Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
File: MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft (raw, json)
Hash identifier: x9mPRpPIm5q5p7WJhxr63CnyAE7ZkfSGsdvSRcVlgrQ=
Subject key identifier: EB:33:54:7C:91:20:4E:C4:1E:53:77:5B:36:3C:E9:AF:15:B2:5C:02
Authority key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
Certificate issuer: /CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Certificate serial: 019511A2CE0FFD0A4F7977FE838505349007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 02:00:37 +0000
Manifest this update: Mon 17 Feb 2025 02:00:37 +0000
Manifest next update: Tue 18 Feb 2025 02:00:37 +0000
Files and hashes: 1: MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl (hash: /37csG1ZebbiDzrumHrFLpKV7FbEOOUHLfI6P6XEMHg=)
2: obw4nOA7tbdHTmeG8UDdlnqVl2Y.roa (hash: irTwgjfFzy8NnkY/EBFl3pB1GcEZSVUg+iwZc/3vTSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:ce:0f:fd:0a:4f:79:77:fe:83:85:05:34:90:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Validity
Not Before: Feb 17 02:00:37 2025 GMT
Not After : Feb 18 02:00:37 2025 GMT
Subject: CN=eb33547c91204ec41e53775b363ce9af15b25c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:ef:46:99:89:5e:54:a5:90:c5:6d:3d:f2:
a9:db:82:6f:7c:ee:04:e8:e7:0d:f8:22:26:55:03:
39:99:a9:07:8a:09:64:4e:3c:bd:32:1b:60:d7:84:
4b:ae:f8:39:16:2f:68:96:7c:a9:ad:69:c8:3c:3c:
45:68:b8:1f:ed:16:0a:91:27:4f:9e:61:7c:bd:4c:
86:e8:70:b9:b2:22:02:08:84:3e:d2:69:68:63:2a:
82:d4:d0:c0:cb:e7:39:d3:cf:4a:9e:10:c6:94:03:
a0:f9:12:61:b4:e2:89:3d:b7:da:e7:8c:05:aa:8c:
24:80:7b:7c:aa:a6:aa:3a:f5:36:3f:9f:ee:ef:8c:
78:87:10:e4:f4:38:00:26:69:9a:be:9f:50:51:50:
5d:8d:f0:4c:2c:8d:98:5c:9e:40:5e:b7:8c:a8:94:
68:dd:e2:9a:cf:63:5b:70:0f:3f:20:a8:f8:d5:5d:
71:59:1e:a4:e9:65:76:7b:d6:06:91:9f:4d:67:eb:
3f:9f:2f:62:3b:20:31:cd:36:e0:74:01:e1:f0:42:
f9:8d:4b:be:b6:84:e6:de:15:04:cc:ae:c0:ec:21:
d5:76:1b:3d:c1:2f:5e:eb:cc:23:22:cc:69:de:09:
3a:79:5f:40:11:e6:6a:3e:de:0f:60:1f:ce:4b:57:
9d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:33:54:7C:91:20:4E:C4:1E:53:77:5B:36:3C:E9:AF:15:B2:5C:02
X509v3 Authority Key Identifier:
keyid:31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f5:7f:62:b0:fd:20:14:6f:11:7d:e8:4d:69:32:a2:0f:55:
ce:fa:35:10:c6:d8:9a:92:64:58:a8:52:7b:c4:aa:b7:e9:38:
00:48:60:db:47:c8:45:c5:fc:63:35:f0:2f:e2:6e:86:1c:78:
80:45:01:a4:1a:70:bf:53:3b:82:57:25:d5:88:f2:c3:72:da:
27:5b:37:16:a9:a1:a0:11:8f:39:7f:94:0d:f9:2d:51:83:4a:
58:45:a5:e4:20:e9:30:37:d7:3c:10:6d:77:02:db:00:30:19:
ed:ed:e6:9a:ca:0c:80:63:1a:92:78:54:ec:68:f3:48:c8:5c:
9d:6a:67:75:31:38:ef:17:90:80:70:18:8e:9d:a1:04:ce:7a:
a3:9f:33:4c:27:ab:40:27:d9:0d:1c:db:1e:d1:c3:d3:ab:f6:
d5:41:11:eb:29:5a:5d:73:eb:b3:87:4a:ce:1b:50:31:6e:63:
3a:c0:c4:5b:ff:c9:36:93:70:d4:28:ae:e8:ea:e0:ab:9d:22:
46:c3:a1:19:e7:60:91:94:d5:01:ac:7b:2d:d7:16:b9:d5:4b:
28:2a:cc:97:3c:20:05:db:77:c2:fc:ce:ae:31:21:26:77:88:
d6:df:5f:2d:ca:e9:02:9c:17:c7:67:f1:45:07:fd:74:bc:2b:
aa:80:30:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:33 2025 by rpki-client