Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
File: _1ipjbd3y5FspWOX7D2HyYY2cxA.mft (raw, json)
Hash identifier: z/pxjiQBUCUkCTK+4BVMi0axtwB/XQhyXvUF+idf0I4=
Subject key identifier: 01:A2:9C:E9:D1:53:6C:03:EA:A2:BA:77:6B:D6:39:E1:7F:65:F8:BB
Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
Certificate issuer: /CN=ff58a98db777cb916ca56397ec3d87c986367310
Certificate serial: 0194C3BE87EF5A3680CF1879FA401B7E3E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
Manifest number: 01B4
Signing time: Sat 01 Feb 2025 23:00:31 +0000
Manifest this update: Sat 01 Feb 2025 23:00:31 +0000
Manifest next update: Sun 02 Feb 2025 23:00:31 +0000
Files and hashes: 1: VM8iNIPAK1gceHYBC6UTJ0oubJk.roa (hash: mqZXcR34R810uEv+4/cBz9V4eZISHr2d9EqXL39avwo=)
2: _1ipjbd3y5FspWOX7D2HyYY2cxA.crl (hash: rLT0W1qgllyTLykL8FwJ7/bKHMhOqbnJHcM7Fyo5TiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:87:ef:5a:36:80:cf:18:79:fa:40:1b:7e:3e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310
Validity
Not Before: Feb 1 23:00:31 2025 GMT
Not After : Feb 2 23:00:31 2025 GMT
Subject: CN=01a29ce9d1536c03eaa2ba776bd639e17f65f8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:5c:37:3c:6e:1d:cd:46:f3:86:b9:40:2b:
73:b2:0b:1b:c1:52:19:01:f0:90:a8:76:69:91:38:
ed:79:73:1b:3b:2e:e0:19:36:eb:f8:f4:f1:4d:9a:
2f:a9:ef:94:8a:73:02:01:f3:12:2f:17:27:b1:f3:
0b:5e:82:26:df:a4:90:62:99:0a:45:8c:cf:af:18:
42:b5:ef:46:0f:36:f3:ac:97:f2:9d:30:88:42:a8:
fb:95:2f:06:21:61:f2:b9:d1:1f:66:a3:b4:40:a5:
de:09:6f:f3:53:d0:4e:c3:43:77:67:cb:84:03:e9:
85:c9:2d:f5:07:7d:e0:a3:f2:2d:1b:c4:6c:17:f5:
fa:e5:5f:d3:13:d2:7f:56:b8:c2:82:36:d4:bf:6e:
0f:87:94:e5:7a:78:58:a4:a2:19:91:71:dc:f4:80:
e0:c6:01:ab:15:56:4b:ec:52:78:56:43:71:63:95:
1a:32:83:7e:74:7f:1f:8c:6a:50:64:25:eb:b6:bf:
7c:fe:e6:f5:b9:9a:cc:31:28:7d:6d:9e:01:2c:f7:
cf:03:e6:54:20:e1:47:18:a4:c5:4d:0d:30:6e:e2:
45:00:b2:38:3d:98:b6:f7:16:9b:d7:a8:86:4d:0b:
fc:e6:a8:f9:c4:d5:12:1b:45:ea:fb:13:a1:e6:0c:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A2:9C:E9:D1:53:6C:03:EA:A2:BA:77:6B:D6:39:E1:7F:65:F8:BB
X509v3 Authority Key Identifier:
keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f5:a4:db:3c:0f:06:7c:b7:cd:3a:1b:41:c3:55:54:49:7b:
3c:87:39:6e:53:04:62:2a:2b:8a:8a:48:c8:ef:cc:bf:a1:94:
15:ce:ba:34:ef:bd:24:06:db:d6:56:b4:45:cd:0c:f6:07:a3:
ba:dd:3e:e9:19:1e:aa:f7:c1:1b:d7:96:5b:b6:cd:43:b9:dd:
f2:96:ab:3c:3d:6e:15:8d:cf:3c:b2:ac:7f:b7:63:ea:9f:1b:
2d:e0:75:14:f1:63:2a:9e:d9:bf:f8:25:97:d6:a3:fd:ef:97:
e4:d8:59:3f:5f:12:10:6d:7d:2e:fb:74:56:a1:48:b1:72:43:
55:ab:b5:f7:46:17:ee:4b:70:1e:12:8f:ae:5d:58:fa:a5:6d:
15:79:75:4c:f6:b2:94:83:95:26:7b:c3:46:40:1e:21:8a:e7:
ab:a9:dc:f1:15:76:ff:63:10:26:13:f2:89:9f:09:57:e5:cf:
5e:b1:a3:cb:66:59:1d:f0:c7:03:b3:c3:cb:fd:f2:88:eb:0e:
19:e7:e1:a1:eb:0e:9b:04:24:5c:66:71:e5:be:bd:64:f0:a6:
28:d5:15:50:c7:36:bc:b5:7f:f1:ae:7f:d6:28:a3:ba:4f:fd:
00:6c:0d:54:21:4c:77:b0:dd:09:7a:78:49:c2:64:1d:85:38:
45:f0:b0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:43:42 2025 by rpki-client