d:92:d0:ea:f0:75:e9:b3:92:e7:b9:d5:88:
a9:41:88:5e:71:20:89:18:60:2b:09:63:4c:ad:2e:
41:82:89:c5:cf:b8:e3:48:24:43:2a:8a:0e:43:e9:
17:a1:a9:a5:81:2a:d4:de:4d:91:f0:e3:40:53:38:
c6:01:73:be:75:1f:36:cc:51:87:a9:44:86:82:95:
e0:ca:1f:f5:67:ac:97:67:39:a7:8d:2c:e1:82:36:
6b:93:08:68:f2:01:41:fe:a4:d4:b5:94:57:f1:a4:
3e:32:f8:d8:14:aa:d7:e5:51:49:9b:77:b6:96:e2:
d6:18:24:39:51:0b:6e:bc:de:09:2d:3e:f3:2a:67:
c6:c1:68:09:c4:b7:2a:7a:22:d0:c9:b4:01:32:0f:
3c:54:79:20:84:8e:85:2e:ee:a7:30:df:f2:5c:e0:
d8:a1:ce:e3:de:ef:31:b7:45:56:f4:ff:0b:54:a2:
97:03:5e:52:7f:40:21:53:2e:ec:3b:0c:55:3a:05:
79:0c:57:23:8f:a0:c2:bc:7e:7d:d0:07:c5:98:0b:
51:ac:1a:dd:f9:eb:e8:89:dd:06:6b:d7:07:0d:e0:
fe:4c:66:df:73:84:4e:fa:00:48:90:6f:a0:fa:11:
2e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:51:EB:97:36:F4:BA:A5:17:96:1A:D6:E2:01:8C:35:DE:7C:54:E2
X509v3 Authority Key Identifier:
keyid:DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1f:4b:2b:f3:ac:eb:13:3b:c6:21:62:c2:0a:48:b8:ab:a3:
01:0d:05:77:3f:a6:d8:99:40:ba:3f:a3:c5:ee:f9:a7:64:68:
5b:d0:b8:fb:de:1d:d7:3a:9c:97:b6:b4:f5:66:02:5e:63:69:
c5:24:35:d7:6d:ef:06:64:16:e0:2d:2e:bf:ee:fe:e4:91:0c:
e3:76:79:6b:93:23:f5:70:ed:67:b2:d6:c8:14:4e:28:34:83:
e5:28:4d:05:13:f5:0e:c8:9b:b8:72:94:1d:6a:04:bf:f6:05:
d6:d0:1d:93:fa:34:48:fe:78:da:a5:5b:c1:b3:90:ca:15:4f:
cd:35:04:79:5d:b3:9f:d5:76:00:c8:89:b4:fb:8e:2c:61:a5:
7d:f8:65:b8:4f:92:3e:0c:df:f5:1c:cb:71:01:9b:f3:ab:94:
a4:8c:3a:fc:4b:3b:80:f8:6c:02:53:93:7d:d5:72:79:22:a9:
41:34:94:08:bf:15:a6:6c:f6:6e:24:b1:7d:82:31:0f:e3:02:
4c:23:d8:1e:26:0b:69:39:8f:fd:27:1e:b4:af:b0:ff:67:90:
c2:ca:66:62:c1:e0:99:a9:10:16:52:fc:d7:6c:7e:5e:d0:08:
42:55:73:23:93:36:eb:62:a2:5b:e6:9f:f9:f6:92:48:99:b1:
34:f4:ac:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:19 2025 by rpki-client