Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier: HwU2mE4zYFNbgH9O2u6G6HoI+/hDOXOG91EFU68C78A=
Subject key identifier: E9:ED:78:35:DB:76:36:EB:05:F1:D4:2F:20:14:67:64:51:7F:C7:57
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 0194C463652BC127E2D507EBA922D2EBA1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number: 0AC8
Signing time: Sun 02 Feb 2025 02:00:35 +0000
Manifest this update: Sun 02 Feb 2025 02:00:35 +0000
Manifest next update: Mon 03 Feb 2025 02:00:35 +0000
Files and hashes: 1: RHreYh0WmNugHNPOVP5GHBEiSQE.roa (hash: lDEy9crc1E/w31v0jSsa/vEhnHdpcWtnPtxtDbNUjjc=)
2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: +kDEg81w4LaE4VWHQhNWsrSoPVjxn0Qzzv6oORHEmjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:65:2b:c1:27:e2:d5:07:eb:a9:22:d2:eb:a1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Feb 2 02:00:35 2025 GMT
Not After : Feb 3 02:00:35 2025 GMT
Subject: CN=e9ed7835db7636eb05f1d42f20146764517fc757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:47:60:df:e0:30:8f:29:f1:9a:ae:17:1c:
ed:e5:fc:b6:a4:21:45:04:13:0c:3b:d3:f7:b7:a1:
45:c5:96:0a:40:30:d7:9d:ed:70:19:41:07:7a:7b:
6e:3b:dc:be:12:9a:c6:8f:81:6f:64:44:56:d6:c6:
49:0d:d0:ec:1d:eb:ae:7d:25:15:e7:2f:bb:78:ce:
86:43:a6:4f:25:a8:6b:6a:43:ac:37:41:62:66:41:
84:a1:3b:77:39:fe:e4:70:63:58:81:af:fd:a9:28:
f0:6c:b6:69:89:96:cf:87:54:1c:cf:dc:c4:b5:36:
c6:78:ae:ce:dd:54:a6:1c:9a:fa:3b:ab:94:1c:70:
b5:69:f7:eb:7a:47:62:c9:89:6b:03:e3:4d:ac:19:
c6:8a:ae:de:7d:a6:0b:a9:03:8f:37:95:5f:a8:58:
3d:2b:8a:d2:f8:25:51:78:fe:ce:d8:b7:41:c2:2b:
58:e6:7b:b9:98:43:71:e8:e0:15:55:cb:3e:99:6f:
35:e1:a0:f4:37:39:df:a3:9f:34:15:ca:18:e9:18:
93:34:f3:c2:c4:7f:75:c2:5d:53:46:8c:54:26:60:
06:f8:6d:00:2f:2f:80:2c:f2:86:bf:3a:48:a7:af:
28:a7:0e:8f:83:39:37:a8:df:c1:dd:28:fd:0b:c4:
d4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:ED:78:35:DB:76:36:EB:05:F1:D4:2F:20:14:67:64:51:7F:C7:57
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2f:fb:76:3d:67:eb:5c:6a:d6:16:f6:de:5a:d3:25:db:50:
74:8d:44:48:81:07:d1:82:ec:f8:c8:58:21:4e:9d:5c:79:de:
8b:cf:c8:52:79:fe:71:a2:28:84:5d:e4:07:c6:fa:ce:07:8e:
a3:d0:64:68:64:cc:df:e7:ee:a5:6a:31:25:9f:9c:e8:c9:91:
f2:90:65:83:b6:ba:ac:93:e7:4d:98:9d:53:37:39:5b:72:6f:
3d:73:7e:87:6f:9f:3f:54:eb:06:0a:9d:09:10:3b:9b:c7:17:
51:96:c3:f6:4b:c3:3c:09:8f:e2:ce:72:69:47:93:14:b4:14:
fa:38:09:f9:9b:37:ff:6b:9e:ed:6e:33:70:ba:7a:d5:0e:09:
97:ee:7d:19:9e:41:02:fc:98:b5:62:12:58:98:fe:8d:94:fc:
49:96:3b:81:18:fb:e2:21:11:ee:b8:74:3b:1e:60:46:a0:65:
a5:d7:d2:9a:c7:a8:a4:05:a4:01:fa:0c:b6:e4:da:91:1b:16:
a5:d2:37:ec:40:fd:c1:62:ac:2d:db:94:84:0d:c6:8a:97:ed:
47:31:10:be:2b:84:fa:f0:6a:58:83:ea:90:4f:dc:d0:82:e6:
6e:be:ba:5c:02:1c:24:9e:83:1d:2a:c2:0e:33:11:fa:0c:c4:
f0:94:20:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:20 2025 by rpki-client