Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
File: RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft (raw, json)
Hash identifier: esN3m/hF4sW2Fah8QOyvcSOGI20mYsArkQeOFOZ37C0=
Subject key identifier: 02:61:3C:68:B6:EF:9E:36:7C:B0:34:FA:20:AD:FF:7E:FA:49:C9:19
Authority key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Certificate issuer: /CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Certificate serial: 01958BF26C4298BAB478992A684C1DA8625D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
Manifest number: 11A5
Signing time: Wed 12 Mar 2025 20:01:15 +0000
Manifest this update: Wed 12 Mar 2025 20:01:15 +0000
Manifest next update: Thu 13 Mar 2025 20:01:15 +0000
Files and hashes: 1: 7IOpXXsSdgZOXKMUMqGRoYqSO7Y.roa (hash: eWhYbG4w7zhq0NpzbdSAGZQzXbPmck0Kggk9IJsP8fM=)
2: 8McigDSjzbaDusYUdfACWlAEraE.roa (hash: 8SiJAwZ4dMuVXUj8DbNfpd2t9t4+7zlehuNbJBAbbw4=)
3: RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl (hash: 5c2AIwUBlblHVMQz0whHciG1g/tIwcfGgZWL0a+TAHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:6c:42:98:ba:b4:78:99:2a:68:4c:1d:a8:62:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Validity
Not Before: Mar 12 20:01:15 2025 GMT
Not After : Mar 13 20:01:15 2025 GMT
Subject: CN=02613c68b6ef9e367cb034fa20adff7efa49c919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:e4:c0:13:2b:14:35:18:3f:c3:26:0c:fc:
f9:f7:94:52:51:b9:83:1a:20:1c:be:f3:c8:26:f0:
db:93:17:35:7c:6b:b9:a1:32:6d:18:74:58:84:41:
00:6e:18:3c:d4:59:4c:8b:49:d7:9e:e1:d1:ee:a2:
b7:5a:f3:15:83:87:e0:8a:90:f4:c9:92:b9:29:6b:
1d:3b:84:b4:11:9f:b5:c2:ad:5c:86:49:ad:5f:2c:
31:e7:05:12:20:0e:26:12:ee:66:82:9a:4c:77:9c:
3a:7c:6d:c3:71:ee:03:a8:97:3c:f0:b3:46:0d:f8:
3a:6c:7d:0e:75:e2:cf:7c:75:29:ca:63:11:87:52:
a5:ee:43:f0:55:75:60:92:00:10:70:16:21:a0:79:
6c:86:4a:21:98:b0:1b:7e:51:f1:45:47:0b:01:a6:
1d:ff:7b:a9:3d:30:72:96:76:17:6d:b9:d9:1e:2a:
c0:c4:62:e2:23:c5:f8:3b:60:e3:23:0a:f3:44:36:
9e:d7:ec:3b:b8:81:b8:71:0e:b7:6e:db:da:10:c5:
ba:b1:3b:ce:fe:f3:ad:91:a9:b9:da:eb:2d:a9:12:
4e:c6:82:e7:69:76:87:0d:c9:1a:87:3c:3d:5c:e4:
fe:3d:2f:a5:56:7d:c7:2f:cb:e9:74:ea:8f:e1:fe:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:61:3C:68:B6:EF:9E:36:7C:B0:34:FA:20:AD:FF:7E:FA:49:C9:19
X509v3 Authority Key Identifier:
keyid:44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8c:61:4f:40:07:3d:16:25:e8:14:e9:68:63:c2:ef:c4:44:
f9:ac:96:59:0e:45:d9:81:45:fa:95:fb:80:68:d5:14:91:60:
7a:34:1b:9d:bc:db:51:92:a3:04:bc:e2:5b:fb:69:14:72:97:
4e:d1:52:ba:a9:35:ba:26:ce:0f:06:c7:df:98:83:05:a7:da:
88:d7:d6:9b:12:26:33:c7:24:2e:d6:7d:14:71:50:99:3f:af:
59:41:e9:6c:80:99:f2:ac:11:30:f5:72:13:5b:9a:67:f2:d0:
42:e0:6b:79:cf:27:72:ec:59:26:a7:6d:01:28:9e:6d:ad:58:
50:4d:49:74:b8:9c:d3:a1:b0:56:b4:cf:fc:3f:71:45:f4:33:
56:b5:b7:86:61:8e:c9:69:6a:cb:df:6f:84:76:75:2e:8f:80:
7d:c9:41:6e:d4:cd:c6:d6:36:6e:6c:b9:16:7d:c9:92:05:56:
8f:71:76:f7:42:b7:32:d9:1b:e9:18:53:47:27:5d:da:c6:92:
f5:ed:e5:7e:53:97:8d:09:cc:a6:b5:a6:ef:1e:35:f7:47:3b:
0c:eb:8d:71:5e:30:c2:f2:83:99:7e:a3:b2:df:b3:22:89:3a:
42:de:04:c2:81:f6:44:83:a4:90:c3:9e:30:bc:a1:1c:9c:38:
c6:4a:fb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:13 2025 by rpki-client