Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json)
Hash identifier: IHfMKJIP79KpdWxTNSPOpy9m4X6sWtjVBjtFfosUQoY=
Subject key identifier: 8B:D5:87:BE:F3:ED:EB:C8:22:D5:F4:A7:09:8A:15:0E:CA:52:9F:64
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 0195127E79CDEBEA48AE3D78C1C332B80E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
Manifest number: 1468
Signing time: Mon 17 Feb 2025 06:00:33 +0000
Manifest this update: Mon 17 Feb 2025 06:00:33 +0000
Manifest next update: Tue 18 Feb 2025 06:00:33 +0000
Files and hashes: 1: 96Q3_tRAllst6ja08qEgDUeoS3s.roa (hash: M/XsnaTMi6H7HudvwSEvRzo4uPxFB65/y7e+qQGzx28=)
2: DDQIJxH2b58VmcYYvk8QaV3dTZs.roa (hash: 0ls+tmpY6MrdlYFsq9WP/IA6QXpmNxNjMV8MGQI0rqA=)
3: aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa (hash: jbRWHdEg7tl7TrOzBobGPeyboOtfV4qfJQlBzdiCP8Y=)
4: mpnmxcezza43gCgHhqavVbc5ErA.roa (hash: jNboZ69/cDqtpmyXSrtnPV/gJ9nvg6c2NlB1yYkw+PA=)
5: oatwYy2j--y4A4dkdi2Ei0TqLKU.roa (hash: beRtQjCncuGRKcclQ2/Ky7ZCUl+J1GdvvwHgNtsiUNI=)
6: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: tF1MrluLaVx/KAOTJYxwQRVgp3HGkexZwmYA0R5pFTc=)
7: sBAxckkYtrfgcrfBR2IV3YAZOPc.roa (hash: lqfygX1WU8rH/a5kZrR2qQOCzsbDovxIUT7C9BuVnZc=)
8: xcdxsrUjEBV7WF24jzMhc8IqKVo.roa (hash: hBVbnIFi48onJ15EyX9//i4bQVarPZB24udvlAZ7VnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:79:cd:eb:ea:48:ae:3d:78:c1:c3:32:b8:0e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Feb 17 06:00:33 2025 GMT
Not After : Feb 18 06:00:33 2025 GMT
Subject: CN=8bd587bef3edebc822d5f4a7098a150eca529f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6b:68:0d:58:54:66:5f:ef:eb:f4:64:96:c5:
40:43:30:f8:98:3f:bf:ce:67:6e:3c:0c:ac:e8:03:
ec:5f:e1:a4:e5:31:32:0c:46:a4:4b:fd:8f:6b:47:
47:00:6f:a2:41:99:23:67:cb:ea:b6:56:dc:78:eb:
ea:f7:68:a8:7b:a5:3d:d9:1c:31:90:f3:5b:8f:55:
51:58:0d:73:73:11:e6:64:e8:e0:2e:47:46:f4:57:
7a:f9:23:a2:88:36:49:eb:74:54:a6:58:03:09:bb:
2a:8a:f5:46:0e:de:e9:14:de:81:1b:4b:9f:33:b0:
9f:f6:23:92:d6:f9:98:56:8e:1f:77:ab:2a:09:30:
26:e3:6f:41:d0:92:7b:62:ae:66:f3:46:ba:a2:bf:
eb:5c:51:90:cc:08:72:c5:68:8a:8b:0d:7c:66:51:
3b:b9:1c:8e:f2:24:11:9e:a6:e3:40:80:e7:fb:e6:
67:57:a8:a7:b6:39:be:d6:dc:f0:85:a0:92:e5:c0:
f3:c1:5d:b1:77:05:86:f6:55:b7:df:6a:96:d1:6d:
73:75:07:10:19:1f:3f:fd:09:a0:37:64:48:91:09:
72:88:aa:d3:6c:e7:86:b5:89:98:1d:05:66:e4:66:
6b:9c:ef:db:86:50:a7:e6:3f:8f:a5:e3:a7:ff:83:
9a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D5:87:BE:F3:ED:EB:C8:22:D5:F4:A7:09:8A:15:0E:CA:52:9F:64
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:09:65:a1:0b:b9:df:0f:e5:9f:93:fd:36:ce:ac:df:42:f7:
be:46:50:bd:29:f9:42:5d:7f:6f:0a:d4:e0:22:c9:a6:35:1b:
b2:18:9f:7d:2e:1e:8c:41:90:24:ea:65:26:f1:93:a4:44:9a:
39:b7:50:35:58:1a:82:be:6d:1f:bd:fe:81:37:6e:bf:9d:d4:
6d:93:33:cf:47:87:3d:ec:32:da:e6:63:da:6c:c6:d4:40:cb:
92:ae:01:b5:8e:41:ca:99:f6:30:be:12:f3:38:bb:aa:4d:9e:
e6:de:8c:42:54:b0:9f:61:b4:8f:1f:71:a6:c1:b4:b3:08:92:
88:da:17:1e:d4:be:c5:d1:08:07:c5:80:0b:80:a7:6f:5e:97:
a5:a3:c1:80:c2:f0:9c:84:d2:26:b3:d2:45:b5:43:8b:b7:0d:
be:87:e0:2b:5b:55:51:c2:7b:43:3d:cf:6b:51:54:10:83:48:
2b:f0:b8:0b:8b:e3:42:60:3b:04:eb:46:2e:7a:ea:02:fe:62:
08:fe:da:a1:96:28:aa:a7:43:54:03:50:03:f8:3f:39:33:d8:
5f:4d:59:e5:11:a0:2c:f7:3b:63:05:ae:cf:27:32:eb:3a:80:
f3:c2:61:38:83:33:a0:a6:4e:70:57:c4:42:be:60:62:41:da:
11:04:19:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:13 2025 by rpki-client