
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File: dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier: SdebiEXnITH7JIpIEfa0mRiK+gcz9sHh8cep+9S0Swg=
Subject key identifier: 16:EF:74:A4:AF:E4:F1:E7:D1:42:A9:E5:6A:4B:E7:30:0B:F7:CC:12
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer: /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial: 0195274EF3F43DCE024BA845DF2E0038CD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number: 0FE5
Signing time: Fri 21 Feb 2025 07:00:40 +0000
Manifest this update: Fri 21 Feb 2025 07:00:40 +0000
Manifest next update: Sat 22 Feb 2025 07:00:40 +0000
Files and hashes: 1: JmRIXqWgLbHOS_DUn9tYXP3VwvE.roa (hash: 07OywnLuhNnV2ffg9k1J1SDz7HRBDcbP+ENwBGJ8ZCU=)
2: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: o+1+70JHbhFbt/evJLdKbVeMK8lKU2IH0bCGX+Zn8sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 02:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:27:4e:f3:f4:3d:ce:02:4b:a8:45:df:2e:00:38:cd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Validity
Not Before: Feb 21 07:00:40 2025 GMT
Not After : Feb 22 07:00:40 2025 GMT
Subject: CN=16ef74a4afe4f1e7d142a9e56a4be7300bf7cc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ea:a9:2e:f7:87:d2:47:25:7b:1a:68:a9:8a:
e8:21:84:ab:60:46:cc:04:fc:a9:16:15:b8:fb:45:
b8:9d:c6:d6:45:16:4f:ef:fe:be:3e:71:a9:7b:c5:
12:b3:13:f2:b0:57:6e:6c:69:d9:88:57:cb:1f:46:
e9:62:56:2f:87:b1:5d:7f:eb:c8:b4:00:24:17:d5:
1f:18:b2:3c:2e:dd:74:d4:bf:d2:69:82:ae:94:80:
fc:94:b8:5f:fc:4b:13:96:ac:68:58:b3:df:38:3a:
5a:c6:ed:d9:8d:9c:18:b3:02:67:25:e8:a4:b4:e8:
45:1e:87:da:e9:7c:6a:a0:5e:3b:a9:18:0a:55:43:
3b:30:eb:5b:50:da:4f:03:ff:0d:e3:d8:06:09:d5:
c4:14:b0:66:db:53:a2:20:7f:ca:85:75:81:06:f4:
a8:ca:80:00:98:32:1a:7c:89:7a:6c:cd:9f:2a:a7:
52:4c:36:0e:e2:9a:b7:3b:98:fb:e1:59:02:3a:11:
1c:4a:2c:13:11:b1:88:74:84:88:16:a9:e3:e7:fe:
fa:dd:0e:d8:6e:dd:be:f9:34:70:77:db:e3:31:a4:
6f:e6:2a:9d:18:3c:6d:e0:f6:6e:14:50:09:b3:3e:
43:c1:09:5c:17:a3:30:1b:67:ab:a6:06:9f:e4:62:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EF:74:A4:AF:E4:F1:E7:D1:42:A9:E5:6A:4B:E7:30:0B:F7:CC:12
X509v3 Authority Key Identifier:
keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:83:d1:45:ee:36:bc:c6:e9:c8:68:72:2f:c5:90:50:0f:da:
b9:2a:ea:90:23:c2:6b:2a:6b:3b:49:42:e9:d5:8c:2b:05:af:
02:81:57:ad:a6:4d:10:1c:ca:a5:93:3c:13:ab:4d:4d:b7:1b:
6f:4f:a9:4e:60:df:56:ac:e0:0b:31:52:a8:8b:59:ec:8f:f9:
69:22:64:01:5a:21:ff:67:93:d7:2e:af:da:08:2f:a9:01:52:
15:85:1b:f1:56:40:0d:65:33:48:2e:13:87:fe:e6:cd:e5:7b:
c5:2e:cf:85:d5:87:36:87:5b:3f:cc:ab:ac:57:aa:44:2b:e3:
b0:80:b0:7b:a9:76:d4:3f:13:da:d7:dd:3c:d1:ac:a0:6d:3d:
2b:04:06:3e:e0:d5:56:11:e7:04:41:01:a1:91:be:4a:fd:85:
d4:10:7b:38:b6:e1:bf:96:1a:56:b0:4a:c4:cf:ec:0c:32:19:
f1:b5:9f:ae:f0:57:68:81:d0:6c:92:38:75:43:58:94:9a:cf:
10:e0:61:8b:91:be:cf:fb:38:14:05:01:28:cd:7a:71:57:6b:
a1:87:5c:ab:aa:97:87:e6:72:ef:37:d5:64:e3:6c:22:3a:af:
6a:e7:b5:b5:6d:42:9d:f1:21:15:d4:c5:ab:9c:2e:82:6e:02:
5d:fc:83:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:59:59 2025 by rpki-client