Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft
File: peab2C1ewMe9PV3J-SkC8141ekU.mft (raw, json)
Hash identifier: mbIyRAxXBzwKoZBIrXexFYLdwO1iFufonpF7ZRd+x50=
Subject key identifier: 70:69:4F:5D:EF:F9:45:D0:06:0E:E7:A2:D5:AD:7D:4B:2A:5E:3D:C4
Authority key identifier: A5:E6:9B:D8:2D:5E:C0:C7:BD:3D:5D:C9:F9:29:02:F3:5E:35:7A:45
Certificate issuer: /CN=a5e69bd82d5ec0c7bd3d5dc9f92902f35e357a45
Certificate serial: 01951134C36A98EA191B560C5FBF0536E82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft
Manifest number: 1196
Signing time: Mon 17 Feb 2025 00:00:25 +0000
Manifest this update: Mon 17 Feb 2025 00:00:25 +0000
Manifest next update: Tue 18 Feb 2025 00:00:25 +0000
Files and hashes: 1: bvafkdXWZnMB_mvjbu-MAxSD4Yo.roa (hash: GpeEOD6j0SJeb7dFldEdJfdSWaMlKEyCXikEQdhGnF0=)
2: peab2C1ewMe9PV3J-SkC8141ekU.crl (hash: PF4F5xKlzTOB28RsnR44B4W/owAoKj0ScyLspGAN/AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft
rsync://rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:c3:6a:98:ea:19:1b:56:0c:5f:bf:05:36:e8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e69bd82d5ec0c7bd3d5dc9f92902f35e357a45
Validity
Not Before: Feb 17 00:00:25 2025 GMT
Not After : Feb 18 00:00:25 2025 GMT
Subject: CN=70694f5deff945d0060ee7a2d5ad7d4b2a5e3dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:b2:dc:0b:65:14:98:92:1f:c6:19:ba:e2:
21:d6:84:fa:73:59:4d:10:d8:06:84:05:d0:2f:69:
3d:0f:f6:45:2d:0b:3d:4b:4b:18:f6:15:dc:5e:20:
94:30:d1:6e:23:e1:31:39:aa:80:44:3b:58:10:2a:
b1:29:b6:36:7b:85:82:3e:8d:c4:15:7a:7d:12:65:
6d:9f:07:2d:5c:f5:e9:f4:f7:ee:ce:70:a0:22:15:
da:f9:51:db:99:9f:3e:37:12:cd:b3:b8:98:05:9e:
f8:98:0e:35:d2:0e:a1:a4:1e:bb:40:31:da:59:87:
db:2c:d8:70:c3:a1:4d:3d:58:7c:3a:43:3b:d7:74:
76:5f:8a:53:ee:ac:43:dd:11:c3:97:09:f5:3b:5d:
76:8f:c2:75:e2:41:23:39:69:ff:36:8c:33:3b:84:
27:e9:73:cd:5c:df:72:38:26:bf:4e:66:82:b0:76:
a6:59:b7:a6:e0:b5:62:d7:e3:e5:87:f0:99:d0:04:
f5:c0:fe:38:e3:da:59:05:4a:9d:ba:aa:95:1e:53:
7c:46:f0:b3:77:c1:63:6e:a1:a7:c3:25:3e:7e:26:
bb:db:93:f5:12:40:6d:c4:38:ad:1f:92:f8:03:ff:
3b:03:47:e9:f5:94:70:0a:4f:ac:f6:09:e5:8c:54:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:69:4F:5D:EF:F9:45:D0:06:0E:E7:A2:D5:AD:7D:4B:2A:5E:3D:C4
X509v3 Authority Key Identifier:
keyid:A5:E6:9B:D8:2D:5E:C0:C7:BD:3D:5D:C9:F9:29:02:F3:5E:35:7A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:42:ce:c5:37:74:0b:10:a1:80:4e:87:da:59:1c:12:0c:34:
ee:1b:df:1f:40:74:af:4e:b3:ea:bb:81:bc:db:7b:f1:35:7f:
f0:91:37:fe:96:bc:62:ad:47:fc:e4:d2:44:56:30:29:3a:67:
17:77:0d:46:9b:ed:11:59:5e:a6:f7:05:e0:32:6c:2d:18:e7:
50:bb:0c:0e:3d:b2:0a:54:ae:f3:1f:cf:97:2d:5e:40:bd:b1:
fd:3b:80:c2:c7:44:07:8b:79:c0:94:43:57:77:7c:6b:12:69:
bf:34:2d:48:02:6d:2d:8e:80:78:c3:be:51:58:ae:4b:69:b3:
6d:e1:74:c7:65:ba:49:6e:da:1b:60:69:4a:2e:78:16:f0:39:
ef:de:38:7d:13:54:ac:ea:fd:15:5f:0c:ca:45:7f:cf:7a:40:
cb:d3:96:f3:79:38:1b:53:cb:49:31:52:a5:e9:17:7e:e2:eb:
71:86:b7:13:3a:b7:fb:e6:fd:5d:c3:c9:14:93:9a:8c:0f:a0:
68:e5:73:62:13:9d:19:40:6a:b2:51:8b:1d:ae:52:60:ea:3b:
94:0d:14:78:5b:28:29:82:b7:e6:7c:a4:50:3a:e0:30:9e:32:
d4:02:ee:7b:0f:a4:a2:e4:0d:5e:a7:4c:8b:ac:8d:41:9c:b8:
62:a2:43:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:36 2025 by rpki-client