Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File: mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier: IjYG1QKiNmuaztr4epifS/a2c0c3RgukydOnKUpytR8=
Subject key identifier: C4:7A:D5:3D:15:F8:87:4D:BB:86:66:D1:2C:03:6C:23:0B:CF:E9:A1
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial: 0194C3BE9F427CF3F42E6FAA8ACA2A9D2C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number: 0518
Signing time: Sat 01 Feb 2025 23:00:37 +0000
Manifest this update: Sat 01 Feb 2025 23:00:37 +0000
Manifest next update: Sun 02 Feb 2025 23:00:37 +0000
Files and hashes: 1: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: kjeZgyFwN/gfBauXGEoJ0O1sIy9ZLy/CLJvoMk+Pspo=)
2: tD16yJgx6FslawER1Evjktr90DU.roa (hash: IgaqAI1HCcxs2x01fN4KAw3fM/ZJo5SCnC5NuJ1Z+9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:9f:42:7c:f3:f4:2e:6f:aa:8a:ca:2a:9d:2c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
Validity
Not Before: Feb 1 23:00:37 2025 GMT
Not After : Feb 2 23:00:37 2025 GMT
Subject: CN=c47ad53d15f8874dbb8666d12c036c230bcfe9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:79:12:79:c5:c6:b0:37:4e:9b:92:e9:4a:
41:b3:93:61:ae:f7:11:8c:97:b3:c6:19:34:ea:7c:
96:17:a9:ef:07:9e:60:0e:33:c8:29:eb:c8:79:67:
75:41:bc:34:b7:3d:f1:92:09:12:2b:37:a6:0a:35:
4d:08:26:39:95:d8:16:b9:d1:22:12:50:1e:29:5d:
42:e3:7f:cd:69:57:8f:44:57:e5:dd:e7:22:a9:5b:
b5:3d:b5:a1:dc:01:b3:e8:22:09:ee:6a:74:c0:eb:
cc:0a:21:86:67:5e:7c:63:e7:f5:c1:af:23:c5:f3:
93:42:9e:86:92:35:87:20:30:f8:1e:da:4d:a8:4e:
15:7b:c2:a3:be:6c:a0:a5:e1:38:bd:8f:6a:e0:0d:
57:81:33:47:56:ad:e2:33:80:af:72:b5:bc:af:5e:
9c:47:d0:8c:28:e4:29:8d:95:93:5b:7b:04:da:b8:
35:5b:4d:37:97:2f:7c:1c:c3:a9:00:2e:07:05:c9:
8d:7c:e4:80:d7:f0:57:17:cc:8c:c2:4c:c8:bb:c3:
84:82:bd:c8:bc:e1:5a:de:47:fa:d8:2c:91:a4:87:
97:14:be:cb:c3:c5:12:14:23:ff:75:ff:74:69:e3:
31:aa:6b:7c:d4:b2:78:9d:03:47:9b:ef:71:e1:a6:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7A:D5:3D:15:F8:87:4D:BB:86:66:D1:2C:03:6C:23:0B:CF:E9:A1
X509v3 Authority Key Identifier:
keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cc:bd:f1:fe:41:6a:e5:98:97:ac:e3:5e:b5:d5:8c:af:e4:
b1:b3:dd:f0:04:08:cd:fb:35:30:f7:3b:8d:3b:e5:ef:43:99:
2d:ff:3e:f8:2f:55:9d:1f:3c:02:28:73:71:59:4b:bb:30:78:
d3:47:47:66:52:92:2a:c3:49:86:22:62:b1:20:fb:60:b0:97:
d6:e8:eb:31:08:05:12:7e:b7:0c:56:cc:9a:5b:f9:0b:94:fa:
bb:82:cb:e6:e0:85:67:4b:c7:c1:c0:ab:7c:e0:ad:da:3d:b4:
e2:04:b2:5d:5f:11:d4:47:22:74:35:50:a4:8c:32:96:81:a6:
bc:37:e9:cd:b2:9b:fa:ae:eb:8a:ce:32:d1:40:48:e9:da:ff:
a9:0e:c9:12:81:e5:06:06:51:08:9d:c7:2d:73:54:3a:a6:f5:
70:58:e2:2b:76:78:be:3f:30:6d:32:e1:a1:20:44:36:85:49:
e4:b5:30:74:96:06:41:c3:e4:18:4e:8c:3c:51:cd:ce:5e:fb:
fb:70:e6:af:58:de:98:5f:46:4d:87:b0:20:99:a3:a6:8d:16:
ad:91:f6:67:aa:6f:36:37:2b:14:6c:c7:42:5e:d2:06:7d:58:
4d:d9:ef:14:ab:85:62:4f:b8:af:ff:08:4a:17:56:75:f1:49:
f2:02:fb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:11 2025 by rpki-client