Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
File: 84t8pB9ACCKQyorv3sS9KX067Aw.mft (raw, json)
Hash identifier: X3zDAbn5uMhgkKciJpOYoyPHvK719ZqJPkmxqtyk1OE=
Subject key identifier: 15:4C:25:D5:0E:4F:46:B2:9E:66:43:B7:63:15:14:FA:E4:FB:61:6D
Authority key identifier: F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
Certificate issuer: /CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Certificate serial: 019510FDD5D6DB062CB216EC5C85743B29E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
Manifest number: 1457
Signing time: Sun 16 Feb 2025 23:00:25 +0000
Manifest this update: Sun 16 Feb 2025 23:00:25 +0000
Manifest next update: Mon 17 Feb 2025 23:00:25 +0000
Files and hashes: 1: 84t8pB9ACCKQyorv3sS9KX067Aw.crl (hash: FbtQN9Jq/pnfDHnhaqME43ZYJWgjhE0AfHvORHOTQAs=)
2: RTINrk5K9twShi2ws8-7GReQguo.roa (hash: AdVChkjeYt7VqV92ZVz1KihOag+zBOsNiMEkZJtbBCI=)
3: XjFi2Cntd0oPDO451MBhOtZCDnM.roa (hash: 7dr7flPYIycOqvdbpZ43N5qce8PY6ub0N0ZeKnZ45bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:d5:d6:db:06:2c:b2:16:ec:5c:85:74:3b:29:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Validity
Not Before: Feb 16 23:00:25 2025 GMT
Not After : Feb 17 23:00:25 2025 GMT
Subject: CN=154c25d50e4f46b29e6643b7631514fae4fb616d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:53:c6:1c:31:d6:4e:9c:21:0f:c6:6c:4f:
5f:01:1f:2c:a7:cf:7a:a3:57:4b:30:bb:95:cb:39:
2e:48:6c:bc:69:6b:1e:ba:8e:46:81:ff:e8:e0:b8:
b7:53:81:79:10:96:23:2b:39:f1:20:33:3b:ce:35:
fa:51:d5:04:1d:58:df:28:0c:b8:9f:7b:2b:ee:82:
c3:89:bc:2e:a7:97:bb:f2:41:bb:2e:88:f9:bd:de:
2d:7e:ac:8a:9c:40:02:50:69:17:13:ef:ca:90:54:
70:c9:22:8e:04:3b:1d:7a:10:cc:e8:0a:35:f3:39:
c2:44:47:45:31:5f:66:34:59:df:cb:0c:b5:b6:a3:
db:27:bf:6e:11:f4:f3:3a:49:2e:d5:ba:f4:c4:f1:
f8:33:c8:eb:d2:c9:0d:91:d7:da:c1:f6:16:64:b0:
1b:e6:9c:ce:88:c3:bc:1d:ad:47:7e:a5:95:3f:c0:
e0:f6:4b:e1:f6:ac:14:da:ce:3f:45:22:75:3e:a7:
09:0a:95:33:f2:9c:18:c6:65:4a:0a:3a:be:aa:f1:
21:63:16:9d:97:5c:cd:f5:7a:57:42:82:1f:e9:06:
45:dc:c8:82:57:ba:e5:d4:d0:f7:fa:31:db:b0:75:
89:41:e8:24:7b:0d:4a:6b:14:b0:4e:12:63:c8:0a:
02:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4C:25:D5:0E:4F:46:B2:9E:66:43:B7:63:15:14:FA:E4:FB:61:6D
X509v3 Authority Key Identifier:
keyid:F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:49:7e:e6:c9:12:13:42:c4:03:48:e9:94:fd:28:a9:c5:e4:
4e:6c:0c:99:2e:07:36:33:79:6b:02:5b:05:1c:1d:ea:5c:58:
67:d9:c9:b2:49:9e:ad:24:b2:db:5f:76:c5:9f:94:ef:74:74:
c2:a7:86:8d:e2:98:fe:f7:9b:ab:2c:5c:80:7d:e6:5d:2d:2e:
d6:e5:f5:32:96:2b:39:69:4e:86:f0:2c:67:a5:29:79:97:e3:
99:d0:90:41:07:fc:7c:b0:cb:5f:29:34:30:dc:fb:28:44:cb:
49:c6:31:74:ca:cb:ab:7c:a8:f8:a2:67:f8:85:cc:74:c1:e7:
1f:58:31:1c:a2:dc:16:f8:06:b4:fa:09:ee:4c:41:60:12:49:
bf:38:6a:3b:ad:b3:1b:a6:b7:29:3e:ad:f6:9a:ce:db:af:ed:
4a:56:ce:08:a0:95:5b:e9:59:8b:40:65:c6:95:ac:7f:5d:10:
ec:4f:46:6f:35:82:39:74:48:4c:6f:e6:e6:51:d7:0d:d0:8f:
66:d8:be:5f:e8:fc:c3:cf:36:a5:91:9b:89:73:1c:12:0c:75:
ac:5a:f1:ef:9e:2d:18:9c:4e:a3:7d:83:80:e1:c9:87:36:c5:
10:61:75:3e:67:ff:7e:1d:d7:d6:17:d2:1c:d7:8c:42:96:72:
a9:7b:3c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:02 2025 by rpki-client