Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
File: morKHCZcEygjx4T9qEL3oaBbjLc.mft (raw, json)
Hash identifier: Txzc9wCWcf3v0+4U6nfwUEhSZUHSSTCluSXpUPXG6DU=
Subject key identifier: 27:AC:53:70:77:53:22:37:2C:3F:7E:BC:AA:C6:A1:7F:0A:35:7F:69
Authority key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
Certificate issuer: /CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Certificate serial: 0194C3F5E1F7705C2B6F2A3C7658E47267E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
Manifest number: A1
Signing time: Sun 02 Feb 2025 00:00:58 +0000
Manifest this update: Sun 02 Feb 2025 00:00:58 +0000
Manifest next update: Mon 03 Feb 2025 00:00:58 +0000
Files and hashes: 1: PXv4MGw4HfMQV8zuoB-3WTegwaw.roa (hash: GqIG1YKim2qQL71fUd8HU7TowoibLsmIA+NjM1XqDss=)
2: morKHCZcEygjx4T9qEL3oaBbjLc.crl (hash: 4/NKmwkbudms9pqEOd2wYdUjr2aEyVxyHBcgkwlKYW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:e1:f7:70:5c:2b:6f:2a:3c:76:58:e4:72:67:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Validity
Not Before: Feb 2 00:00:58 2025 GMT
Not After : Feb 3 00:00:58 2025 GMT
Subject: CN=27ac5370775322372c3f7ebcaac6a17f0a357f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:44:af:d5:3a:d3:8d:fb:dc:85:86:c9:70:
fb:fe:dc:c4:46:09:ff:0c:d9:84:a3:b0:a1:ef:cb:
02:d0:34:ed:f3:c9:61:32:a9:fd:cf:dc:40:bf:9b:
7e:59:a1:01:84:20:38:a8:c4:a0:20:40:1b:9c:61:
2e:d1:10:37:14:02:56:97:01:a6:1b:7d:f0:0e:7f:
bc:a9:47:9b:66:b4:c1:7f:ab:d0:7e:00:49:ff:a3:
2c:80:9b:83:12:b8:10:b3:57:c4:70:45:1a:7c:33:
ee:6c:01:56:d6:7e:df:e0:e3:07:cf:83:f0:96:55:
4d:ff:b1:92:b3:1f:88:3b:40:86:d5:00:fc:48:cf:
30:7e:f7:5b:bb:e2:2f:c2:94:e6:0d:3a:7b:e4:af:
f4:a4:66:5e:6b:63:b2:68:17:47:db:c0:28:50:0e:
ea:ab:4b:d5:ab:17:85:3c:8a:f1:77:40:ca:0e:24:
f2:3d:19:35:9c:38:e8:83:9f:32:ea:1b:ff:ca:f1:
22:e6:eb:67:98:e0:bc:82:37:5c:ba:45:1a:85:64:
af:73:e5:e7:86:c9:47:d2:bd:02:3f:9a:2e:f9:56:
c3:35:4f:df:86:b5:34:16:e5:10:1e:6f:b6:46:01:
97:64:21:8e:3e:6d:cb:cf:91:d2:b6:79:d4:82:24:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AC:53:70:77:53:22:37:2C:3F:7E:BC:AA:C6:A1:7F:0A:35:7F:69
X509v3 Authority Key Identifier:
keyid:9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ff:fa:04:16:57:b2:f3:b1:4c:92:39:14:4f:37:25:c0:4d:
50:f3:1c:a4:aa:3d:4a:85:44:37:8f:35:d8:4d:42:cd:55:45:
7e:34:7a:3b:0f:ac:43:b6:c7:2e:c6:2f:8d:94:7c:17:fd:f7:
0b:7c:e7:07:16:fd:9e:fd:ec:9b:53:ac:ae:c2:98:32:87:40:
a3:74:d3:0b:b2:ed:6e:d0:f9:8a:e0:e4:d2:5b:6f:42:cc:a3:
ca:62:2b:a5:3c:91:58:b7:92:09:01:3a:29:fe:0b:e8:12:0b:
ca:23:8d:88:1c:b8:a4:1c:7f:69:86:3c:31:ab:70:61:28:61:
b9:97:bd:ab:eb:d1:ef:88:f5:15:3e:fe:af:42:c6:b9:bf:4b:
ac:19:55:ea:b6:e4:84:a2:c7:08:31:8a:e1:87:c0:97:42:68:
8f:73:e6:de:56:4c:06:5e:08:80:44:de:2f:e6:cb:1e:64:b3:
08:63:b9:c4:61:94:ef:50:f2:c8:4f:ca:3d:90:b7:e0:73:56:
e2:e0:ed:7c:56:d4:54:76:7d:56:79:18:6b:8d:42:e3:f1:9d:
99:2d:c7:55:62:1b:d9:1c:96:82:d5:e3:05:b1:4e:3b:05:82:
0a:03:12:3d:e2:1b:1a:23:a4:95:1a:3b:2a:99:ce:ee:06:bc:
9c:60:10:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:49 2025 by rpki-client