Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json)
Hash identifier: IYJo7W6v+BfO7LLGFGTGF0F0mKTdFOjNiOU+HFJNx4o=
Subject key identifier: 04:A9:16:0F:E5:13:B0:5D:25:01:5E:9F:E6:36:E7:AA:CC:66:5E:64
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 01951134C573CB7DFCA945DD8CDCB2403BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
Manifest number: 0A71
Signing time: Mon 17 Feb 2025 00:00:25 +0000
Manifest this update: Mon 17 Feb 2025 00:00:25 +0000
Manifest next update: Tue 18 Feb 2025 00:00:25 +0000
Files and hashes: 1: lX5lUBRMr0qRNeUQdaN4ltutYPA.roa (hash: BmUNSmbdUF6R1nm83/KFGUM2Dtk8AbO+iQW7VW/AX64=)
2: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: vlz4p1cJwCI8UyF74U7WFYKnJ59+TfyYRX5AWpR3N2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:c5:73:cb:7d:fc:a9:45:dd:8c:dc:b2:40:3b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: Feb 17 00:00:25 2025 GMT
Not After : Feb 18 00:00:25 2025 GMT
Subject: CN=04a9160fe513b05d25015e9fe636e7aacc665e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:db:40:42:40:f3:c2:90:49:bb:83:db:0c:82:
b5:a6:84:ba:6e:27:90:8d:df:d3:56:92:7a:34:70:
10:ba:1b:08:4c:c8:94:54:ee:9b:69:7b:69:69:51:
8e:cf:61:53:a5:07:58:c4:58:22:f0:81:6c:79:c3:
c7:14:4b:4a:e7:67:87:9c:b1:bb:78:e5:df:c4:d6:
8f:e8:90:23:f0:fc:7e:39:91:1f:08:35:23:42:33:
94:d6:2a:c1:18:62:87:e6:6d:c5:ea:80:c2:bf:84:
0d:09:27:de:12:fe:c0:0e:88:a6:96:8c:6d:78:d9:
67:5c:f1:97:bc:ff:bc:59:7b:7c:a2:69:15:c1:61:
3d:46:31:6a:1e:b5:f3:4f:73:58:46:eb:a6:64:55:
a0:be:0a:72:57:6f:0a:e7:cf:89:50:db:df:09:ad:
98:ae:e5:86:44:7a:d7:f2:f9:a6:02:69:53:40:29:
cc:9e:05:d5:ec:44:09:6e:b2:98:42:92:17:96:a7:
bf:99:02:22:74:ba:0b:bd:d8:22:ae:ef:f7:e5:45:
20:53:cd:80:b7:8d:2d:95:93:64:6f:d7:c5:8c:f8:
7a:80:ca:95:94:e1:39:e0:d5:0d:e6:50:66:fc:56:
e7:b0:a4:46:aa:72:15:91:a3:7f:57:0b:9e:4b:4d:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A9:16:0F:E5:13:B0:5D:25:01:5E:9F:E6:36:E7:AA:CC:66:5E:64
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e3:de:b2:bc:38:b4:50:22:f1:61:62:92:f2:27:7f:bc:af:
50:fc:7a:7a:d9:67:db:2c:2c:07:53:58:77:83:31:a9:1c:b7:
10:9b:a3:3e:50:e2:df:10:48:3d:0c:3d:2d:17:96:82:18:65:
f9:a9:72:28:b4:fe:bb:6a:bc:1d:8f:cb:63:e0:9d:b5:60:5f:
a8:ad:c3:dc:97:01:88:ae:a6:7f:aa:d6:a8:2e:54:9d:70:4b:
27:2f:95:50:ec:d2:8c:20:27:08:56:bd:c1:0d:2b:ad:c5:82:
fc:a8:96:ee:78:87:0d:4d:23:f0:99:d9:44:92:93:85:c4:ca:
eb:a2:3f:79:f3:06:9c:d9:3e:4d:6b:9d:b7:54:33:42:59:7d:
a2:11:15:07:50:e5:1c:e2:44:a4:e2:c7:d9:ef:9b:65:96:ac:
79:aa:97:d1:6d:80:ae:c7:16:91:bc:52:2f:e6:b9:bf:86:ca:
f0:e9:38:47:32:62:e6:87:5e:3b:27:97:9c:7c:aa:1f:03:c8:
99:3e:c5:57:60:59:3a:bd:c9:28:e5:63:b3:07:fd:64:1e:4d:
53:4e:83:56:b7:af:55:a7:44:29:30:98:fe:32:29:79:d6:ae:
b6:0f:9b:86:da:c0:f6:f7:5b:02:6f:ba:b6:52:bc:32:5a:33:
a1:c4:35:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:16 2025 by rpki-client