Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
File: IVxS75fj1VeY7-g0dNIDAIK5s6I.mft (raw, json)
Hash identifier: O322euDC/tyUriv7TdcxHY76zPJFSoxS0KssyC0xZhg=
Subject key identifier: 9A:C7:D5:3A:EA:FD:C9:0C:32:80:5F:82:59:34:28:0F:9D:E6:3F:52
Authority key identifier: 21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
Certificate issuer: /CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Certificate serial: 019511A2C40E3552669F3F2281DEDADC1121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
Manifest number: 0414
Signing time: Mon 17 Feb 2025 02:00:34 +0000
Manifest this update: Mon 17 Feb 2025 02:00:34 +0000
Manifest next update: Tue 18 Feb 2025 02:00:34 +0000
Files and hashes: 1: IVxS75fj1VeY7-g0dNIDAIK5s6I.crl (hash: jV6OY6SQpwQPKdE083KbpbuWytVnnqHThI9KClcmuhY=)
2: OVZNKEszVhAJh-vQbtUO6A7beTM.roa (hash: oJbZ8tXjE9kGmveOiLsoY0EtqEnPlkhAWmkwOC/wslw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:c4:0e:35:52:66:9f:3f:22:81:de:da:dc:11:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Validity
Not Before: Feb 17 02:00:34 2025 GMT
Not After : Feb 18 02:00:34 2025 GMT
Subject: CN=9ac7d53aeafdc90c32805f825934280f9de63f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:fa:b5:72:be:9e:0e:fd:97:bb:a2:a1:67:
f0:8d:1b:3f:58:f3:ca:29:f4:b0:e9:b4:a3:cb:59:
31:1f:c8:47:39:87:e8:8a:6c:97:95:02:de:86:ca:
b7:22:e8:bd:cc:6b:6c:13:27:1b:75:bc:24:83:9a:
89:56:fc:55:8d:a8:59:f1:12:60:a4:a7:92:2a:de:
46:2c:d5:bc:5d:89:0d:ca:95:9a:b2:8e:e3:70:cc:
c5:55:bf:2e:fc:db:65:ad:d2:6a:ac:ea:26:5d:17:
01:8a:3b:84:ea:1e:19:57:af:7e:61:fd:37:97:f8:
cb:e2:90:d2:4b:3b:37:75:0e:c2:92:f3:7c:3a:5e:
c6:4e:0a:7c:d4:43:94:7d:92:51:82:07:e3:40:f8:
a0:d9:80:25:b6:4f:bd:74:1e:57:1c:99:d0:ad:1e:
03:55:1f:21:eb:86:65:9a:3a:b5:2d:26:69:e1:75:
71:6c:45:5c:e5:d1:83:87:9c:dd:c8:10:5d:aa:cc:
df:f1:a2:c7:23:d1:f6:73:69:7a:e3:30:dc:87:ee:
64:4e:31:28:a3:66:3c:d6:00:d4:c7:f4:47:52:d8:
42:6b:63:3d:27:d1:71:04:da:de:29:73:33:b8:4c:
22:cd:90:8f:0e:bc:a7:54:72:83:4f:97:81:6e:ea:
2f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C7:D5:3A:EA:FD:C9:0C:32:80:5F:82:59:34:28:0F:9D:E6:3F:52
X509v3 Authority Key Identifier:
keyid:21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:50:d3:83:3a:b7:62:3c:26:88:18:05:34:0b:97:31:1f:d7:
27:8a:e4:2a:34:a6:e6:0b:4a:9f:19:25:d0:53:53:38:16:9a:
42:9b:bd:7a:13:71:ba:88:b7:6b:72:55:81:b1:4a:5b:ef:a2:
c6:18:e7:76:d4:3e:b4:1a:ef:e4:5f:cd:88:2d:b0:16:7d:39:
af:49:a7:e9:33:cc:d3:64:c1:36:31:ad:6a:82:e3:fe:a4:67:
5c:f5:ea:1e:43:3e:7a:fd:ba:e1:f1:28:bf:ce:06:8a:3f:29:
c1:80:1e:79:3e:91:57:9f:e2:c6:e0:9a:c6:e8:53:b7:86:9b:
2d:1b:6a:65:e2:f1:57:13:28:ff:e4:aa:bc:18:a3:f5:8d:91:
5d:2d:d6:9e:e4:8e:3b:1c:6b:a2:c2:0e:a6:77:19:1f:90:46:
d6:77:c0:ff:c1:ab:6f:11:5f:51:38:dc:41:d6:dd:aa:52:2f:
3b:7e:db:80:11:d9:61:bc:bd:cc:5f:e4:36:af:46:bc:5b:e9:
cd:30:b8:ac:5d:1b:e9:92:6c:bc:d5:18:6a:d2:00:be:50:aa:
9c:e9:22:18:91:53:35:d0:35:81:59:fe:bc:a4:ba:6a:60:93:
42:d3:05:98:a1:72:c3:34:68:73:06:0f:5e:32:f5:47:3c:99:
7f:9a:dc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:56 2025 by rpki-client