Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: xlWYzRg4koLbht4RiPM6Ydt4mirRpmhrM9GazWmrk34=
Subject key identifier: CB:A3:7E:5F:B8:9C:86:58:A3:87:11:8D:41:11:AB:92:F2:18:7E:1D
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 019511A2F8E3DFF2C436CFAB07FD8D74A37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 02:00:47 +0000
Manifest this update: Mon 17 Feb 2025 02:00:47 +0000
Manifest next update: Tue 18 Feb 2025 02:00:47 +0000
Files and hashes: 1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=)
2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: gr1u0OYF/Pba7t86AUtnWIJLmQWcNBL2G8LJ/2ldUCU=)
3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:f8:e3:df:f2:c4:36:cf:ab:07:fd:8d:74:a3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Feb 17 02:00:47 2025 GMT
Not After : Feb 18 02:00:47 2025 GMT
Subject: CN=cba37e5fb89c8658a387118d4111ab92f2187e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c8:d9:89:d5:ff:78:7e:29:95:96:5a:98:e7:
93:7d:98:eb:25:94:b6:74:7c:8a:08:a0:8c:fe:6d:
2d:d9:ff:ea:56:f1:5e:4a:10:e0:7b:f6:5a:93:0b:
f3:0c:bd:c8:1e:97:a6:ca:2e:21:bc:ee:50:ab:12:
b2:04:ee:40:15:f7:c0:84:8c:46:cd:5e:97:0e:41:
c2:9a:1c:fa:9b:ac:01:27:1d:77:2f:3b:65:a4:78:
df:a9:98:07:18:1a:f3:c2:e9:c5:f1:e5:fb:fa:f0:
b2:c6:09:5e:5f:23:bc:35:15:b1:ea:7d:21:5b:45:
c6:b0:55:5d:46:69:e2:36:21:76:14:fa:bb:82:53:
ad:40:a1:d6:1d:90:44:93:2f:8a:52:6a:99:0e:27:
db:62:a8:b8:9b:0a:93:34:d2:d0:5a:db:9b:6f:7f:
49:d9:6c:aa:f0:1b:47:2a:5c:2f:29:3c:7b:59:f0:
d3:bd:96:51:39:57:d3:87:64:54:2c:f4:27:8d:78:
81:23:d6:f2:77:b1:1b:15:c4:55:1d:f1:b7:2e:3a:
9b:4a:ef:c1:8b:6c:d6:3e:5e:5f:54:16:5d:6d:61:
91:ba:6a:e1:08:7e:79:b2:d7:a6:7f:63:de:d1:6a:
5f:bd:1c:16:9c:ee:3b:ae:e0:f8:28:cd:fa:c7:22:
4f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A3:7E:5F:B8:9C:86:58:A3:87:11:8D:41:11:AB:92:F2:18:7E:1D
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:49:a6:3d:6c:7d:47:d4:dc:a0:c8:2f:16:b9:da:91:9f:77:
f8:e6:69:14:f7:72:f3:6a:6d:01:cb:cf:6c:13:23:5e:14:30:
06:d1:55:a3:9a:38:e4:5f:4c:e2:43:8d:56:87:e2:6b:85:9d:
8b:24:1a:ef:92:54:f6:8c:af:e1:7d:b1:3c:38:eb:3f:d7:aa:
4c:72:41:cb:b7:43:3c:b8:e7:44:0e:73:10:4b:65:18:ff:fe:
9d:2c:14:43:e9:6c:7d:25:da:35:52:85:fd:26:6d:e9:b6:eb:
e1:61:f9:f2:5e:75:21:5f:e0:2b:71:23:e7:07:d2:1b:18:49:
04:e8:24:8d:ae:61:04:eb:ed:21:37:70:5d:cb:ee:68:5a:56:
cb:71:1e:46:f5:fd:05:35:94:b9:4c:39:9e:76:d4:9c:86:e2:
7f:67:e7:72:6c:4f:40:7b:27:67:f1:0a:5e:7d:2a:11:1e:f3:
c7:52:f4:29:42:81:7a:a3:38:34:ef:83:1c:22:2b:0e:38:a9:
58:dc:00:b6:d1:25:d0:14:f1:dc:2a:26:50:e9:47:6e:3c:c5:
e9:e4:71:a6:ae:bb:2b:d7:bd:3d:a0:7e:8f:2f:d7:65:de:52:
d7:97:19:47:a0:c1:c0:7c:60:95:7c:2f:e5:47:f0:14:27:b1:
14:fa:86:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:56 2025 by rpki-client