Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: zA9qSr8szm+lLwZMues6L4YzKi6Oi7fiivCEDkCitKk=
Subject key identifier: 3D:95:D2:83:98:F4:3D:C4:DC:8E:F5:00:AE:92:E7:A4:50:11:2A:B0
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 0195113530B63E1CAD02F894BAD536C99630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 1460
Signing time: Mon 17 Feb 2025 00:00:53 +0000
Manifest this update: Mon 17 Feb 2025 00:00:53 +0000
Manifest next update: Tue 18 Feb 2025 00:00:53 +0000
Files and hashes: 1: 2SchzzJaAzexW7ZHgOgzy2lmxNs.roa (hash: RiHYijJvu/N31/d02O4Q6+rMxWrRtxzNnGoQBv8G2nQ=)
2: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: uSb1664MolRgS+rWq8l6M9KP3BUzhBb+NmIbnbBwya8=)
3: WlXI-iwoMwDNSzHCK_zDY3koVSA.roa (hash: smiKZ03dyUbxU4U4rGUY4/4dYERRUQa1juzBxJQFPbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:30:b6:3e:1c:ad:02:f8:94:ba:d5:36:c9:96:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Feb 17 00:00:53 2025 GMT
Not After : Feb 18 00:00:53 2025 GMT
Subject: CN=3d95d28398f43dc4dc8ef500ae92e7a450112ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:ef:4d:48:9f:9c:21:66:7e:ef:54:5b:94:
a7:25:74:d8:7f:b4:f7:df:3a:9a:90:ff:f4:3a:a5:
e6:46:f0:fc:ec:a4:02:42:01:ac:fe:06:90:41:18:
53:4e:8d:5e:95:0e:b7:a1:21:fa:f5:44:07:a6:db:
46:39:23:4d:0b:e9:af:0d:f0:00:48:c9:d2:21:1a:
5c:08:ee:70:25:9c:75:69:ee:cd:77:e2:cb:cb:61:
32:b9:19:45:d2:d1:97:67:9d:47:23:b4:f0:73:e7:
1b:ae:9a:2e:5a:a1:05:f1:6a:ac:c5:af:42:22:44:
c2:f4:7e:96:c8:e0:5d:1e:8e:3f:cf:f6:6a:ae:7e:
7f:8e:58:a0:85:db:b6:54:72:57:77:e3:b7:5e:bc:
24:22:fd:a5:f0:0b:f0:cf:79:e8:c4:22:18:c6:f4:
da:c8:ec:31:8b:14:86:b1:43:bb:73:8c:c0:4c:19:
03:41:9c:55:95:4e:fb:16:ca:c7:a8:21:6b:a2:13:
15:05:76:16:36:22:03:62:e9:43:bc:c7:3d:62:a6:
0b:8c:34:6a:1a:b7:ca:e3:e3:c2:24:5f:3c:5b:54:
74:62:d9:a9:52:b4:c0:2d:93:01:fc:b3:37:9f:37:
1e:23:d5:24:d8:ec:f8:2e:86:34:a8:35:2f:0b:69:
8f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:95:D2:83:98:F4:3D:C4:DC:8E:F5:00:AE:92:E7:A4:50:11:2A:B0
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a3:d8:91:0f:f3:ac:da:f7:73:75:db:87:dd:d4:ed:8f:15:
33:d2:70:4c:d1:44:28:48:ab:55:81:60:9d:25:4e:57:f1:46:
1a:e6:e7:ed:85:da:bb:b6:36:e9:ca:63:35:d5:f4:3f:8b:e4:
75:65:14:81:d9:3b:1e:5a:32:ee:09:aa:97:1e:32:ed:b8:e8:
6c:8c:bc:ad:fb:e9:55:e6:c8:23:f6:cd:8e:c5:27:54:ea:59:
0f:f8:2e:f2:9a:4b:c5:fd:db:64:e4:9d:67:ac:af:7c:0c:36:
0f:37:c6:fb:63:c9:82:89:46:65:ef:ea:46:a2:d3:51:83:5c:
56:34:03:c9:f2:d3:ff:75:09:0c:04:44:a0:a1:63:22:8f:96:
91:05:3c:0a:d4:13:55:3c:ff:6e:68:71:08:6f:91:f7:27:db:
9f:aa:13:43:15:0d:fe:b8:7c:44:ce:de:c8:ce:5a:e3:ad:89:
2b:29:27:39:3c:b4:64:a1:a2:18:a6:7a:10:5e:47:d3:16:71:
cd:8d:2a:9b:11:56:e7:5a:c3:88:4f:81:79:4c:6c:37:de:65:
60:31:a0:11:d8:3f:f0:ae:07:e3:04:ce:f3:19:89:43:24:db:
1d:0f:f0:79:07:49:91:28:f0:cd:18:cf:a3:22:31:87:d9:12:
d3:76:b4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:20 2025 by rpki-client