Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier: LGWJZRUYmybBJPVK3j41ZwLpUJBcebDp31/U/dUB+2c=
Subject key identifier: 3E:6F:F0:2E:20:51:AA:2E:BF:3C:94:12:CD:2D:F1:3B:19:85:04:8F
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 019510FDCC5C6BC16BB71FF6C03D3BB336DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number: 1457
Signing time: Sun 16 Feb 2025 23:00:23 +0000
Manifest this update: Sun 16 Feb 2025 23:00:23 +0000
Manifest next update: Mon 17 Feb 2025 23:00:23 +0000
Files and hashes: 1: 2OXGBjO85npyAkFnRouh_UBk1Hs.roa (hash: HbPy+YRVvuPyiRQMlka5FfjRj4FCj/zQuaXQr9znzdU=)
2: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: vcPXi3ZJqh8kBAG7UFXjtcEvKWWc54f/18IkcaZca/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:cc:5c:6b:c1:6b:b7:1f:f6:c0:3d:3b:b3:36:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: Feb 16 23:00:23 2025 GMT
Not After : Feb 17 23:00:23 2025 GMT
Subject: CN=3e6ff02e2051aa2ebf3c9412cd2df13b1985048f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:a7:28:b8:5c:01:a1:f3:55:ad:9c:23:66:
6d:b1:be:a1:af:dc:14:af:f9:75:32:6b:30:01:56:
b6:cc:89:0b:76:13:93:ea:07:9e:ac:1f:ee:2a:3a:
aa:71:52:1b:ff:c9:4a:72:11:50:c5:bc:ff:61:0b:
53:f3:e9:11:ed:ff:b2:6b:e9:6b:8f:25:e1:d7:34:
c9:17:ad:b4:6d:d7:38:14:83:e7:1e:78:cb:a1:9c:
62:ca:0a:a0:56:dd:8b:d6:f6:d5:54:69:1b:68:86:
c6:d7:f5:90:cb:23:fa:26:a0:ca:28:1f:44:f0:71:
fd:55:f8:e8:85:af:b4:0b:dd:1c:7b:6e:5f:93:f1:
a6:81:22:fb:33:04:d7:c3:90:ff:10:62:ea:43:ab:
e5:e4:86:29:5e:78:00:8f:71:79:b4:48:f2:e1:2e:
9d:bf:27:be:d2:04:fa:ca:1f:c1:aa:69:07:27:4c:
99:4a:63:a2:05:9f:da:d4:25:92:8a:5d:e2:64:f6:
ce:ee:70:dc:7e:12:b5:56:f6:c7:de:cb:03:eb:0d:
f1:a2:bf:8f:43:7d:15:a2:de:85:b1:89:00:53:62:
92:e7:b4:6d:a3:a1:84:ce:7a:be:d7:8f:9a:12:bc:
c2:8a:85:ed:fd:11:63:bf:ee:73:55:2f:78:ca:75:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6F:F0:2E:20:51:AA:2E:BF:3C:94:12:CD:2D:F1:3B:19:85:04:8F
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ca:40:10:18:66:2e:21:e6:b1:96:fe:30:2f:a5:39:06:60:
92:b7:e7:64:d8:ef:17:50:8e:42:38:11:64:85:ee:cb:fd:90:
42:68:b2:66:6a:43:52:15:18:c3:1c:79:05:c4:04:13:90:a8:
f0:e7:83:91:55:5d:65:49:5b:ba:52:95:f2:c8:d0:2a:9b:2c:
5b:83:de:58:35:be:de:43:ab:c3:0e:da:39:6e:b0:88:ca:65:
5c:b5:20:f9:4c:e1:97:6a:46:ea:15:c6:1c:c8:57:ea:56:9c:
20:99:6b:d5:a7:83:12:8e:80:f9:0c:af:ef:22:70:04:78:82:
89:38:77:a3:54:31:16:fc:02:4a:55:32:b3:6e:ed:a9:a6:c9:
6e:aa:21:b3:ac:96:e5:44:8d:5c:e1:e3:ac:5b:46:7b:2c:d0:
fa:25:85:f2:0f:fa:51:c9:34:e6:d4:d5:00:63:d4:69:74:dc:
9c:18:07:fe:93:40:ae:0e:f8:1d:fa:d6:9d:68:01:57:13:ff:
43:c1:6e:58:bf:2f:70:4e:be:eb:29:5c:21:c4:39:13:8f:ee:
94:cb:1c:81:81:a1:b2:76:a8:3a:bf:49:52:01:90:94:4d:14:
78:67:9e:40:16:87:74:58:a3:48:89:ad:21:51:45:f4:17:32:
f6:c4:32:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:56 2025 by rpki-client