Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
File: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json)
Hash identifier: uZ5aGWYbDN62MwuooYjVxDdWbgGLw7bA55kptFal0Fc=
Subject key identifier: 08:06:A3:84:1B:CB:BD:9A:17:5E:21:96:9F:FB:D8:98:0A:C2:2E:8A
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 0195116C00970A57D6D1A65719F10811003C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
Manifest number: 0552
Signing time: Mon 17 Feb 2025 01:00:45 +0000
Manifest this update: Mon 17 Feb 2025 01:00:45 +0000
Manifest next update: Tue 18 Feb 2025 01:00:45 +0000
Files and hashes: 1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: rLGWU85++iJP59GW5deh6jAdW/kZ51SWM1khyk5grQU=)
2: c0fBmj5scO5bGyjJUPNEWoiJiz8.roa (hash: ysAxrF+4k0JvJ+yBQRYBZ/441fP/ZB0AQyNUuEBiB+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:00:97:0a:57:d6:d1:a6:57:19:f1:08:11:00:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Feb 17 01:00:45 2025 GMT
Not After : Feb 18 01:00:45 2025 GMT
Subject: CN=0806a3841bcbbd9a175e21969ffbd8980ac22e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f3:6e:5f:44:be:46:fa:00:6a:34:e0:85:ed:
3c:d1:dc:92:41:e0:44:d5:f1:fa:61:69:35:f9:fc:
8f:3c:43:38:c2:77:69:a6:91:b0:13:e0:54:6b:c1:
3a:bc:d0:8c:e5:95:17:09:d1:e0:29:b3:b6:c6:e8:
f9:47:ef:c4:af:18:52:54:92:81:e1:a7:7f:1c:30:
44:d5:ba:29:c8:9e:81:33:99:e3:63:44:92:5f:d5:
2d:5f:14:ec:d7:89:2d:1d:e8:96:fc:26:7d:4a:74:
f0:b8:84:61:99:fb:0f:d1:dc:76:9e:c6:96:60:e2:
3b:6a:e2:84:2e:6b:7e:9d:d2:5e:ae:db:9f:c5:d8:
71:9e:b4:0d:7c:e1:76:55:40:4f:d1:58:31:9c:a5:
93:25:d3:95:d4:d9:3c:af:ba:48:8d:e2:6a:66:e8:
ed:b6:4d:a1:e6:71:ea:14:09:dc:7b:47:8b:de:86:
73:e4:f2:b1:84:af:af:90:d5:b5:4d:6b:78:08:22:
0d:50:e6:78:35:f1:b6:79:64:2f:16:97:59:4e:a4:
aa:34:20:88:33:52:e1:c7:5b:84:a5:2e:95:9f:08:
3b:13:6d:58:a5:e8:27:cb:27:20:3a:88:bb:13:c8:
2f:eb:a3:f2:89:bb:6f:00:d1:55:57:49:51:b8:8e:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:06:A3:84:1B:CB:BD:9A:17:5E:21:96:9F:FB:D8:98:0A:C2:2E:8A
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:81:42:05:21:cc:d1:06:9d:5b:59:a5:68:f0:87:3d:da:6f:
81:8b:ce:18:64:8e:b1:93:df:9d:53:be:21:5f:0e:d2:d0:5c:
57:14:14:76:0f:ba:18:fb:f5:93:ec:24:ce:f8:78:87:a0:c6:
fc:d4:cc:3b:e7:46:8b:09:64:2d:7f:5f:66:14:08:de:80:fa:
64:82:b3:b8:5c:85:7f:e7:4d:ca:e0:4b:77:30:17:f6:d5:48:
7a:54:02:f1:ce:fd:ec:2b:c6:30:c5:1b:aa:22:76:ee:b6:52:
67:bf:21:a1:01:1d:2f:6e:d6:e6:bb:74:d4:ee:94:96:a0:e2:
58:00:f3:2c:2a:5d:6d:f1:d5:7e:28:38:c5:20:19:be:90:9b:
c3:47:01:c0:b7:69:28:ef:68:38:70:6e:38:10:d3:4f:c5:55:
eb:45:42:b6:c0:c4:3c:17:02:f4:f9:90:70:1c:41:49:9c:fa:
b2:43:24:cb:93:dc:ba:41:2a:51:42:2c:bd:d6:35:16:ee:e6:
65:89:27:71:41:bb:6f:6e:9e:55:ce:46:9a:3f:4c:6e:3b:04:
db:30:9e:3e:06:a6:e7:f1:03:9e:18:e4:1a:e1:f5:fc:5b:65:
8f:bd:e2:fd:42:5d:e2:ce:87:7c:13:58:7f:71:3e:9a:6a:21:
b8:b6:f9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:15 2025 by rpki-client