Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
File: p18lqzxmADstWvg9KzZR-I0VHyo.mft (raw, json)
Hash identifier: a8+MX20rnIs61Bi/OLij6fXlWkjA5aqPB/pMNW15mSI=
Subject key identifier: E6:04:50:CB:51:4A:C5:35:A0:50:8C:D6:E1:C1:E0:33:8D:5D:BD:05
Authority key identifier: A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A
Certificate issuer: /CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
Certificate serial: 0194C4D1419EACB415BDFDAC9C55AFD9D70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
Manifest number: 05CA
Signing time: Sun 02 Feb 2025 04:00:35 +0000
Manifest this update: Sun 02 Feb 2025 04:00:35 +0000
Manifest next update: Mon 03 Feb 2025 04:00:35 +0000
Files and hashes: 1: Ox_5wctFyZuvInmQs0hviVdHYTY.roa (hash: g8iHju69S1V2EgutTovP9pVMh3pNWKkzCgYSyMGlRgE=)
2: p18lqzxmADstWvg9KzZR-I0VHyo.crl (hash: y2+3avPnLpsF9wtKa3EDr8Efjd6Ay+vedx6l/LpgNjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:41:9e:ac:b4:15:bd:fd:ac:9c:55:af:d9:d7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
Validity
Not Before: Feb 2 04:00:35 2025 GMT
Not After : Feb 3 04:00:35 2025 GMT
Subject: CN=e60450cb514ac535a0508cd6e1c1e0338d5dbd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:42:1f:6b:bb:55:35:9d:b1:d0:9b:8c:35:
0f:61:24:5e:a1:17:b0:a6:69:62:ec:35:ed:51:57:
8f:2a:c1:53:4d:b7:6c:dc:16:51:f9:e6:5a:e6:a9:
44:13:67:b4:9c:ba:2c:a2:a2:08:75:22:32:b4:22:
bd:0a:91:d5:c1:08:54:b8:3b:17:83:ca:27:67:db:
2a:b5:4c:15:0e:a5:4e:44:22:58:0f:c5:19:22:b0:
78:0e:42:97:8a:3a:49:04:71:06:f7:b4:9b:2d:33:
a3:29:74:93:5f:92:c1:50:34:84:3a:70:86:5b:53:
5b:58:b5:8e:52:be:44:df:44:3f:f4:31:07:c5:3e:
48:ed:13:3f:99:a4:86:d0:61:c1:47:69:bb:bb:03:
8c:8d:92:7c:76:e3:1e:28:f6:31:d5:af:ed:68:96:
86:4e:82:5e:c0:fa:d5:6d:08:d5:33:7a:d1:85:1e:
d7:7b:ee:90:95:fb:4e:12:06:0a:66:e4:82:f5:9b:
0e:cf:4f:43:2a:bc:7c:01:16:2c:26:63:0e:7c:52:
32:16:68:6a:aa:85:a0:33:f8:02:6a:63:15:cf:a5:
a8:5c:3f:19:6b:60:b1:c3:05:4d:f0:43:0d:55:ed:
a4:cd:e6:f5:08:ab:10:71:d2:25:e1:a7:d6:a8:6e:
a7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:04:50:CB:51:4A:C5:35:A0:50:8C:D6:E1:C1:E0:33:8D:5D:BD:05
X509v3 Authority Key Identifier:
keyid:A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:69:6e:e7:5b:01:9e:04:be:c6:8d:86:a5:4d:41:52:70:70:
3d:82:ef:05:07:97:55:8d:2e:2d:ef:f5:ad:03:54:70:fc:21:
b7:3a:1b:99:dc:09:b9:e5:b1:98:a5:db:8c:69:eb:37:49:2c:
02:fc:9a:e5:bb:aa:5b:9e:53:b4:aa:51:4b:a4:08:7a:9e:a2:
d1:f2:0f:73:56:d9:91:81:76:7e:c9:08:c1:04:79:b7:ef:3b:
bf:52:89:be:28:97:37:23:43:8b:89:81:6f:d7:62:c2:ac:5e:
29:23:e1:8d:86:b5:5b:75:fe:72:69:61:da:31:5f:96:44:1c:
8b:02:6a:89:b9:a5:1e:8e:67:21:e8:c5:16:14:de:a2:80:d0:
c0:90:6e:85:3e:a3:c2:43:fb:98:ca:27:fd:ab:cd:41:41:55:
af:ee:4e:5c:53:02:fc:ef:c9:5f:73:02:ba:c0:4a:3b:79:42:
72:d3:3f:49:00:fb:97:4f:67:db:62:cc:3b:30:cb:1c:09:69:
da:6d:f2:c0:ea:b9:de:10:0e:64:90:8c:e6:91:a2:3d:dc:eb:
3d:47:b4:8a:e2:1d:1f:f8:7b:eb:de:fd:09:2f:50:75:c9:18:
d5:30:db:b6:4f:83:d7:9d:26:ec:6e:01:04:ad:43:16:de:49:
ae:ea:8e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:20 2025 by rpki-client