Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: 8KdX+DeGzo+0nHlBNE0F9XYd1wW5hSg5yg3WoQBQlqs=
Subject key identifier: D2:0D:8A:C8:F4:4E:12:F0:0E:94:31:3E:41:A5:D5:E7:8A:3D:CC:96
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 019510FDDF70752F75C62A0359D8DEA1EE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 1458
Signing time: Sun 16 Feb 2025 23:00:27 +0000
Manifest this update: Sun 16 Feb 2025 23:00:27 +0000
Manifest next update: Mon 17 Feb 2025 23:00:27 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: DO3V5VNykI12yZ5VfnE4MeusDMow9zcKddFLGFVHBXU=)
2: YVQzd6PcqiODUsbYmUonrXOMiW8.roa (hash: UXmPQNw2cgJnJveX2kfmMJ+ICGqK1YqsczZUPC4FYUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:df:70:75:2f:75:c6:2a:03:59:d8:de:a1:ee:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Feb 16 23:00:27 2025 GMT
Not After : Feb 17 23:00:27 2025 GMT
Subject: CN=d20d8ac8f44e12f00e94313e41a5d5e78a3dcc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:88:f7:cd:12:c8:ee:48:99:ab:cf:b1:14:
dc:3c:73:bb:a9:0a:4c:d9:8e:4a:a3:ee:9f:4e:cf:
40:50:d5:dc:39:89:54:88:6a:66:92:1a:e1:13:eb:
22:b8:45:f8:35:9b:97:0c:96:06:34:2e:1d:ba:91:
d6:df:ce:f3:15:da:ad:58:1f:14:62:08:47:38:bc:
89:88:da:17:14:53:28:ba:f3:35:8b:53:93:22:a5:
6e:85:58:f1:4c:9f:31:01:9e:48:36:f1:ad:cb:05:
0e:2f:64:e7:8b:ea:72:34:6a:2f:c5:64:3e:d5:42:
7a:65:24:14:14:67:c0:66:56:cd:8e:ae:3e:69:2a:
af:62:5e:84:63:ee:fc:48:35:6a:b0:90:5b:49:dc:
7e:76:4d:3a:a2:41:ea:cf:d8:6c:62:39:ea:cc:5d:
c2:7c:6d:92:9d:91:70:c3:12:b6:1a:7f:38:f8:cf:
43:21:72:6e:f0:54:39:a0:c5:3e:9b:2a:b2:87:a4:
de:37:16:d5:44:db:c6:93:fd:34:f5:4d:dc:02:0d:
16:4f:1e:fc:2c:ee:c8:58:18:aa:da:a0:a2:80:4b:
fb:c2:14:f7:a2:62:89:80:10:07:21:6d:33:6b:d9:
98:5e:e1:59:92:27:7f:c8:85:cf:17:47:f5:5b:97:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0D:8A:C8:F4:4E:12:F0:0E:94:31:3E:41:A5:D5:E7:8A:3D:CC:96
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d0:26:74:b9:ef:df:8a:51:b2:d6:b0:19:2b:ac:85:93:a1:
fb:fc:f9:a1:76:f0:55:d7:ac:3a:de:41:c3:c3:0d:de:fb:e4:
19:01:dc:93:d8:43:cc:73:32:78:51:3c:6a:d4:78:e8:a2:37:
6c:84:da:f0:1d:29:c4:57:16:c3:52:5d:73:ad:db:8b:cc:ae:
ad:b6:75:2b:0f:af:00:4f:ff:3b:a2:3c:fb:40:7d:1e:b4:66:
d2:01:06:33:16:27:e2:07:4e:b4:d0:d9:77:94:17:3b:b5:30:
db:66:aa:f1:67:ee:58:da:74:4e:b4:63:59:73:ff:f7:a1:d1:
0d:1e:35:08:22:ce:e0:ff:51:45:8d:b4:ba:b9:c2:f1:1b:da:
bc:92:f4:b6:cf:51:13:94:a6:68:21:72:04:75:96:60:f9:d3:
70:48:9d:7f:b2:89:a2:21:22:36:0f:ba:fa:1a:a8:02:b7:f0:
29:bc:e0:2b:79:00:d3:60:a4:7c:b8:14:d8:86:f4:c3:53:64:
35:c8:cc:98:4f:c3:d6:a0:db:b3:bb:3a:fd:3c:77:e1:e1:30:
44:2b:fd:a7:20:57:ac:21:ff:23:fb:bb:12:46:7d:c7:ef:d6:
47:92:7c:cb:d5:54:b8:8c:5d:ef:57:70:6d:d0:73:28:95:12:
9c:84:24:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:41 2025 by rpki-client