Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
File: rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft (raw, json)
Hash identifier: Q/oRplBcGseY3Psca/1lUgRSEzbIH+L8aChoLm+nMG4=
Subject key identifier: D0:E8:98:A2:B8:78:A6:88:9B:32:CB:6D:5D:C0:92:92:48:63:A5:92
Authority key identifier: AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
Certificate issuer: /CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Certificate serial: 019510C69BB3AA435F1722FD88B3FE237110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
Manifest number: 0864
Signing time: Sun 16 Feb 2025 22:00:06 +0000
Manifest this update: Sun 16 Feb 2025 22:00:06 +0000
Manifest next update: Mon 17 Feb 2025 22:00:06 +0000
Files and hashes: 1: OUGzudtTbJQVw_1mFk8aHx4RCVE.roa (hash: pnWv/Z4SyVfyPYv0oxknc3DOerNA4xLQHYB0+b/8kWY=)
2: rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl (hash: +C4yf14GEEOv7yabflO8HzBazBLubLegBJerF8aRGGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:9b:b3:aa:43:5f:17:22:fd:88:b3:fe:23:71:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Validity
Not Before: Feb 16 22:00:06 2025 GMT
Not After : Feb 17 22:00:06 2025 GMT
Subject: CN=d0e898a2b878a6889b32cb6d5dc092924863a592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:27:65:76:eb:df:dd:ac:20:12:ea:09:aa:
8f:3f:81:53:dc:98:10:3c:65:7d:93:d3:15:5d:07:
64:8e:94:d8:88:ad:8b:41:bd:84:65:05:d6:ce:41:
5a:c9:6b:2f:fb:20:be:dc:4a:e2:b9:04:56:e7:2a:
1a:24:ac:e4:ba:23:a1:15:7d:92:aa:69:90:28:e5:
ba:a3:f3:a3:a1:e6:71:f5:f8:99:cc:e1:22:fa:ef:
3c:d5:4c:2b:14:e0:ea:ab:70:d2:2d:ba:22:86:e6:
ce:8f:eb:f9:01:a2:2a:59:31:74:ae:28:51:af:ed:
25:fa:1c:37:0a:7c:35:00:f7:99:98:1a:fd:b8:c4:
8e:be:dd:bd:48:ff:28:67:3e:7d:4c:3d:3d:21:82:
57:27:bf:f6:cd:94:e6:06:2f:e7:74:a9:da:c9:06:
3c:d4:dd:09:10:c3:4a:01:f5:ca:65:19:e2:f9:a6:
d8:3f:38:e0:01:0e:ec:ee:1a:52:6b:9f:63:9d:cc:
da:fa:6a:48:38:3c:79:7c:5b:77:a3:2b:4d:f9:1d:
0e:ac:40:10:fd:0d:24:fd:3a:60:dd:16:15:76:d0:
0c:91:5d:06:30:b3:b5:c1:8a:c7:83:9d:aa:3f:d0:
05:7d:62:3c:54:a7:0c:0b:64:a4:bb:95:61:46:ce:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E8:98:A2:B8:78:A6:88:9B:32:CB:6D:5D:C0:92:92:48:63:A5:92
X509v3 Authority Key Identifier:
keyid:AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3c:cf:fc:fe:d1:5b:a9:07:3e:4f:8e:27:fd:01:46:ad:67:
1a:d6:84:97:6d:c9:bb:95:29:bb:30:81:1d:35:97:a4:88:3c:
fa:ef:5c:5e:48:63:bc:73:f8:d9:97:68:74:d5:fa:7c:17:eb:
71:6e:98:19:2b:27:23:ca:87:08:73:10:c1:85:f2:fb:15:40:
e9:d8:8e:47:82:6a:8a:be:bb:b6:3d:ce:c9:6a:9b:d9:32:bd:
b9:80:fe:48:27:7c:be:2f:28:9a:8f:9e:e3:54:41:58:42:2e:
ed:d8:08:a8:0e:17:80:9b:24:59:79:7b:53:48:cb:af:9c:69:
08:54:a2:fe:7d:97:3f:41:de:8e:f8:91:9a:73:5f:bb:65:a8:
9a:c3:4a:3a:1c:ca:0b:74:37:19:56:70:80:39:57:43:b5:d4:
63:bb:a1:ac:fa:54:39:67:6c:23:aa:43:82:c2:23:f9:a4:69:
6e:a3:a4:36:e5:de:94:2c:15:06:e7:13:66:bf:c7:1f:40:94:
75:50:38:d8:d2:b9:a7:0c:b8:f4:a4:da:86:9f:c1:3e:73:d7:
be:5e:70:1d:f5:ae:ea:a7:13:ba:75:fb:ef:65:2a:7b:0c:67:
cd:c4:fb:50:78:c0:a4:78:1e:dd:69:44:ca:16:63:cf:c1:8a:
3c:a2:26:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:14 2025 by rpki-client