Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
File: muB8lKimr3pdGPTqrqeeJt-TIhQ.mft (raw, json)
Hash identifier: V43tqcTLALNqYoEOIY/P2DkzVnkWqi9MPN6DrtBgsZ8=
Subject key identifier: 81:32:35:62:A9:82:8F:79:FD:79:AB:18:10:F0:0A:D0:E2:B5:B6:2A
Authority key identifier: 9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
Certificate issuer: /CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Certificate serial: 019510FE1808A6679A6C37121239DB07F7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
Manifest number: 145C
Signing time: Sun 16 Feb 2025 23:00:42 +0000
Manifest this update: Sun 16 Feb 2025 23:00:42 +0000
Manifest next update: Mon 17 Feb 2025 23:00:42 +0000
Files and hashes: 1: hirmv4l90daqtziUonbqzbb8z94.roa (hash: 2pWfc5u+sM7C4s4+z6TKeGnl46lQEVqcp+2HcKGG7wg=)
2: muB8lKimr3pdGPTqrqeeJt-TIhQ.crl (hash: /RSMNe9P5b61xlw5+pVOhdjPIKc9EWi4zJxqr02Te9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:18:08:a6:67:9a:6c:37:12:12:39:db:07:f7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Validity
Not Before: Feb 16 23:00:42 2025 GMT
Not After : Feb 17 23:00:42 2025 GMT
Subject: CN=81323562a9828f79fd79ab1810f00ad0e2b5b62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:14:66:f5:1e:0b:59:96:5f:2a:69:0f:a0:
1f:3f:57:cc:3a:a1:ba:19:29:f2:9b:cd:7c:96:30:
11:4e:8e:99:f6:63:b5:fc:56:e0:85:26:be:7c:94:
bb:dd:b4:8f:a1:9b:2c:be:f0:8a:b7:46:b2:4f:b7:
f1:35:37:da:86:04:04:0a:43:4f:84:d2:26:ae:95:
8f:de:e4:85:4d:85:79:9e:30:dc:71:93:9a:07:a1:
57:5f:a3:42:d6:42:c7:3a:c2:68:00:82:1e:ed:d0:
8b:9b:c3:cf:31:39:89:3b:26:3f:7b:25:28:19:90:
c0:ae:36:16:f9:04:17:df:30:de:eb:85:9a:35:76:
c3:44:94:b0:21:75:bd:d1:74:1b:cc:bd:ec:37:d7:
7c:63:26:5f:e0:83:84:e9:66:ec:e4:45:ff:0f:8c:
0d:89:4b:d5:e3:44:bd:66:88:72:bd:92:4f:ad:27:
22:7d:bd:ac:b6:e7:ae:e2:1c:95:7d:90:dd:c9:76:
cf:7a:fe:a2:f2:a9:ee:dc:b3:28:c8:2d:f9:21:b6:
27:3b:21:f5:02:70:64:98:27:5c:4e:db:a0:5d:41:
0b:76:06:a2:e3:7d:ba:38:3c:5e:6f:1b:a7:fb:9c:
d0:92:38:fd:8a:6c:ab:4b:3a:a2:07:02:2a:65:e1:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:32:35:62:A9:82:8F:79:FD:79:AB:18:10:F0:0A:D0:E2:B5:B6:2A
X509v3 Authority Key Identifier:
keyid:9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:48:3e:e9:5b:87:a5:d3:8e:05:e1:e3:ea:8d:83:79:88:ef:
7f:fc:23:3d:44:ee:ad:62:73:e9:b8:7b:5f:79:1d:22:6a:2e:
f1:55:8a:2f:9d:18:00:e0:5e:21:68:ad:ed:9b:3c:5f:d9:44:
93:07:c3:c9:eb:82:1b:0c:75:36:64:c5:32:32:3c:74:68:32:
d3:cf:a4:17:6b:8b:3a:26:2e:b0:63:17:ce:59:a7:c8:be:f2:
1c:b3:57:21:ba:d4:c9:31:34:5a:a0:32:a9:22:98:2c:77:d1:
cb:92:80:0a:b1:3b:1b:e3:5d:65:cf:53:b3:2f:3b:98:91:b3:
34:1c:69:81:c5:fa:b2:e6:bd:0d:72:e6:2a:0b:57:3f:24:28:
53:96:f4:b9:02:79:c9:a8:fd:d2:19:6f:27:cf:db:2b:4d:32:
0d:63:e7:c5:1b:a0:09:3f:4f:d1:c3:9a:2d:d6:b8:a1:3a:4e:
f9:3c:1c:b3:15:02:95:17:6b:4e:e4:44:b6:b9:33:a6:62:29:
ef:af:6a:fb:27:4e:06:f6:74:7f:19:60:f6:30:fc:52:5b:7d:
34:50:b4:d0:8d:00:c6:05:6a:89:b7:80:5a:5c:b6:60:79:b1:
f7:01:7b:6a:47:a3:e9:d2:b0:9f:53:f4:b5:55:e8:5e:fb:c3:
72:74:49:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:18 2025 by rpki-client