Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
File: 8SsbaOoQk7zueNBxkubYw_cDAs8.mft (raw, json)
Hash identifier: 5EHX/6msbFNj0+Gv2YAszADKwIWFkoHpeW/jTmdoXDo=
Subject key identifier: 51:13:31:6D:48:DD:9D:35:B2:8A:0E:06:BC:DF:E8:7F:F2:D0:E5:4D
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial: 019510C80D8F3A612008B69865048E6F1ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
Manifest number: 1342
Signing time: Sun 16 Feb 2025 22:01:40 +0000
Manifest this update: Sun 16 Feb 2025 22:01:40 +0000
Manifest next update: Mon 17 Feb 2025 22:01:40 +0000
Files and hashes: 1: 8SsbaOoQk7zueNBxkubYw_cDAs8.crl (hash: 1CXqAoigUuTAeQaTIEN+gmeVwdTpvLpnZaZ3EpNHpEI=)
2: bKPhCw0mFqwfHuOY5bTkew_cDWA.roa (hash: GZO9dwOguzhoWcajFIoo6bMBVjK4nlEVTDqTZEZzar4=)
3: u_s4QKsF9p1kSN0KedlqNHJpJkI.roa (hash: 8YDGRlWAcN7f5DRHYPeywi/SAyIqYgv/xJQxk+e27Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c8:0d:8f:3a:61:20:08:b6:98:65:04:8e:6f:1a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Validity
Not Before: Feb 16 22:01:40 2025 GMT
Not After : Feb 17 22:01:40 2025 GMT
Subject: CN=5113316d48dd9d35b28a0e06bcdfe87ff2d0e54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:16:33:37:63:20:18:8d:b2:f1:3d:05:de:b8:
b2:1e:b0:52:b5:01:fc:a2:a1:75:5b:97:06:77:93:
52:c1:ae:4b:98:3f:50:b6:93:7f:17:ab:f7:02:0c:
08:eb:5f:c4:32:3c:ee:2f:ac:f2:81:a6:3c:b3:b9:
32:9a:17:1f:44:f9:38:ae:00:7a:f3:3f:da:e6:74:
27:bd:d2:bd:8f:40:dd:fb:d6:79:44:0d:11:4f:48:
3f:93:da:b9:f0:28:9e:e4:a3:df:5d:37:b7:b9:32:
f2:a0:00:df:fa:f4:ae:0c:8d:52:7c:3c:f9:69:b9:
a5:d2:0e:3e:ee:98:62:9d:e4:d7:9e:24:24:a4:b7:
33:a2:e8:1e:27:3c:6a:9b:a6:c9:fa:11:8f:c6:d3:
18:d2:4f:18:e2:4f:33:60:5a:18:a8:06:b4:96:8a:
6e:4e:f5:c9:62:0a:2a:ee:7d:bf:04:14:27:a5:e6:
b3:04:97:a7:33:f9:0e:37:1c:ed:26:10:2c:96:6a:
73:0f:00:76:ae:1a:16:dd:6c:4d:66:95:e1:6c:ba:
4b:89:4a:e2:dd:f0:f6:60:2d:36:f0:9c:0a:0e:03:
79:6a:d0:c6:ec:82:b3:1b:c9:5f:b6:ae:e6:9e:92:
26:40:ea:4a:ac:ee:c8:17:a0:9b:43:cb:d6:35:35:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:13:31:6D:48:DD:9D:35:B2:8A:0E:06:BC:DF:E8:7F:F2:D0:E5:4D
X509v3 Authority Key Identifier:
keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ab:dd:cb:5e:a6:a6:83:4a:35:3f:18:10:15:ec:9c:28:3c:
02:7c:95:16:ed:a1:6e:f5:5c:fc:93:bb:a0:7e:cf:14:44:43:
43:8d:1a:00:2a:4e:62:ee:28:00:1f:84:be:56:1c:29:55:a4:
74:e7:ef:97:44:e3:09:34:cf:a1:a9:37:f8:be:23:96:89:96:
18:01:79:5e:68:a4:1d:9f:7a:6b:33:86:8f:6e:8c:5f:d9:36:
f5:8e:fd:82:e7:06:fb:f1:63:dc:af:3b:5c:2b:d6:b1:d0:2f:
a1:83:06:62:38:f4:d8:ec:d2:27:ab:ca:c7:e4:8f:36:56:cc:
45:71:2b:8a:f1:ce:f4:52:c6:b6:3e:ea:d2:ee:b0:95:df:cb:
98:f1:54:b2:12:20:c7:ec:fa:01:50:fd:96:9b:fb:73:05:f3:
2c:2f:b1:2a:97:e2:63:7f:1b:01:ff:8e:7a:9f:3d:f3:48:46:
9f:51:34:0c:df:5b:78:38:c4:9f:b7:65:07:e4:4e:af:79:84:
63:20:fa:7e:52:35:c0:93:88:87:a3:92:65:c5:29:af:5b:58:
0a:97:ad:72:13:8e:bd:01:fa:99:2e:92:22:ae:fa:97:06:7f:
92:d9:63:83:b7:70:24:61:da:e2:95:b9:a6:8e:d1:65:e2:8f:
62:3b:d6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:46 2025 by rpki-client