Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
File: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json)
Hash identifier: +aZ53dbBHLlmBT0KlpjHEc1Qp0/+pmh1FtboOgN5ITI=
Subject key identifier: FA:19:F9:B5:9C:96:47:C4:EE:48:42:94:82:54:27:91:74:8E:31:21
Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
Certificate issuer: /CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Certificate serial: 019510FE083BF7553698A21BB285F1F653D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
Manifest number: 1458
Signing time: Sun 16 Feb 2025 23:00:38 +0000
Manifest this update: Sun 16 Feb 2025 23:00:38 +0000
Manifest next update: Mon 17 Feb 2025 23:00:38 +0000
Files and hashes: 1: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: Mg/GRcW0JYphxl93pBKp1IYJP7t64UXSrPpjxCs/HnA=)
2: tP4Nr3k13Af3UtlucGdOvIgy7uY.roa (hash: ofrFnG5ByBdxFiFLthIkeYVusoIIsNMbVNLs6rFZMMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:08:3b:f7:55:36:98:a2:1b:b2:85:f1:f6:53:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Validity
Not Before: Feb 16 23:00:38 2025 GMT
Not After : Feb 17 23:00:38 2025 GMT
Subject: CN=fa19f9b59c9647c4ee48429482542791748e3121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8c:28:4a:21:94:4a:89:8c:5e:fe:94:77:dc:
a7:4b:38:72:7c:5c:11:52:81:5e:6d:03:c4:55:20:
d7:b8:40:51:cb:30:f4:1f:ba:60:da:79:0d:9d:5c:
a1:87:ca:7a:17:6c:ef:d0:0e:28:01:49:39:ea:ee:
8f:ae:5d:4d:f2:16:2c:20:6f:eb:04:fa:fa:74:ca:
9e:c3:f4:4d:b7:52:97:fc:c4:a2:ad:1a:e1:31:ed:
e1:18:94:06:ad:5f:4c:dd:90:99:5b:cf:94:2f:ba:
9d:d8:27:a8:58:43:a4:5d:99:ed:ad:90:9d:ed:d3:
9b:92:bc:d8:9c:77:3d:d1:71:62:13:44:9c:90:b4:
4e:01:99:03:ce:8e:f2:29:e0:17:6c:ae:88:72:79:
1b:60:7e:09:66:f4:3c:ac:22:41:96:54:7e:14:50:
1f:78:e5:8a:c3:68:6b:f9:3a:c7:63:16:13:8d:1a:
8f:a5:fd:d6:f6:e6:3c:a5:67:da:d2:fb:0f:57:06:
58:9c:b9:13:ae:3e:58:7f:39:9b:c5:31:6a:20:74:
a1:b2:af:bf:dc:22:33:21:a0:68:a9:15:3d:ce:b2:
cf:f4:df:d7:a2:02:32:c5:d6:31:7c:12:75:5e:67:
cf:ab:0f:11:a8:b8:b2:b3:5e:94:fd:1a:7a:1e:9f:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:19:F9:B5:9C:96:47:C4:EE:48:42:94:82:54:27:91:74:8E:31:21
X509v3 Authority Key Identifier:
keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d3:93:73:4a:79:7b:2d:01:0c:1d:9f:5e:57:2b:78:3f:e3:
5d:e3:8c:35:f1:2d:e8:11:75:3b:9d:5e:c2:d4:84:20:94:0f:
a7:7b:07:8a:3c:10:f0:97:d9:31:53:ac:aa:7c:31:8e:8b:bc:
4e:5a:c2:9c:03:87:a2:3f:6b:e5:03:4e:7e:68:54:db:a8:05:
00:20:6a:29:ea:19:04:4d:5b:a5:af:bc:1c:b5:c6:e8:66:99:
93:0e:42:d8:ce:c4:d0:c1:be:24:84:c3:7f:ce:1f:ab:78:05:
87:55:6b:0a:11:b1:3e:62:be:26:e8:78:a8:74:32:9c:e0:7b:
26:1a:a1:e8:6d:32:c4:1d:61:f7:21:08:f1:66:96:f4:22:b3:
73:15:72:a8:19:0e:cf:18:b4:e5:60:27:a9:77:35:17:d7:2b:
88:d9:45:58:2f:c6:44:e0:eb:79:37:ab:b6:6b:0b:73:1a:dd:
a0:47:3b:c1:25:12:fa:3a:ed:a2:47:52:dc:b4:5e:89:d9:98:
9a:63:99:29:24:99:82:7d:19:af:66:4e:cc:c1:8f:bd:d5:f5:
63:dd:e3:f2:d0:a6:b9:62:ec:8a:2d:d6:71:1e:be:cb:71:21:
17:1c:5e:d3:1f:e2:60:e6:73:f9:37:78:ad:e5:98:bc:6c:f2:
f4:53:a1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:17 2025 by rpki-client