Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
File: fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json)
Hash identifier: dijpkvj6cH7Z96tgL3Qar6CLJ/wMsbAECbXS9osJofk=
Subject key identifier: 9D:C0:1A:62:67:4C:F4:EB:F3:EE:54:92:C8:8E:24:F7:71:0D:92:C5
Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Certificate serial: 0194C350A4DED6C5F8F2F47510B995D82CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
Manifest number: 0B
Signing time: Sat 01 Feb 2025 21:00:29 +0000
Manifest this update: Sat 01 Feb 2025 21:00:29 +0000
Manifest next update: Sun 02 Feb 2025 21:00:29 +0000
Files and hashes: 1: KHa9mVj-WNELt7pSCK9ooFTGrNA.roa (hash: UqMuiUZn2GrnQQZzSZEJPEZOfxeCUD81uoCK7byK2Vc=)
2: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: FmeQQB3h67+xW148yog2qwAr66w+/JGnxnaxE+UuIbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:a4:de:d6:c5:f8:f2:f4:75:10:b9:95:d8:2c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Validity
Not Before: Feb 1 21:00:29 2025 GMT
Not After : Feb 2 21:00:29 2025 GMT
Subject: CN=9dc01a62674cf4ebf3ee5492c88e24f7710d92c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:f7:1a:9a:ed:ed:cd:b8:b9:9f:58:cf:a0:
ef:fa:b2:75:f2:05:eb:70:80:85:c8:c2:4b:30:f9:
69:ae:bd:b8:6f:e2:f5:8a:4a:23:f8:3d:f7:8d:16:
38:7f:92:db:a3:d0:84:54:25:a1:e1:19:14:7d:b5:
2a:2a:f1:0d:a0:3a:c0:cd:85:cf:7e:92:c6:98:99:
7a:86:86:d1:3a:e0:cf:50:02:d2:82:67:53:03:ac:
19:08:0e:a6:40:a9:f0:4b:97:ce:81:36:68:aa:80:
4f:38:8d:d1:a0:bc:33:f8:42:db:85:7c:ae:df:eb:
df:b5:ef:df:86:f1:d1:d2:62:96:79:dd:a6:62:7f:
bf:c1:34:74:de:90:44:55:3c:79:26:4b:12:16:8c:
a8:e3:d9:96:36:63:8e:12:46:3c:ef:4a:2d:36:c3:
8b:44:04:04:8f:d6:0a:a3:20:b2:2c:05:b2:de:64:
01:d4:25:d4:19:6a:78:46:12:70:80:11:86:59:eb:
42:2c:4c:d0:2c:03:de:aa:a3:a5:f2:e9:09:2f:56:
8e:da:fa:52:f7:dc:a3:c0:e2:95:8b:21:35:c4:a3:
12:0e:c4:49:df:b8:27:09:4a:3a:ae:27:f3:c1:81:
a9:04:b2:63:85:3a:0e:a4:40:0d:0b:cb:c6:54:7d:
43:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C0:1A:62:67:4C:F4:EB:F3:EE:54:92:C8:8E:24:F7:71:0D:92:C5
X509v3 Authority Key Identifier:
keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0b:bb:43:da:4c:ae:d9:fa:c0:81:85:38:81:73:67:51:6e:
c8:21:9f:c7:7f:58:63:0a:03:6d:f2:dc:dd:4c:30:10:fb:ce:
1d:2b:2a:70:9d:05:0f:cb:db:7a:04:93:e3:40:16:94:9b:6d:
08:ab:95:f6:71:1c:70:2a:a1:27:e3:8e:c0:5d:4c:21:6b:36:
ef:67:ff:9c:35:02:35:35:43:06:2b:36:07:b6:5c:48:bd:e0:
ff:6c:ed:72:3a:5e:3c:e1:82:52:f2:3a:7e:46:d3:82:29:08:
1d:88:e0:90:06:3a:16:cc:33:fe:6f:3f:4e:07:1f:62:91:ce:
eb:61:0d:bb:f4:42:c3:69:99:68:5a:d1:8a:bd:e8:e5:f8:8e:
07:7b:47:b1:fe:97:0e:b5:27:d1:24:ed:af:0b:fc:97:5d:ab:
09:e9:20:e1:08:49:3b:1a:e3:3c:02:58:e8:e2:e5:90:21:86:
a8:af:a8:10:e1:84:15:9d:94:6b:66:c8:13:51:b2:56:33:39:
f8:1e:bc:49:b9:bf:05:3b:2b:73:7b:0f:98:6e:66:b8:62:e9:
ed:60:80:d5:61:d5:74:9d:fe:c4:d2:da:52:5b:78:df:64:4a:
dd:22:6b:7a:14:24:19:6e:8d:9e:6b:13:f2:c1:cb:f5:d2:ea:
4e:42:ac:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:43:10 2025 by rpki-client