Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
File: IeQhptlumdY_fPtJnKcRfIIwTqo.mft (raw, json)
Hash identifier: T4bdU6hAsDBiJ+5y06bzhGoUHFejlsJk7i8K+qXWH9A=
Subject key identifier: 3A:87:22:23:8A:80:0C:DD:C8:3C:C6:62:9F:E5:5A:32:66:D4:46:C8
Authority key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
Certificate issuer: /CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Certificate serial: 0194C507FB996D4FC3F57B888019E6EE1245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
Manifest number: 142D
Signing time: Sun 02 Feb 2025 05:00:22 +0000
Manifest this update: Sun 02 Feb 2025 05:00:22 +0000
Manifest next update: Mon 03 Feb 2025 05:00:22 +0000
Files and hashes: 1: 1-6OkkXT7C4FLfpQRzLeEPIkuUNA.roa (hash: D8MJaVpCwQ0fVODdot0Xw5y5hbPJWv55WnQMX0Z/dxE=)
2: IeQhptlumdY_fPtJnKcRfIIwTqo.crl (hash: /LmvpEarFZBChgMy60deH07gwyPM9Ru5YnlGywm7MzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:fb:99:6d:4f:c3:f5:7b:88:80:19:e6:ee:12:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Validity
Not Before: Feb 2 05:00:22 2025 GMT
Not After : Feb 3 05:00:22 2025 GMT
Subject: CN=3a8722238a800cddc83cc6629fe55a3266d446c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:ed:b1:2f:9b:2b:7e:84:ef:fc:8d:f0:ea:
98:0a:ed:d5:17:fd:b9:d9:89:8c:23:3b:0a:bd:86:
13:7e:b0:ac:a2:3e:76:f1:77:93:50:7c:a4:be:a3:
78:cc:de:d8:f3:46:17:ce:39:57:77:29:d8:f5:ad:
b3:83:7f:e3:58:2b:c4:4c:0f:e6:57:09:c1:3e:ee:
9a:85:aa:22:6a:9e:c7:bb:85:ca:ad:9c:a5:27:33:
1e:e8:d7:d7:00:c7:de:6b:46:5a:fc:b1:e2:c4:58:
31:c0:3a:6d:95:23:0f:be:25:c7:e6:31:ab:be:70:
57:2c:66:e3:30:1f:0d:bf:71:67:4f:8b:52:9d:53:
cf:8e:16:22:11:d0:8d:b5:55:fb:db:d3:8d:a8:2d:
af:49:05:5e:ab:a7:24:17:d1:8c:d2:e2:bf:ce:51:
db:75:03:75:36:1e:43:98:b0:e9:11:48:62:8f:02:
71:d8:ad:c0:2e:d5:09:67:22:90:7b:bb:33:35:67:
58:42:73:53:85:e8:6e:f2:97:d9:c4:e1:97:60:ac:
5b:a1:cf:8a:0d:10:95:dd:35:54:7e:ff:a7:a6:a8:
6e:c4:2a:1b:6f:2c:ec:50:3a:58:03:8b:aa:b2:09:
3a:5e:57:23:18:c2:74:57:e5:8c:b8:4f:a3:ca:47:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:87:22:23:8A:80:0C:DD:C8:3C:C6:62:9F:E5:5A:32:66:D4:46:C8
X509v3 Authority Key Identifier:
keyid:21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:27:63:8d:91:01:06:ab:b2:8b:b6:bf:2c:25:71:89:75:df:
c8:93:f3:87:27:2e:71:3c:2c:fb:36:88:b6:e8:8e:dd:e8:cf:
31:a2:74:2a:cf:bc:4a:30:7f:fd:1e:cc:45:83:ab:4b:95:58:
ee:cc:1f:64:95:af:ff:4e:d0:89:ba:c3:12:62:73:3c:68:db:
59:42:4a:d0:16:65:fa:95:f3:12:30:70:c7:b7:e3:c4:27:63:
46:bd:9c:9a:bb:c0:2a:43:4f:23:ad:3b:bb:bf:fb:48:0d:7a:
d5:c4:6e:a4:15:01:7d:31:38:14:76:61:81:af:fb:8f:96:ce:
e8:d1:9c:57:1e:28:c0:8a:a9:aa:ae:92:56:c7:b4:e3:9c:44:
aa:70:c2:11:85:27:ff:60:04:d1:26:9c:c5:f0:cd:94:a7:fc:
8f:6a:7c:78:b2:b5:11:e7:17:f8:f4:45:c8:8b:6a:7a:db:bd:
f7:6f:89:aa:8d:93:ad:bb:50:e9:2d:1b:17:a0:fd:09:65:68:
55:04:42:aa:d6:ae:d3:56:1e:88:90:85:b7:80:ca:ee:aa:f5:
ba:3b:19:45:de:44:4f:7c:f5:58:2d:d0:dd:85:c5:02:1e:15:
7e:3c:73:e2:11:8c:2d:d3:66:72:db:d4:c3:15:ca:6b:d3:3f:
66:87:f5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:03 2025 by rpki-client