Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.mft
File: 1T9rmtMLZVX6WlTn6xUrK_QS8iY.mft (raw, json)
Hash identifier: dBMeS5inSt/33rgOq6n+vHusVbjkrrETJLV19LCN43A=
Subject key identifier: 17:32:13:D0:72:AF:9B:2D:C4:42:06:41:5F:C9:32:A2:E6:42:C2:EA
Authority key identifier: D5:3F:6B:9A:D3:0B:65:55:FA:5A:54:E7:EB:15:2B:2B:F4:12:F2:26
Certificate issuer: /CN=d53f6b9ad30b6555fa5a54e7eb152b2bf412f226
Certificate serial: 01951134D47961F0BE4E8351C1116177F49C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T9rmtMLZVX6WlTn6xUrK_QS8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.mft
Manifest number: 037D
Signing time: Mon 17 Feb 2025 00:00:29 +0000
Manifest this update: Mon 17 Feb 2025 00:00:29 +0000
Manifest next update: Tue 18 Feb 2025 00:00:29 +0000
Files and hashes: 1: 1T9rmtMLZVX6WlTn6xUrK_QS8iY.crl (hash: X6GzmQivb0lXyZdddj/naFqTT87YwStZSztPMMkB8FA=)
2: ygeNrsucj-rGn8JTBcNIhnNtCcU.roa (hash: KBkElyIB1u/4stezxnXDGq1lV/mlLUiRmV5TkOx/9qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1T9rmtMLZVX6WlTn6xUrK_QS8iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:d4:79:61:f0:be:4e:83:51:c1:11:61:77:f4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53f6b9ad30b6555fa5a54e7eb152b2bf412f226
Validity
Not Before: Feb 17 00:00:29 2025 GMT
Not After : Feb 18 00:00:29 2025 GMT
Subject: CN=173213d072af9b2dc44206415fc932a2e642c2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:c5:75:2f:25:ec:58:84:58:81:ab:61:a8:
76:e3:f6:92:47:a9:17:dc:b0:a0:6b:2d:a7:4f:bb:
5a:61:de:e3:4d:68:5c:32:2e:0e:9c:f0:4b:e7:17:
f8:48:96:f9:cf:04:e5:c9:24:de:be:d2:45:17:09:
cb:42:19:05:b8:ac:95:af:70:7b:43:77:f7:63:b5:
08:eb:12:bb:6c:6c:ed:bc:08:04:2f:4f:c9:71:39:
b4:ad:89:be:2a:7a:d0:54:e0:5f:1a:9e:c4:a9:7d:
f6:f7:57:76:f9:4c:1f:e0:f2:3c:1a:36:c4:e3:a6:
b8:ce:64:a7:f4:c5:c1:77:39:34:71:54:ab:6d:2a:
7c:20:94:19:e0:d0:db:7e:c7:70:c5:b1:a5:24:0e:
5d:cc:2e:76:8a:6a:49:4e:1b:a7:35:f7:3d:6e:eb:
6d:04:28:a1:51:b5:10:86:93:83:30:57:87:94:db:
2c:f2:45:01:0c:6a:e4:e4:3c:a3:9e:90:3e:9c:b6:
76:09:e7:f8:5f:37:70:ee:56:16:0f:f1:c6:07:63:
a5:7b:0e:32:4b:9b:03:a6:14:c8:27:88:7f:df:8a:
74:87:d2:cf:9d:c3:56:d8:43:68:2d:79:99:2f:a4:
e4:2c:7e:19:8d:76:3b:c4:27:83:eb:32:3d:43:73:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:32:13:D0:72:AF:9B:2D:C4:42:06:41:5F:C9:32:A2:E6:42:C2:EA
X509v3 Authority Key Identifier:
keyid:D5:3F:6B:9A:D3:0B:65:55:FA:5A:54:E7:EB:15:2B:2B:F4:12:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T9rmtMLZVX6WlTn6xUrK_QS8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7e:c6:a1:99:14:59:b7:ac:71:83:aa:15:e4:13:87:76:82:
7f:96:59:ce:d6:42:6b:6a:14:ab:14:11:90:56:35:44:57:f3:
67:7b:1e:c6:55:f5:4a:77:03:bf:52:b9:8f:2f:bb:fb:36:ca:
fb:17:a1:89:1d:d4:e3:16:a7:6b:56:12:32:57:a7:3e:6a:bd:
1f:6a:1c:2a:c1:3b:16:74:0d:bc:70:19:53:8f:6a:f2:07:6f:
70:7c:05:5c:11:a9:9d:25:d4:e4:a5:46:41:71:c9:d3:6c:fe:
2e:d2:ad:0c:46:b9:7c:c7:7d:a9:e2:19:40:e2:86:ce:26:d6:
9f:d7:28:db:5b:c3:98:09:1b:90:ee:1f:69:73:ac:f7:c9:2a:
01:23:94:c7:10:93:78:a4:d8:1f:35:ba:df:5d:51:62:90:c1:
d4:b7:ba:c7:b2:09:2a:6f:a5:6a:3f:4e:6c:11:49:cc:51:13:
b9:4b:59:ac:ce:19:41:52:fb:c6:a9:bc:b0:20:91:1f:19:19:
ef:55:06:69:8c:d0:e1:9e:de:73:d0:5c:0c:07:ea:85:66:3d:
f7:0c:51:3e:e4:63:e0:72:c8:8f:d1:3a:0b:b6:6e:9c:59:4b:
c0:ba:26:a7:5e:9c:bd:44:be:db:07:9a:a1:36:34:68:5c:27:
1b:bc:7c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:53 2025 by rpki-client