Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft
File: cCw58YaCB38HK2IRb9TxaQh0r5Y.mft (raw, json)
Hash identifier: wyHZk1J2OxlG9X2pya7WaqI+O7yUln/kBjoCbKtaWk8=
Subject key identifier: DF:41:C6:AA:D8:BC:E6:B7:2F:5F:F2:F8:F9:88:82:B2:F3:80:31:C4
Authority key identifier: 70:2C:39:F1:86:82:07:7F:07:2B:62:11:6F:D4:F1:69:08:74:AF:96
Certificate issuer: /CN=702c39f18682077f072b62116fd4f1690874af96
Certificate serial: 019511D9AD198953901DF9DA259C90DA7857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCw58YaCB38HK2IRb9TxaQh0r5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft
Manifest number: 0798
Signing time: Mon 17 Feb 2025 03:00:33 +0000
Manifest this update: Mon 17 Feb 2025 03:00:33 +0000
Manifest next update: Tue 18 Feb 2025 03:00:33 +0000
Files and hashes: 1: DFyDZ0KcwXioQ8Y-7_O7BreSJ0c.roa (hash: 7LR5rGZdheek5FSN9VgvzhBSKbDgdVslo+r8yKVN2G0=)
2: cCw58YaCB38HK2IRb9TxaQh0r5Y.crl (hash: M90z5PUJ2rVA9YEqsHVh1KWLHD3LRBRDDi/XUTilRsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCw58YaCB38HK2IRb9TxaQh0r5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:ad:19:89:53:90:1d:f9:da:25:9c:90:da:78:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702c39f18682077f072b62116fd4f1690874af96
Validity
Not Before: Feb 17 03:00:33 2025 GMT
Not After : Feb 18 03:00:33 2025 GMT
Subject: CN=df41c6aad8bce6b72f5ff2f8f98882b2f38031c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:70:a2:59:f3:e5:86:c7:04:22:35:e9:34:
5d:f5:8f:df:47:50:72:9e:d8:b1:25:96:44:fc:3b:
fb:b5:91:49:a9:20:b4:ee:42:d8:bf:ee:57:52:af:
25:99:a4:25:c0:dc:03:a2:62:a2:08:ef:f9:62:09:
6b:7d:90:52:94:f2:2e:71:42:56:89:f6:5f:7a:5c:
b8:68:f7:2c:de:00:53:d6:7e:ba:df:7e:d1:9e:aa:
67:a8:dc:11:e4:f8:62:56:07:6b:78:9e:94:4c:42:
87:27:79:54:38:e3:56:67:64:5e:b9:36:e2:7b:90:
ad:57:1d:79:c1:a8:f7:a4:88:48:43:07:45:7e:6d:
92:8b:d5:50:83:8c:1a:81:03:40:ef:b1:b0:4d:5c:
ab:3f:08:ae:97:24:a1:86:04:ca:b2:ff:c3:6b:4e:
e4:4d:ec:d8:aa:20:d9:01:84:7d:97:72:e2:fe:37:
d2:18:f1:45:6b:f7:ad:c4:70:73:97:51:f6:e0:fd:
30:d3:5b:8e:38:87:1d:ef:fb:63:86:82:23:4c:f8:
a7:b9:3b:65:98:46:bf:11:af:4a:b4:23:2f:9f:36:
82:fd:00:6f:4a:c5:88:5a:7c:6a:21:10:97:47:91:
e9:29:79:16:e9:e9:ea:9e:17:07:6c:ff:0c:02:41:
a9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:41:C6:AA:D8:BC:E6:B7:2F:5F:F2:F8:F9:88:82:B2:F3:80:31:C4
X509v3 Authority Key Identifier:
keyid:70:2C:39:F1:86:82:07:7F:07:2B:62:11:6F:D4:F1:69:08:74:AF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCw58YaCB38HK2IRb9TxaQh0r5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:71:b5:15:9b:2d:b5:39:41:39:ba:f7:da:2d:df:98:ae:52:
7e:f3:7a:2c:98:83:af:1f:c8:cf:9e:8e:fa:53:94:19:b0:9d:
ca:10:7c:2f:0f:33:26:45:5d:29:97:63:a7:98:24:32:ac:b5:
1f:58:92:25:00:11:b1:76:6a:4c:1e:01:20:30:ca:c6:b5:3d:
c7:0f:b3:71:de:28:af:a6:87:65:52:13:5a:01:8e:f2:76:f9:
ec:a7:9b:ce:ce:1f:fd:43:79:6e:82:f3:5b:5e:e8:3b:59:7f:
81:99:92:27:8c:27:da:e5:1c:92:59:e7:9f:22:b6:b3:bd:14:
cd:a9:7c:e3:a7:2e:c3:9a:50:77:4e:83:49:16:5b:8e:76:23:
e9:73:53:b5:29:c2:dd:05:59:d7:1d:a7:1d:31:a3:f8:e9:39:
1f:71:b4:a2:a4:53:e8:ee:ec:70:15:73:77:41:91:95:16:4d:
1f:35:73:7f:89:91:96:77:3c:73:c3:60:93:8c:89:df:48:82:
8a:8e:c9:74:03:24:98:4f:55:14:69:8e:d0:4c:5b:68:08:34:
cc:49:69:3a:24:c0:2b:a1:66:3a:f4:2e:22:50:e4:fe:76:e0:
d7:b4:f0:6f:56:e6:a6:34:23:fe:8d:1b:28:02:27:d8:95:19:
9e:05:cd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:13 2025 by rpki-client