Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
File: kAhyNvFhxccF73Pf6eXjmG5xJsg.mft (raw, json)
Hash identifier: H22J5SiP4XdUCOuCZz3jKDsvEICtusxbJqT5aPPYmKk=
Subject key identifier: C3:2F:F4:0B:6F:DC:1A:95:4F:32:6F:62:92:D2:C5:49:A6:6C:C8:21
Authority key identifier: 90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
Certificate issuer: /CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Certificate serial: 019510C7EBAF8884AB65CC1189CFE20BC822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
Manifest number: 0411
Signing time: Sun 16 Feb 2025 22:01:32 +0000
Manifest this update: Sun 16 Feb 2025 22:01:32 +0000
Manifest next update: Mon 17 Feb 2025 22:01:32 +0000
Files and hashes: 1: ilmUYJP9An2tvy3PssJlCv8HfSc.roa (hash: 1qXew5Oe7BdIwNw0qvNlQOP+TeLMGt2S2brGQ7Jg7lc=)
2: kAhyNvFhxccF73Pf6eXjmG5xJsg.crl (hash: ONYpKOwuNAglI2IOS9s3k8WuoBmDuZII5slADrqorTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:eb:af:88:84:ab:65:cc:11:89:cf:e2:0b:c8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Validity
Not Before: Feb 16 22:01:32 2025 GMT
Not After : Feb 17 22:01:32 2025 GMT
Subject: CN=c32ff40b6fdc1a954f326f6292d2c549a66cc821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:49:ea:23:6f:af:b3:dc:c6:d5:c1:4f:91:
dc:fd:72:84:11:db:68:b2:52:f3:63:85:43:cd:22:
be:c2:e4:74:f6:2b:79:90:b6:90:80:74:8e:be:5a:
20:ee:e2:3a:ee:72:ac:05:2a:87:d4:28:22:5a:41:
a8:f3:d0:e1:37:af:78:78:48:c3:dd:7e:ae:3f:37:
4f:e7:c7:19:d0:c9:9d:05:e0:14:fe:2f:06:42:3a:
c7:dd:d9:be:d5:01:4c:be:4c:84:56:8f:0c:b9:db:
0b:cc:01:cf:f9:69:d8:0c:e5:a6:f9:54:cc:e7:27:
5c:ca:4e:e4:f9:19:36:ec:da:0c:50:51:69:e2:4b:
11:a4:e9:7d:cb:6d:2a:5b:06:0d:25:38:8a:d2:11:
a4:33:b9:75:78:8d:3d:19:e0:b3:0c:4c:48:0f:ef:
2c:a6:fd:8f:ea:39:17:e0:b0:c0:85:61:76:07:de:
6b:51:c2:f7:8c:6a:21:51:a9:4f:7e:24:8c:ac:b2:
c7:51:1a:31:99:01:23:42:2e:57:37:76:2b:38:aa:
32:8e:39:ed:d2:61:4b:f7:21:3f:88:b7:1b:8a:5f:
96:d1:d3:5f:6f:73:15:77:f3:37:73:e8:b6:55:8d:
6a:0f:60:4a:a7:8c:9c:14:67:e2:5e:15:17:c3:a0:
80:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2F:F4:0B:6F:DC:1A:95:4F:32:6F:62:92:D2:C5:49:A6:6C:C8:21
X509v3 Authority Key Identifier:
keyid:90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b6:ec:b8:f7:fc:94:bc:cf:38:81:50:96:6a:f9:b2:9d:30:
30:31:2e:7c:2a:c6:03:ab:42:4d:b3:6f:6a:0e:c4:e3:69:85:
08:67:1f:65:a8:a7:7b:72:3d:9a:92:9b:73:f2:d7:3b:6c:0c:
b4:ae:c6:35:95:bc:f2:5b:d4:3d:cc:22:07:72:c6:38:1f:37:
65:fc:9b:9c:d5:21:19:df:53:07:1c:70:82:f5:9c:3b:30:c7:
c7:d1:5d:44:bf:7f:7e:f7:c8:b2:2a:ae:dc:be:9b:af:04:80:
2f:98:b1:55:96:69:bc:92:a0:72:6f:f7:b8:77:96:5b:52:39:
8d:63:30:b5:2c:3c:ef:b0:ce:39:e1:e6:af:f6:e6:e4:11:0a:
fe:18:11:25:14:34:cb:07:52:37:77:7d:4b:d8:e8:e8:fe:4a:
73:15:e7:c9:c0:67:e7:9a:c7:ce:1e:c4:0b:f8:db:b6:8f:5f:
1b:2b:8f:fa:28:06:02:da:d8:d0:c2:f7:1e:9e:7c:58:c2:96:
d8:7c:02:c8:8e:e3:37:32:a7:70:2f:2e:3c:38:e5:df:56:fd:
bb:33:40:4f:d2:d3:ac:e4:80:6b:e4:a4:2a:80:fc:fa:8f:d9:
9d:67:36:3a:09:ec:00:d4:a8:fb:4c:26:5b:36:ac:d5:56:df:
1c:c6:5f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:12 2025 by rpki-client