Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: wnueCZseyu1VVFX+tickXlab9NFw5UYYsX6I0pBH3Ec=
Subject key identifier: 78:B5:1F:87:BD:23:C5:08:0B:D2:84:C5:8D:CC:A4:11:4A:4E:DB:52
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 0195108FAD3ED9D9DA044A71C38685D5D3B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 21:00:06 +0000
Manifest this update: Sun 16 Feb 2025 21:00:06 +0000
Manifest next update: Mon 17 Feb 2025 21:00:06 +0000
Files and hashes: 1: e5DeESZZoV9ugwD2DDetvmmqaNQ.roa (hash: oBItgFG7VmwghbXnqb4YDSc7wHHSkFpawBFKEQ4ggoU=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: Aa+AEA/k3lRn60OD/v9lo3L+ZLxpjlkCuou4B5iaDb0=)
3: pusRxy9QftUa2YYJz6wip986r9U.roa (hash: RNMs7mYaUX06i+bmjYIm1r/crAvFi8r8tzeB1u4p4Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:ad:3e:d9:d9:da:04:4a:71:c3:86:85:d5:d3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Feb 16 21:00:06 2025 GMT
Not After : Feb 17 21:00:06 2025 GMT
Subject: CN=78b51f87bd23c5080bd284c58dcca4114a4edb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:9c:46:91:3f:41:24:7f:6e:53:47:48:6f:
0b:0b:ed:0a:1c:7f:b5:23:6f:01:cc:dc:06:06:82:
c6:8f:ef:c8:8b:9e:7c:18:ea:6c:d2:a4:f5:a0:65:
b1:7c:8a:93:ad:54:58:47:84:a2:96:a5:22:39:15:
be:6c:79:95:39:33:4f:f8:cb:9f:bd:7e:b3:4c:95:
b6:56:1d:65:a3:7e:d3:d3:b8:a6:7e:a9:64:60:a5:
cb:8d:a7:cb:7a:d2:02:d8:b5:73:db:e4:3b:48:f3:
51:cf:f7:97:b6:7d:58:e8:eb:a0:44:4f:b7:33:df:
12:6c:b8:96:31:34:1d:7a:e1:0b:7a:52:58:06:df:
83:49:97:27:10:b8:8f:07:4b:ee:9b:ff:f2:a1:40:
4b:08:d1:77:86:cb:ec:97:a7:ba:df:f4:19:41:bf:
4a:63:c1:ff:f8:68:6b:a7:89:73:16:ba:66:fb:cd:
88:22:ec:e3:38:2f:28:b6:ad:c4:e1:cd:13:59:b5:
48:b1:30:1c:01:58:d9:24:2e:fa:7d:03:d7:9c:fb:
23:f6:14:c6:e0:4c:6e:0a:d1:d2:19:b5:6c:de:9a:
57:3b:e0:8f:36:c7:2e:93:f2:47:7e:d2:38:39:82:
b2:4e:05:d0:97:5d:a7:24:58:7a:8d:4d:f3:88:c9:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B5:1F:87:BD:23:C5:08:0B:D2:84:C5:8D:CC:A4:11:4A:4E:DB:52
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fd:29:f0:6e:6c:a8:da:e9:6e:35:15:0d:d6:3f:76:f5:49:
50:64:ec:80:5c:1a:38:9e:45:9e:16:c8:a5:19:e6:fd:83:69:
9a:71:24:57:13:3c:d7:78:62:8d:45:30:73:3e:fb:5b:4f:49:
98:56:4b:8a:c0:9c:e3:36:91:b6:d1:6d:fe:09:74:45:9f:84:
0f:03:42:80:c7:4a:aa:3d:f2:95:37:d3:d0:08:f8:ba:94:58:
1a:a9:84:6c:71:4f:63:3b:d6:36:de:8f:c4:c5:37:30:08:c5:
91:f0:9e:39:11:27:98:3d:a2:27:fe:b1:f2:27:aa:f0:61:b6:
34:19:36:f7:a1:f2:94:dc:3c:85:ef:dd:5a:56:a1:b2:d5:c8:
5c:54:58:bf:a1:76:8e:22:49:3d:7e:44:11:a8:a6:8d:ae:dc:
9b:29:a4:1e:7c:c6:84:7e:87:fc:08:71:b2:58:32:2a:ab:21:
62:2c:f4:1f:9f:b6:7c:de:90:e9:46:85:2f:d8:dc:f4:a4:5d:
9d:22:58:9c:e2:09:86:07:0e:a2:f3:56:eb:f7:6f:95:dc:b9:
6e:a2:19:a0:91:61:c4:9c:08:c4:3f:be:de:47:19:b4:45:a3:
c3:3f:3e:ad:ef:f2:4b:ca:01:cc:45:4e:bc:15:dd:f2:54:b0:
6e:94:46:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:00 2025 by rpki-client