Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
File: rrC3d_U3e7HFBlOISwPifc3ugo4.mft (raw, json)
Hash identifier: 7vEj1fgZe3VjHaeAnj9k2P5J2Hgfl4WQ4CjGZGN4/H0=
Subject key identifier: 32:9A:2B:25:3E:F3:72:FF:34:BE:7E:A7:C3:C8:32:F1:F8:3C:9A:13
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Certificate issuer: /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial: 0194C463BEF67DD5E7765196455BAC51B149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
Manifest number: 038A
Signing time: Sun 02 Feb 2025 02:00:58 +0000
Manifest this update: Sun 02 Feb 2025 02:00:58 +0000
Manifest next update: Mon 03 Feb 2025 02:00:58 +0000
Files and hashes: 1: JNkggvQx74p1btfiu-ncCk_cuvY.roa (hash: 3PlXzxEghXwRv2XVfxrZveNHTFUHK5O1XcLko9Bh3BM=)
2: Uq_t_HrTAlRpJFoqPn4Yq2qw8Js.roa (hash: qmO20uSLD7oT6YHuOERmRYn19JhLt54cbNRpSyqWJQc=)
3: o6055-b-qPzQTA0F_ST-9FEVVmE.roa (hash: g8Jxoy+mBwRsosu9yvKdAVg8QP3DZnBB7YPvuPjdGU4=)
4: rrC3d_U3e7HFBlOISwPifc3ugo4.crl (hash: pbeqQ1GOwQqufXzmeqWedCWPDrECfaTLGKLoq4aiPGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:be:f6:7d:d5:e7:76:51:96:45:5b:ac:51:b1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Validity
Not Before: Feb 2 02:00:58 2025 GMT
Not After : Feb 3 02:00:58 2025 GMT
Subject: CN=329a2b253ef372ff34be7ea7c3c832f1f83c9a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:3c:b0:dd:ad:ee:93:a8:93:97:d5:c8:34:
e3:dd:5c:a0:71:d6:ae:ae:bf:1c:bd:5e:4f:14:c5:
67:15:bd:d9:ee:f9:6c:ea:0d:8a:89:f2:b2:71:61:
e6:19:80:3b:eb:e8:2b:1a:4f:ff:a4:3e:00:1a:11:
ee:8b:8b:55:0c:99:40:f8:d0:a9:3a:dd:74:4a:f3:
55:4c:f5:c3:8e:25:47:a7:d8:9a:37:ed:6d:00:c3:
98:3a:57:92:24:3a:c3:06:3d:3b:72:dc:60:3a:91:
54:ea:e5:5f:5b:10:9a:5e:ea:eb:33:f6:63:db:6d:
83:51:03:53:0a:f8:16:f9:f1:d9:c5:57:f3:2d:c1:
4c:59:0c:0a:d4:ee:34:b0:d0:b1:84:7d:a9:15:40:
8a:2b:4e:1b:9c:6b:7e:8e:ed:a6:50:e6:01:6b:e5:
b6:80:54:63:60:b2:01:19:85:0d:9d:fe:8e:be:90:
56:79:59:42:1e:f6:64:90:39:bc:d4:0b:57:65:3b:
71:84:de:6a:e5:ba:73:08:ef:c9:2e:9d:6e:4f:26:
42:c0:34:62:db:29:53:e6:dd:56:95:4b:c3:81:93:
1e:34:c0:3b:54:a9:b7:58:89:83:03:11:2a:ec:76:
97:92:99:c5:12:a0:61:ea:89:d0:fb:27:ad:a2:b9:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9A:2B:25:3E:F3:72:FF:34:BE:7E:A7:C3:C8:32:F1:F8:3C:9A:13
X509v3 Authority Key Identifier:
keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:82:58:fb:3f:08:91:a8:0b:e6:cb:ef:8b:80:74:84:77:58:
73:7b:3c:61:70:38:e5:9e:f4:fd:c2:aa:bb:26:02:d8:9d:c9:
22:0f:f2:aa:6a:39:1d:a8:83:70:57:ec:45:e8:72:65:a1:8b:
be:e6:c2:c7:f5:7f:8e:d7:10:c7:20:8b:10:b7:48:21:be:9e:
22:13:88:d8:0a:7b:8a:86:60:15:9a:11:5a:80:c0:9b:38:5e:
e5:fd:02:5c:e0:70:2b:3a:ff:40:35:24:06:5c:22:0d:43:0d:
87:c5:a9:b4:cf:36:f9:ea:28:be:4f:7f:88:7a:85:93:a9:02:
91:87:2c:dd:c1:e4:cd:1c:86:7a:b3:68:4d:9d:e3:3e:74:df:
64:ff:a2:3b:8a:b0:90:93:36:f9:76:09:64:31:2a:30:82:c6:
d4:fe:df:07:1a:8e:eb:d5:ce:ca:91:81:50:f1:af:e4:1f:3a:
25:42:c1:f4:55:3d:b1:84:14:1b:1a:92:02:b5:e9:29:02:69:
2b:b0:d0:ed:a1:a8:e7:9c:a7:9c:51:10:dd:42:56:73:cd:53:
dc:9d:0d:63:73:d4:f6:66:07:fc:63:53:fe:0c:2a:b3:b4:50:
7a:c7:56:85:6b:44:d1:83:81:fe:42:65:79:a7:d4:2f:99:e7:
34:aa:4e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:35 2025 by rpki-client