Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
File: r0j2f1P86YkdQVk6yEyuMEq_y88.mft (raw, json)
Hash identifier: BKk3anHCxzkz7TF+gAiEePpoaywxDKt4CH5Sr19tXFQ=
Subject key identifier: B9:49:55:B4:14:8B:19:22:26:8D:8E:F9:09:BB:E6:79:4D:89:F7:E9
Authority key identifier: AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
Certificate issuer: /CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Certificate serial: 019512472D516A0E896CF8D4B874D27A8526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 05:00:09 +0000
Manifest this update: Mon 17 Feb 2025 05:00:09 +0000
Manifest next update: Tue 18 Feb 2025 05:00:09 +0000
Files and hashes: 1: LJm4ejx93tTGGSMSp9-CoJADCNU.roa (hash: enkxB1ym9D6j6OauD2B7/3J70MmuSWDzwk6AA84rwRE=)
2: Rx5Tk2OFD4AUCGaXo47NJtzGllk.roa (hash: comS5qd1rLPpE+d2v/ddO3rLzCRrN86e4IPWwWweF9Y=)
3: r0j2f1P86YkdQVk6yEyuMEq_y88.crl (hash: 5RA3Jg/+7axO7UBhgdLNSCa4Kbe1Dp3fteum7e/1a4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:2d:51:6a:0e:89:6c:f8:d4:b8:74:d2:7a:85:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Validity
Not Before: Feb 17 05:00:09 2025 GMT
Not After : Feb 18 05:00:09 2025 GMT
Subject: CN=b94955b4148b1922268d8ef909bbe6794d89f7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:84:56:a7:7a:3d:4a:b1:56:b4:6c:7b:ff:
4f:f7:3f:8b:57:e3:81:74:e4:4e:2b:e3:11:c0:1b:
7f:8d:19:c4:6c:62:41:1c:fa:68:e3:68:32:72:9e:
5e:7e:34:8e:bf:e9:28:cd:a1:fc:79:2a:d0:e5:72:
6c:86:57:f9:d7:ab:a0:37:b0:bb:0b:81:35:43:9f:
f6:8a:95:98:32:86:36:11:f6:ea:d4:eb:d3:b1:1e:
54:e6:13:4f:95:2b:58:54:04:fc:b6:cb:8a:67:55:
62:a9:f4:67:be:93:99:ba:05:12:b4:c7:a8:c3:1d:
89:1a:69:28:95:df:b6:ff:dd:be:4f:19:6f:03:29:
59:c7:63:27:4f:d1:51:a4:a0:92:cc:96:f2:0e:94:
b9:a7:5f:f1:ef:f3:3c:18:53:02:c0:dd:85:8c:c9:
fc:74:39:6b:6f:22:fc:bd:a2:63:2e:dc:b7:af:0e:
08:39:ba:a0:6f:48:60:e4:97:1b:e0:0f:fb:83:54:
a9:4d:e6:a2:8d:0c:85:a5:ea:be:ec:0f:28:06:2b:
72:9d:20:8c:0d:86:04:c9:0a:d0:77:99:eb:26:ae:
f2:6e:f7:63:3c:8e:36:5a:4d:b1:53:da:30:4e:7e:
cd:16:df:68:f1:a4:9d:05:0d:a4:27:76:e0:74:29:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:49:55:B4:14:8B:19:22:26:8D:8E:F9:09:BB:E6:79:4D:89:F7:E9
X509v3 Authority Key Identifier:
keyid:AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ef:fd:30:d2:66:31:ab:54:04:70:a3:e0:86:59:ee:cd:fa:
14:73:96:30:2b:c6:65:0e:27:16:6a:10:1d:42:6c:5e:29:ae:
7a:d0:ce:4d:7a:2a:16:67:02:6a:38:54:27:eb:85:2c:07:9a:
3b:d1:bf:a6:f5:b9:d9:ff:f0:b1:e2:cc:4d:dd:18:7e:ff:50:
7d:b3:8b:9c:ed:f7:fe:04:a0:e3:78:c2:b6:68:79:7d:14:07:
b7:44:a6:ad:8b:7b:f3:3f:f4:c6:96:df:49:f9:f2:fd:b1:36:
88:0d:cc:d2:c2:c1:a2:2b:62:59:12:b1:bb:b7:0c:b6:14:01:
c7:1c:65:b8:ee:73:a7:15:44:16:7c:86:88:a5:69:5a:fb:94:
11:6f:e4:71:04:bf:12:ed:3d:08:d7:94:c5:0f:07:01:1f:2b:
1f:9c:28:2e:9a:13:c9:d2:e9:51:4f:13:26:7c:09:2b:97:8b:
4c:d1:bc:1b:24:be:8b:27:17:97:9c:d7:8d:69:e8:e1:a5:16:
b8:46:39:e5:68:5e:74:70:e0:b4:70:64:fa:49:b3:69:1f:3d:
84:2d:8c:0b:d7:8f:8d:74:06:4a:6d:56:4a:a9:a4:91:0f:64:
08:b7:de:04:03:33:cf:3a:af:b6:46:65:d4:af:2b:77:f7:15:
72:99:9a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:10 2025 by rpki-client