Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
File: A-VjR3yiveae95Q5kflTMwV7PjY.mft (raw, json)
Hash identifier: fyyp6vYq2V7OwwqirYGXrgze30nwQGGPA0ujfrDoUmo=
Subject key identifier: D9:B9:5F:D8:8B:82:3F:61:76:E5:28:9D:91:42:E7:CC:D3:25:2F:BE
Authority key identifier: 03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
Certificate issuer: /CN=03e563477ca2bde69ef7943991f95333057b3e36
Certificate serial: 0195127E8D54F52225E942352CCE693DF404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
Manifest number: 028B
Signing time: Mon 17 Feb 2025 06:00:38 +0000
Manifest this update: Mon 17 Feb 2025 06:00:38 +0000
Manifest next update: Tue 18 Feb 2025 06:00:38 +0000
Files and hashes: 1: A-VjR3yiveae95Q5kflTMwV7PjY.crl (hash: H+I97HiKmEhdQCvsbTromMuHncqiQqXxbM/7pDrgb+8=)
2: YPMFe5Bu5pnUfONKrKR7BiqfdCg.roa (hash: zPktxLB6En3ydjnKgIDNJDbBFlDMgM3cJospsMff0n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:8d:54:f5:22:25:e9:42:35:2c:ce:69:3d:f4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e563477ca2bde69ef7943991f95333057b3e36
Validity
Not Before: Feb 17 06:00:38 2025 GMT
Not After : Feb 18 06:00:38 2025 GMT
Subject: CN=d9b95fd88b823f6176e5289d9142e7ccd3252fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f3:4c:9e:04:6d:9b:22:d8:02:0e:0a:26:57:
d2:a1:db:4c:aa:d9:7c:3b:6b:06:80:fb:b3:09:62:
48:5a:41:c5:41:4d:bc:e5:e3:ce:40:b2:7b:95:c9:
1d:07:54:17:50:7d:97:f1:b0:0b:ac:cd:90:8d:55:
65:af:f1:37:6f:f7:91:54:f7:ff:c1:41:d0:de:81:
f1:b1:0d:f8:f3:e2:4b:1e:75:2f:4d:cf:e5:37:d1:
06:7a:42:d9:54:7d:db:ff:c4:e3:a0:a0:c9:cb:19:
5a:99:b6:73:41:93:db:a1:a5:29:8a:ac:f2:1f:f2:
64:59:ec:4c:71:61:56:5f:c2:e2:89:a0:b2:4c:70:
11:af:be:78:2b:62:8b:2b:e4:10:1a:ae:71:30:3b:
c1:61:f3:3d:b6:64:46:50:f5:63:02:cf:77:1c:27:
54:af:c8:a0:b1:5f:c1:29:31:d5:a3:1b:01:7a:a0:
36:f5:5d:f4:57:ff:bb:45:ca:78:da:29:49:9c:26:
cb:7c:20:68:f9:97:bc:bf:9f:70:e8:df:0c:6f:20:
68:a9:66:d2:d9:a0:28:8a:df:7d:c4:e0:d0:8b:39:
82:cf:9d:00:ec:a1:57:c3:da:24:d2:86:9f:2b:d4:
72:38:f6:73:b7:e2:3d:fb:79:93:b1:2f:22:a1:13:
3c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B9:5F:D8:8B:82:3F:61:76:E5:28:9D:91:42:E7:CC:D3:25:2F:BE
X509v3 Authority Key Identifier:
keyid:03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4d:0e:4c:d6:b5:33:8c:62:7e:19:20:d5:3d:dc:a2:77:75:
a5:5e:81:c8:33:c0:d8:a7:a7:9c:38:37:43:9e:77:e5:e1:e4:
c4:3d:55:0b:89:7d:37:e0:9f:f4:01:a4:fc:3f:75:1f:1a:9e:
8c:79:3c:76:bf:da:38:c2:79:c8:62:6d:b0:03:4e:8a:c9:44:
f4:ef:79:5d:d4:80:b0:b2:00:a7:24:7e:c0:30:db:f7:40:99:
31:b2:d8:41:99:c4:91:23:bc:f7:eb:38:86:8e:e3:8f:97:95:
96:9d:1e:67:82:a6:81:fd:65:da:3d:b9:db:7b:7f:d3:62:ce:
f3:d1:5c:47:ad:e1:6e:61:6f:4d:a9:c1:56:ab:5a:e7:36:ff:
e5:ae:58:fb:48:27:9f:43:ca:80:8b:cd:8a:af:c6:b8:ef:8e:
9d:f3:c1:9c:41:57:03:15:71:29:61:b8:9c:db:99:77:8a:18:
6e:be:99:f9:0f:1d:bc:11:85:50:42:76:ca:a9:12:0c:6a:86:
5b:4a:a8:82:c3:b3:c7:37:77:da:cb:04:11:be:be:85:b9:82:
54:80:3a:39:e0:11:b7:f4:bb:64:28:48:e2:06:dc:24:71:cd:
31:12:18:41:04:e6:4d:6d:e2:4b:67:84:a9:c6:eb:27:b3:6a:
e9:08:9e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:23 2025 by rpki-client