Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
File: Rq9sozU0uFMLnyFOyOqT3SW9H88.mft (raw, json)
Hash identifier: LNG7Q3KPENShsa9wM3AT3s4nKk5w6olaniO9hUrC/Cw=
Subject key identifier: 2C:88:D7:EE:E4:37:7D:0D:F0:5E:03:BF:4A:C7:94:71:E8:9B:5C:72
Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
Certificate issuer: /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Certificate serial: 019511D9AD32864D59FC5F5B1A2C5433DBC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
Manifest number: 0A01
Signing time: Mon 17 Feb 2025 03:00:33 +0000
Manifest this update: Mon 17 Feb 2025 03:00:33 +0000
Manifest next update: Tue 18 Feb 2025 03:00:33 +0000
Files and hashes: 1: 1-DjrG4WtOf5mfvjc_0ex1qmM7_0.roa (hash: hnXFvQKmTthNRY+MRdmK+ICiF4IvzT+rwNQnD35oyyk=)
2: Rq9sozU0uFMLnyFOyOqT3SW9H88.crl (hash: QyKHdYj/dRMcSfiQFOB4yjMuk1tZFGbcYGShgEPx2dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:ad:32:86:4d:59:fc:5f:5b:1a:2c:54:33:db:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Validity
Not Before: Feb 17 03:00:33 2025 GMT
Not After : Feb 18 03:00:33 2025 GMT
Subject: CN=2c88d7eee4377d0df05e03bf4ac79471e89b5c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f6:88:1c:13:89:0a:de:cc:42:30:c3:97:b5:
d7:b6:c6:57:08:b3:07:60:f1:bb:ec:9a:ad:1a:10:
f4:e1:3a:ee:b2:47:22:11:e3:05:a8:7d:8e:54:42:
52:6b:c5:e0:d3:71:bc:f0:ba:74:41:7a:b8:fb:bd:
3e:69:32:0a:88:3f:df:fc:4e:09:d0:1c:1a:6e:bd:
10:ba:07:2c:47:1a:64:37:99:74:2e:c2:46:ec:ef:
12:6f:f8:b4:69:b6:d3:a7:70:9f:b6:28:66:a0:52:
c5:65:e5:41:d0:cf:3a:d9:94:a0:97:7e:bb:42:a9:
3d:8b:77:d6:ae:5c:1e:7a:ae:21:00:5e:c8:d7:c5:
b5:19:c7:0f:9e:22:24:2d:45:40:9e:41:68:fd:9d:
8f:69:de:d9:71:d6:9a:b0:6d:44:44:12:dd:d4:b1:
73:89:13:20:5c:f4:61:d0:91:6b:ab:47:b7:c8:35:
c7:29:4a:74:e5:4c:ef:6c:05:b4:a3:c1:8b:57:12:
bc:da:08:d7:fe:43:8c:14:01:12:a8:7f:8b:a0:c7:
35:d9:d9:2b:dd:80:ec:95:9a:11:66:ad:60:7d:45:
ec:94:23:12:9e:4c:fa:49:c1:b7:bb:af:70:a1:b8:
0a:67:9e:bc:e2:3c:f5:6d:a9:ad:c0:5c:a1:7f:2c:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:88:D7:EE:E4:37:7D:0D:F0:5E:03:BF:4A:C7:94:71:E8:9B:5C:72
X509v3 Authority Key Identifier:
keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e3:08:bb:85:47:67:41:79:c0:40:f1:e2:8a:98:91:40:56:
16:91:77:4c:34:13:28:e2:df:f5:4c:8e:6e:d8:40:dd:24:45:
09:6f:ae:ba:b3:c2:15:54:fe:55:5b:ad:56:54:c0:03:b1:32:
15:10:e3:fa:3d:1f:1b:07:75:a9:1b:df:6d:a7:75:ee:2c:14:
67:95:0d:4b:f5:18:89:2d:8f:df:1a:03:68:9d:6c:5c:f3:68:
e0:74:55:2c:c5:3a:e0:09:b5:55:8e:2f:85:24:ee:58:67:08:
1b:d8:31:47:ea:ce:1e:45:4f:ee:c4:b4:05:7c:f6:cf:1d:5e:
dc:89:ad:9f:73:23:16:39:aa:cd:e3:b9:cd:74:0a:eb:96:40:
cc:22:a9:39:44:cb:1e:06:a9:6f:f2:97:4c:1e:7a:b0:09:cb:
f8:10:89:f1:6b:f2:49:56:72:0f:d7:ef:06:6d:b7:e3:7c:c9:
e5:d4:3f:2b:45:27:cd:30:e8:55:1b:a6:6d:19:d0:a4:68:a3:
9b:a1:4f:c2:74:7d:0a:68:7c:d1:31:20:a6:d8:6c:51:12:22:
c4:b9:6e:f8:b7:8c:d2:bc:6b:54:f5:31:fa:5f:71:d2:0a:66:
69:b3:66:f6:4e:28:75:da:a8:a7:1d:2e:05:58:4a:d4:f3:8b:
17:29:96:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:45 2025 by rpki-client