Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
File: hAVuIt0SPINMCkqnRRbV-zzHfdE.mft (raw, json)
Hash identifier: 0ZONfAYpOj/nggIMc98pt+MoGNC8M/0Ngj+kxD/RSj0=
Subject key identifier: F8:D5:95:17:60:D9:DA:30:56:2D:90:1D:8B:CF:A0:CD:41:4E:A8:7C
Authority key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
Certificate issuer: /CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Certificate serial: 019511A2BA3B0740EBE42647635D6873C317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
Manifest number: 02D2
Signing time: Mon 17 Feb 2025 02:00:31 +0000
Manifest this update: Mon 17 Feb 2025 02:00:31 +0000
Manifest next update: Tue 18 Feb 2025 02:00:31 +0000
Files and hashes: 1: egLJr-eSZpk4sDdrCGxUJjm8wVU.roa (hash: NBKYZF7j3MH2zl3XNbkXJFKVIPixuj4t75EEGhwneCE=)
2: hAVuIt0SPINMCkqnRRbV-zzHfdE.crl (hash: LhH5qQF0WYgEPLX98DwBNiHURAlsgV2RocIFyy7emzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:ba:3b:07:40:eb:e4:26:47:63:5d:68:73:c3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Validity
Not Before: Feb 17 02:00:31 2025 GMT
Not After : Feb 18 02:00:31 2025 GMT
Subject: CN=f8d5951760d9da30562d901d8bcfa0cd414ea87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:ce:25:23:bb:b3:ac:a0:3d:89:a1:b8:fe:
67:dc:9c:67:8d:e5:aa:72:e1:42:e9:0d:d8:1c:3d:
ae:12:43:d4:70:01:66:b2:80:5a:a1:37:19:1a:5f:
49:1e:4d:7c:05:7e:cc:fb:37:51:16:25:9d:05:eb:
96:47:87:9b:a9:7b:83:f8:a6:4b:0a:a0:d9:3c:8e:
37:b0:6e:fb:fd:93:ba:29:46:e4:49:08:55:91:46:
45:15:6c:4c:51:75:96:92:85:43:6d:a1:b2:fa:62:
64:74:63:9f:73:c2:c4:ff:92:9f:6f:0e:c0:a2:c6:
20:8d:2e:aa:6a:07:8b:d2:19:21:f5:6b:bc:56:8e:
ff:27:60:9d:7d:da:61:12:b4:fb:7d:84:9c:fc:1c:
45:c8:92:31:c4:c6:f2:0d:a4:29:ca:d9:d6:d9:ab:
7a:81:94:7e:fc:6d:7f:6d:ac:2b:b3:2a:8c:f8:f4:
ce:b7:1f:33:34:d0:20:8a:23:16:be:0a:34:b8:12:
61:00:85:d9:1c:c9:1e:ef:38:b8:20:5c:7f:6a:e6:
f4:33:df:7c:06:40:38:62:f9:e1:41:d9:b3:de:fe:
47:c7:fe:1f:f6:14:4e:d8:7d:60:0e:6b:dd:b6:5e:
0a:4b:9c:bf:a8:7b:92:db:20:ee:63:85:d8:8d:47:
2f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D5:95:17:60:D9:DA:30:56:2D:90:1D:8B:CF:A0:CD:41:4E:A8:7C
X509v3 Authority Key Identifier:
keyid:84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:08:e7:15:18:0e:19:41:2e:d5:66:d1:8f:a9:ab:41:48:78:
3a:bb:54:4c:e7:8f:db:44:5b:c3:7b:b3:a5:7f:a8:5e:18:a2:
da:54:52:ba:bf:09:84:4e:53:e5:19:00:54:5d:1a:b9:68:60:
98:00:9a:0a:57:2d:76:70:52:db:69:18:38:5f:38:dc:d3:90:
96:c5:6a:73:c4:52:1c:4d:5f:19:a7:a1:21:7f:91:f7:67:e3:
9d:7d:a7:8c:c7:43:da:dd:e2:a4:95:12:c9:d9:22:c2:a5:dd:
01:fa:a5:80:72:df:64:21:63:4f:9f:42:f9:f1:91:5c:fa:5c:
04:63:0a:d9:7c:56:cc:dd:fa:8d:e2:86:b5:a0:53:af:72:36:
76:55:87:6f:53:5d:cb:9b:b4:8f:9e:73:58:d5:89:5a:34:46:
4b:52:8d:19:87:0e:84:27:3c:d0:cc:0c:c7:31:e3:c3:d2:0f:
87:aa:77:82:35:b9:e1:8d:88:e8:cb:f4:18:98:36:82:78:8a:
c1:60:ac:07:2c:29:61:08:5b:c5:93:7c:fc:d3:5d:d8:7e:98:
2e:2e:cc:8a:15:e8:78:63:f7:c6:c0:a8:ff:64:da:f6:06:b0:
89:ed:f6:c3:70:ef:49:6e:a1:a2:40:7a:91:b8:3d:8d:a7:7b:
2c:0c:8c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:48 2025 by rpki-client