Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
File: uakIi7QgHORtjrg9yfOMeLjzvhs.mft (raw, json)
Hash identifier: qZXwFTIXTUJbfTnAAzhraVQGbLC2w+ij8lmcqbXmzNw=
Subject key identifier: D8:0B:48:81:17:D6:99:0E:D0:A3:D4:1A:22:B4:39:B9:20:8C:8F:EC
Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
Certificate issuer: /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Certificate serial: 0195127E6D7EE36C1048818C90AC5D66D93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
Manifest number: 0B8D
Signing time: Mon 17 Feb 2025 06:00:30 +0000
Manifest this update: Mon 17 Feb 2025 06:00:30 +0000
Manifest next update: Tue 18 Feb 2025 06:00:30 +0000
Files and hashes: 1: rgvtyID9p-DqMnjSKCFn-cGMrm8.roa (hash: KZX9vOyc4u5urfjnyI1iRG4cI0C7NijDH3Acv+79gvU=)
2: uakIi7QgHORtjrg9yfOMeLjzvhs.crl (hash: u29rrA3sC/RpoerS5/bXP88g5Db8nYrsgbfeGQV1fjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:6d:7e:e3:6c:10:48:81:8c:90:ac:5d:66:d9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Validity
Not Before: Feb 17 06:00:30 2025 GMT
Not After : Feb 18 06:00:30 2025 GMT
Subject: CN=d80b488117d6990ed0a3d41a22b439b9208c8fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:c7:dc:d5:af:0e:28:b0:de:08:e7:fa:4c:
dc:24:e5:88:ff:c2:0c:3c:31:33:b0:37:f1:0d:01:
06:cb:20:93:95:d8:55:b8:75:24:51:2e:4e:7f:72:
be:94:53:09:81:cd:80:d5:04:25:f5:ca:58:7b:30:
81:f3:27:c0:e9:f8:a0:da:a3:f2:14:7f:9a:bc:86:
f9:d9:87:06:44:6f:6b:ef:9d:70:0d:ee:ed:7b:04:
14:90:d7:0d:45:02:6f:f9:18:7c:98:38:5b:33:57:
66:fc:2e:31:66:2b:b3:12:2a:82:7f:17:5b:69:e0:
bf:b6:b1:f3:5d:75:65:7d:5a:01:96:17:6f:1f:b1:
76:0b:c5:94:f0:01:e0:17:d9:09:2d:c6:ee:30:33:
44:ee:ee:2e:8c:f2:d2:db:31:b0:69:cb:84:13:20:
b6:4d:2a:ac:4a:1e:4b:57:d2:71:e5:b9:05:7d:f1:
2f:7a:8b:34:f5:ab:03:d7:05:fa:49:84:52:62:dd:
ca:f8:2f:0f:ef:cc:07:3b:b4:3f:45:9e:49:8c:de:
78:05:06:ae:96:2d:ae:be:e1:db:cf:72:7c:38:87:
c6:26:09:14:b0:9a:d9:28:99:4c:fa:96:fe:7e:9b:
aa:9d:4d:c0:63:ea:74:31:92:86:91:df:5f:a6:c1:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0B:48:81:17:D6:99:0E:D0:A3:D4:1A:22:B4:39:B9:20:8C:8F:EC
X509v3 Authority Key Identifier:
keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:01:f7:69:26:7f:6e:cb:73:7c:17:f3:a0:ac:41:c5:8a:02:
13:3d:4f:6c:9a:fc:a3:f9:0f:f4:21:77:91:c2:1f:df:0e:bb:
51:03:bf:12:96:73:f4:63:96:3e:63:be:86:b3:26:52:ba:b9:
1d:45:bf:49:b5:38:67:a4:0d:66:f6:9b:45:9b:b7:fa:7b:b4:
90:17:df:c5:b5:77:34:b8:be:14:c6:0c:c7:00:5e:a3:d5:00:
e1:65:75:4e:66:3b:df:74:5a:ba:38:b0:a9:21:b1:b0:e3:74:
af:07:9f:4c:40:4a:30:12:3b:07:67:f9:d5:38:c2:3a:a3:38:
1d:c8:df:9f:ea:ee:dd:72:10:8a:bc:26:1b:96:8a:f7:ef:93:
21:c9:64:59:e6:65:5b:6c:11:38:31:2f:8e:f1:d3:f6:27:c8:
6e:15:8c:45:7c:f6:e3:cf:73:5e:8c:b7:37:69:11:78:82:7e:
47:16:5f:09:e5:cd:36:66:4e:b0:c6:5a:ec:fb:14:67:9f:7b:
29:91:2d:54:6c:ca:26:db:87:ad:25:11:83:9f:77:71:b3:42:
29:c5:1b:7d:69:4c:d6:ab:45:f0:cc:d9:48:fe:41:77:41:98:
4e:46:42:77:2e:51:28:16:4e:85:c3:fe:41:e9:d4:32:a4:a9:
bd:32:9e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:48 2025 by rpki-client