Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
File: debiEsY3QbhblXx8l_fFj1teEzU.mft (raw, json)
Hash identifier: bGdeBw6iRs7tPVCt01FtmkiYxjL/TfHZCmMahDr9rnE=
Subject key identifier: 6C:5A:4E:C0:90:4D:F3:0E:AA:60:EC:CE:E1:18:05:D9:4E:A7:F0:12
Authority key identifier: 75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
Certificate issuer: /CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Certificate serial: 019511354534059290E2C7A856C3808024BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 00:00:58 +0000
Manifest this update: Mon 17 Feb 2025 00:00:58 +0000
Manifest next update: Tue 18 Feb 2025 00:00:58 +0000
Files and hashes: 1: bhZ8f0F77iFP_2rwZL2z4iLQgpA.roa (hash: TT4ui96hPVB8JuhJPLD2IoWX5TtqeZQlOzkrZUeBR/0=)
2: debiEsY3QbhblXx8l_fFj1teEzU.crl (hash: DRXwuUsnY5cBdFzkK78gk5LZ6dU+yzUjEgNZ/Zjtc3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:45:34:05:92:90:e2:c7:a8:56:c3:80:80:24:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Validity
Not Before: Feb 17 00:00:58 2025 GMT
Not After : Feb 18 00:00:58 2025 GMT
Subject: CN=6c5a4ec0904df30eaa60eccee11805d94ea7f012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:65:07:02:72:4d:4e:4d:59:2e:65:b0:19:
98:7c:cc:a2:52:6f:e2:4b:8d:cb:11:a0:9e:86:e7:
69:81:5e:db:d8:f1:7f:92:21:5e:bb:01:7c:eb:cd:
5e:0e:52:0c:fc:6e:32:4a:a3:3c:3a:ed:d6:1a:11:
0b:f4:0e:cb:20:8a:27:c8:bc:15:10:8f:cb:97:f5:
77:d6:c7:aa:5a:15:f4:de:5e:84:9a:06:14:65:ea:
e5:bd:2e:dd:57:07:4a:eb:db:a6:8a:70:c3:ed:0b:
9f:ac:b4:b2:18:5a:71:e5:f9:77:3b:d9:5f:a9:de:
7c:ba:4d:06:3c:d2:94:1e:4c:6b:25:d2:4c:26:59:
f8:3d:66:f6:ae:c8:e0:13:ea:8c:8e:93:8b:c3:ff:
0c:1a:20:fe:17:90:ad:5d:6b:eb:6e:0f:fc:bc:34:
d6:75:6b:42:93:96:cf:3b:08:28:cc:0f:d6:a7:2b:
40:1c:c6:66:81:d2:e6:34:d6:ad:cc:1b:50:31:cf:
f4:62:a5:2c:7a:0e:85:bc:de:0c:77:6b:b9:e0:90:
f8:c8:f4:d3:74:80:1f:fc:76:c9:7c:83:65:8a:97:
96:2a:ae:86:99:39:14:e1:8e:22:aa:c3:7c:42:38:
b5:86:f6:34:b6:1b:87:73:29:de:de:73:d7:09:cb:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5A:4E:C0:90:4D:F3:0E:AA:60:EC:CE:E1:18:05:D9:4E:A7:F0:12
X509v3 Authority Key Identifier:
keyid:75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:95:db:1e:1d:4e:48:6c:33:97:5d:a8:f8:c5:93:80:49:63:
6e:b4:cf:f7:76:19:f0:78:7f:ae:22:7e:21:34:e4:65:f9:d9:
65:4d:02:02:84:19:22:34:07:f1:a6:7e:a3:ea:df:99:64:a3:
85:44:2f:23:62:0e:5d:75:a5:a4:42:06:81:55:96:7c:46:49:
d6:46:dc:24:1b:33:1e:a8:c3:73:fb:c1:ba:7d:63:00:f9:47:
a5:dc:79:1a:c3:b0:c5:33:de:6d:d0:37:a5:f6:68:a9:c2:87:
5b:31:ff:cd:2a:3d:93:0c:63:69:08:e9:13:7b:f0:9c:7c:a9:
e4:b3:34:22:95:c0:17:66:3c:a4:d3:d5:ea:a7:84:2d:02:0f:
3c:44:31:a4:71:d2:c4:d2:c1:d7:87:09:68:43:17:d2:ae:98:
19:d4:ae:11:21:83:e1:7c:8e:04:53:b8:9a:8b:3d:18:e2:80:
84:37:80:ee:80:03:92:ba:1b:bc:a3:42:e6:1e:17:e2:f0:53:
e9:ca:82:70:49:2a:84:3f:c2:82:e3:54:c5:3c:8a:21:7f:5f:
c2:ac:6d:fb:e8:72:ff:bc:10:23:69:df:f2:87:eb:f4:a2:7a:
f7:46:2f:a4:1c:e4:aa:35:2a:5f:46:c6:ea:29:a1:52:b5:1d:
96:0c:55:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:19 2025 by rpki-client