Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File: d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier: fvdskQp8qWI2GQl/MjcJO/0YT14KV4ZUXMbgd9duHhQ=
Subject key identifier: F0:54:13:3E:6C:30:98:99:07:B1:47:D4:3E:EB:4D:AD:1B:8E:79:44
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer: /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial: 0195127E5633D3E34FCBC81316E29B6859C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number: 0B40
Signing time: Mon 17 Feb 2025 06:00:24 +0000
Manifest this update: Mon 17 Feb 2025 06:00:24 +0000
Manifest next update: Tue 18 Feb 2025 06:00:24 +0000
Files and hashes: 1: JS20272zzOd7lsvAhAy2fEVjeyI.roa (hash: cOcrvgmIxE66W+f+FGaVHK7zq1S4gdeOGb2xk9gX0lg=)
2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: pHuI9OxMsu5eqjIysQYJzew6ijval7CDrk3s5MnZRoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:56:33:d3:e3:4f:cb:c8:13:16:e2:9b:68:59:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
Validity
Not Before: Feb 17 06:00:24 2025 GMT
Not After : Feb 18 06:00:24 2025 GMT
Subject: CN=f054133e6c30989907b147d43eeb4dad1b8e7944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f8:f1:1a:30:88:73:70:90:26:e7:3c:8d:9d:
91:a0:24:38:96:b9:73:9c:7c:99:60:16:8b:61:0b:
c0:bf:1c:1d:bc:cd:2b:2f:33:a5:6f:e3:9c:fa:68:
76:e8:41:02:fc:af:9b:47:2d:ed:d6:89:c4:09:02:
9a:92:d5:13:8e:b7:1d:4e:72:e6:ef:81:00:7b:2f:
0a:4b:85:91:d3:70:7a:2d:87:b6:f1:3a:00:8f:9e:
05:0c:58:2e:43:11:63:52:64:22:df:3c:de:24:78:
03:8f:7b:d0:ed:37:69:bc:30:70:2d:80:47:b1:da:
50:3d:5c:ac:6f:3f:e2:13:93:ed:af:48:c5:0f:8a:
08:1f:5c:31:c2:6f:7a:39:ed:db:aa:89:b7:ba:50:
e1:39:03:07:4e:8b:f4:52:88:b4:a5:54:1e:ff:5c:
31:01:4e:66:99:f3:8d:60:b8:52:e4:6e:f9:40:8a:
a5:9c:7b:3b:b6:84:17:8b:e4:47:31:67:65:ea:92:
05:b9:5d:00:ba:08:56:1a:26:11:f2:a8:90:a0:1b:
c1:9f:8b:02:b5:dd:42:9f:f4:9d:fb:de:e5:a8:37:
79:fc:c6:3e:ae:ac:e6:d4:e2:86:64:45:fa:1e:93:
c9:9a:e4:c9:84:8e:6d:3c:5f:8b:55:b2:fb:e1:da:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:54:13:3E:6C:30:98:99:07:B1:47:D4:3E:EB:4D:AD:1B:8E:79:44
X509v3 Authority Key Identifier:
keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:27:3c:c6:c9:49:27:d8:32:0e:0c:67:e6:63:17:f9:56:88:
c5:92:51:6f:7b:82:1b:4c:3f:6e:93:89:54:68:aa:44:98:7e:
86:af:17:95:0f:b0:fd:f0:c6:9c:d1:01:8a:ea:c4:06:d2:cc:
bf:ba:e1:3c:f0:64:1a:d8:27:7d:de:9b:1d:b8:6e:94:a2:2a:
4a:80:6a:c9:2d:d6:c5:f0:ec:d5:86:86:76:e7:39:94:a4:e2:
d4:56:17:8a:de:d6:a7:d1:1f:43:87:eb:e2:89:69:d3:57:c5:
31:e4:25:71:85:0d:3d:96:45:86:d0:89:0e:9e:62:b1:b4:ba:
85:fd:54:a5:a9:fa:ee:e5:ab:5e:42:8b:aa:b5:7e:9c:a4:2c:
6c:77:1e:a3:69:7d:a7:4c:d7:d6:fb:af:9a:16:b1:83:91:5b:
1a:3d:d9:27:ec:c5:a1:18:d8:16:bf:f3:45:8c:ba:fa:b3:0e:
2f:61:a9:37:fc:fc:08:6b:b5:89:b3:18:18:a0:63:bf:ec:cc:
cf:e2:93:23:06:cd:23:9a:36:a1:03:1f:f1:44:8e:90:9c:0a:
93:5b:cb:2a:03:92:88:34:40:9f:0a:47:0a:7b:b4:27:61:c1:
9d:76:5f:2e:0a:3b:b7:82:03:d9:1b:43:44:15:5e:eb:80:48:
a2:fd:b8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:06 2025 by rpki-client