Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
File: pIqHxF2XIEZJBbamsJM_fDlRGS0.mft (raw, json)
Hash identifier: 9X4PQNP2O/CJ/AFdX0prvxC++ad3n2RtnERbXS3fjQc=
Subject key identifier: 49:8B:B0:61:98:FA:9B:63:51:ED:5D:2A:DF:8F:CE:65:39:EF:2C:98
Authority key identifier: A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
Certificate issuer: /CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Certificate serial: 0195124796F5914A6915F910578E48383C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 05:00:36 +0000
Manifest this update: Mon 17 Feb 2025 05:00:36 +0000
Manifest next update: Tue 18 Feb 2025 05:00:36 +0000
Files and hashes: 1: 3slyfZXxVcWO-rhXLBn1z60ShoQ.roa (hash: aD+13qB77l1eWjcaYEDaoeBPF19MIy6v6JQPzBT88zc=)
2: pIqHxF2XIEZJBbamsJM_fDlRGS0.crl (hash: Wk4jHGQP+qvKbYmUQIxSIDa/oQ1MPDD+jUrXfiNwd7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:96:f5:91:4a:69:15:f9:10:57:8e:48:38:3c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Validity
Not Before: Feb 17 05:00:36 2025 GMT
Not After : Feb 18 05:00:36 2025 GMT
Subject: CN=498bb06198fa9b6351ed5d2adf8fce6539ef2c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:85:da:92:02:b6:5c:11:58:95:b2:5e:48:8e:
9d:2f:3d:2e:37:d4:e2:f4:e5:c9:90:d5:48:91:87:
d9:8a:00:2a:23:c0:94:c3:88:d4:64:26:a3:58:8e:
fc:a1:9c:a7:a1:43:07:e3:ea:b7:37:f3:5a:cc:71:
1c:c5:d5:ca:91:94:df:79:f5:6b:a4:24:dc:cd:5d:
4e:5f:f0:2e:67:e5:db:78:d0:d8:79:4b:c5:8d:24:
68:55:f1:b0:ab:0d:81:b9:96:b8:27:1a:8b:3a:9f:
4e:83:eb:68:51:0f:1b:61:a2:1c:d1:13:f6:b1:31:
6f:e8:b7:67:2a:74:06:da:ec:83:43:31:93:e9:7d:
9e:a8:fc:51:4b:38:a2:53:22:4a:82:61:91:fd:a6:
c5:dc:9d:73:e1:f5:56:a0:8d:88:0a:e1:65:ea:94:
2b:f6:0f:51:b7:7f:76:39:60:96:19:0c:98:96:d2:
c9:31:09:f6:7e:44:16:6b:fc:f0:13:8d:eb:15:dd:
62:95:c7:71:e8:73:07:fc:9b:fb:1f:a2:75:06:90:
f2:23:c6:09:b2:76:a6:4d:58:53:c8:ce:3e:99:60:
f0:93:14:a4:98:f0:a4:fd:3b:7b:0b:24:a9:24:45:
34:67:0b:52:5d:9b:2a:1f:9d:85:49:cb:35:c6:79:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8B:B0:61:98:FA:9B:63:51:ED:5D:2A:DF:8F:CE:65:39:EF:2C:98
X509v3 Authority Key Identifier:
keyid:A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2b:43:b2:9f:01:29:cc:75:d1:67:ad:b9:af:16:c6:b7:5b:
bc:56:19:0e:b0:70:6a:bf:7e:85:cf:a7:09:38:a9:43:b3:34:
9c:f1:e6:f8:ed:35:f0:41:85:ab:fb:db:cf:07:d2:47:8e:2d:
1f:6b:76:b9:06:78:21:ab:9b:3f:03:71:38:ab:59:dc:cf:36:
e2:bf:08:4f:57:ff:20:54:d8:54:08:b0:6d:fd:8a:6c:c8:fb:
f6:65:6d:4a:7c:79:dd:61:cd:f7:0b:00:29:d3:01:20:0b:6d:
44:2c:2d:9c:9f:5c:bc:47:5a:93:29:5a:73:f4:24:d7:4b:d5:
86:8a:49:87:90:46:13:23:e5:a2:1e:1a:75:28:c1:eb:a2:23:
b1:45:ff:57:af:df:7f:c7:46:35:bc:fd:30:bb:1e:6b:9a:b9:
c9:cc:b6:fa:26:c8:de:57:b4:37:b2:1a:d5:23:32:65:3e:15:
f9:16:9d:a8:7b:d1:78:b5:87:de:c9:94:fb:cb:2d:cf:66:9e:
03:d5:42:7d:bf:21:4d:d7:85:32:3f:de:d9:bf:c7:0f:e5:89:
eb:49:2a:f4:a6:76:03:41:8d:5b:ff:c7:d3:3a:b0:b6:0f:e5:
d2:81:44:34:85:ad:1b:92:b3:7e:2e:fc:c4:7f:2c:d9:9c:2f:
9c:06:2b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:04 2025 by rpki-client