Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File: l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier: Eaa9Z0hg9f/xC+4Cwl0oURYPJGEzF7rjOQkUpnKOtWA=
Subject key identifier: 8A:31:AD:66:D3:24:18:AE:82:89:38:52:76:05:57:57:2D:AD:6D:D0
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial: 0194C38784B7A907634BE25F91803AA28C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number: 13
Signing time: Sat 01 Feb 2025 22:00:25 +0000
Manifest this update: Sat 01 Feb 2025 22:00:25 +0000
Manifest next update: Sun 02 Feb 2025 22:00:25 +0000
Files and hashes: 1: 6v3xaZ7YrvMvQdKxxjWwKZ-HZN4.roa (hash: hWUPq5N6t+RwJdEvOikw63sUGiZaD6rAh+UZM/+TLZM=)
2: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: vfuXRlAdaGZo6gkIbFQ4f3cde6iOma6P4+X3ymkkJHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:84:b7:a9:07:63:4b:e2:5f:91:80:3a:a2:8c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
Validity
Not Before: Feb 1 22:00:25 2025 GMT
Not After : Feb 2 22:00:25 2025 GMT
Subject: CN=8a31ad66d32418ae82893852760557572dad6dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:7e:fe:2c:ec:e5:33:17:4a:7e:a4:0b:cb:
41:2c:0d:c2:cb:c6:21:b6:42:51:69:5d:ec:7d:63:
de:4a:09:0b:1f:0e:c4:e8:9b:33:40:10:fc:3b:ac:
7f:89:61:f6:dc:6e:41:36:ca:ba:db:5b:69:65:87:
78:a3:86:5e:d5:4f:3f:fc:bc:c3:0a:cb:78:36:6c:
0e:54:02:46:9c:ae:5b:7a:07:c9:fa:4e:25:7d:c5:
65:5a:96:5f:52:fc:81:8e:c4:03:49:ff:f1:1f:10:
b4:31:d1:91:f6:37:79:e7:09:19:d4:14:3e:02:78:
ff:5f:cf:91:7d:5c:c6:81:e4:70:24:db:c8:f3:f3:
59:7e:bf:00:c0:d9:e6:b6:73:cc:c5:be:2c:66:5b:
44:de:a6:c4:a3:d1:ce:ad:b3:e8:f3:3a:4f:05:55:
80:f8:ef:ba:35:30:4f:ea:51:9c:66:0a:99:42:b3:
ba:92:dd:f8:e1:4b:a5:2c:af:e1:ae:f5:38:fa:bd:
31:32:7b:ff:81:a3:81:a2:c2:be:89:34:29:9b:00:
33:7e:57:40:35:c6:82:81:c5:4e:1b:47:cb:14:01:
c6:22:29:d0:58:b0:2c:66:7f:2a:40:31:65:95:e6:
97:11:1a:f8:a4:32:0f:29:d1:cd:d9:c5:ee:71:6e:
65:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:31:AD:66:D3:24:18:AE:82:89:38:52:76:05:57:57:2D:AD:6D:D0
X509v3 Authority Key Identifier:
keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d6:09:8a:f4:6b:eb:81:05:f3:09:fe:d9:9c:83:90:16:16:
d6:0c:b4:9a:3f:8f:db:45:80:c2:5d:d7:c4:6f:91:04:75:df:
cd:f9:e1:68:62:01:fc:9e:a8:cc:32:ba:3f:a7:3c:cd:fa:46:
37:63:11:84:cf:f5:04:55:88:de:2f:56:03:1e:be:5a:57:28:
46:04:16:e3:28:83:dd:2a:4c:9e:40:b2:a9:b8:ef:74:d2:64:
f6:8a:51:e9:c0:3d:dd:08:2e:a6:e3:e2:a3:37:ff:36:55:69:
4e:24:44:71:b8:dd:fb:67:d4:66:24:2f:be:a3:01:e9:d6:bc:
19:89:33:96:b6:dd:f9:3d:93:0e:b6:88:de:6b:37:b8:55:f1:
d5:1e:f7:eb:e5:46:86:0d:d8:ed:60:c5:32:4e:f0:e2:4b:34:
ec:09:fb:30:de:67:84:fc:f0:04:2c:5a:22:e8:eb:bf:b9:ce:
14:61:a8:26:3f:fa:43:b2:e7:2a:1c:fb:22:7e:c6:a3:2c:b7:
15:0c:0a:da:ca:8c:85:a2:17:df:11:fb:b2:da:2f:00:fc:c5:
93:94:8a:b5:5e:0f:4c:a4:99:9f:6a:d4:a7:8f:40:43:13:20:
eb:91:88:13:ae:8b:10:29:7e:9e:97:14:d5:ab:35:79:65:32:
d7:a1:36:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:41:55 2025 by rpki-client