Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
File: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft (raw, json)
Hash identifier: 9CJhOpNOgcLG7DjKwKkxZ3fu1vybUNcnlueLjZELaGk=
Subject key identifier: 11:6B:5B:2B:A3:F3:6C:DC:7F:69:1A:AF:EC:E0:90:69:97:D9:CC:A5
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 019510C7A47F847027F47D0686B7F22BBF15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
Manifest number: 1455
Signing time: Sun 16 Feb 2025 22:01:13 +0000
Manifest this update: Sun 16 Feb 2025 22:01:13 +0000
Manifest next update: Mon 17 Feb 2025 22:01:13 +0000
Files and hashes: 1: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl (hash: xzrUsxaykYFQU0AktxLvPncfDUQNKjmUB/UJrDb9Oww=)
2: d-g1g1WIQH2eW5zQOoLECyf2CbU.roa (hash: 4hlHKC2roVEpNMRQA5ne6l615543DSp4qxsP/od40+A=)
3: kHVwAjV50K04XcEC52VZ9Z8xRlA.roa (hash: 2Boh063HYNHe4qTfS7TAeZC6aTKdY96/vHBa+9B6mso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:a4:7f:84:70:27:f4:7d:06:86:b7:f2:2b:bf:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: Feb 16 22:01:13 2025 GMT
Not After : Feb 17 22:01:13 2025 GMT
Subject: CN=116b5b2ba3f36cdc7f691aafece0906997d9cca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:73:86:16:29:74:c2:ac:57:98:7a:6c:e4:
80:cf:60:c8:26:92:fb:9d:fd:ba:18:f9:8a:7a:4a:
b5:2f:d6:81:c2:7f:e0:18:ef:d1:fb:f7:30:dd:ad:
4f:7e:df:cb:b4:f6:71:78:1e:ef:da:25:cd:fc:5f:
57:0e:54:2a:88:a5:21:6a:20:76:a2:05:3f:53:2d:
1b:74:b5:bb:ee:18:2f:03:68:8e:c8:f1:be:3d:bf:
ab:4c:9f:7a:0e:df:2b:e4:ba:9b:9f:38:4e:c1:48:
b6:e4:4d:38:e8:d4:c0:74:90:4e:dd:1a:65:d3:aa:
d6:59:6d:f0:eb:56:04:16:89:d7:8d:8f:ea:db:05:
82:e4:f7:db:ee:57:c2:f8:f5:87:a7:1a:a3:3c:9d:
c1:96:eb:56:df:6e:ee:be:d7:99:d5:f8:00:c6:5d:
f3:bf:0a:2c:a5:13:d1:34:53:1f:dd:5c:fc:a1:fb:
36:1f:93:c4:6e:14:3c:3b:70:d7:d6:92:9e:3c:91:
0a:8e:34:f2:89:0c:57:9f:69:ac:21:2b:4d:ff:fe:
05:df:fe:70:89:fd:5f:87:6b:40:2c:2c:0a:2d:2c:
fb:36:8f:40:09:9d:d4:de:43:cd:b3:2a:38:61:e0:
75:26:85:b5:6c:df:63:55:33:d6:77:71:08:d2:5a:
b8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6B:5B:2B:A3:F3:6C:DC:7F:69:1A:AF:EC:E0:90:69:97:D9:CC:A5
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c2:e4:4a:b2:a5:81:67:71:fb:32:5a:01:45:e4:d1:98:6d:
22:91:9d:ce:7a:4b:42:01:5e:f5:f8:6d:47:79:58:ef:3a:a9:
36:70:83:d5:89:60:a5:af:94:3b:dd:67:90:e4:1e:31:77:7a:
92:59:78:e2:29:2e:45:05:5b:a7:df:37:de:41:04:d9:75:ad:
01:88:0a:b1:6c:7c:21:43:90:fa:27:af:24:58:68:f8:1c:fa:
e1:ca:3e:c0:5f:41:da:5d:35:e0:c4:68:52:cb:83:9d:9f:31:
01:02:95:81:4f:34:8f:b8:1f:22:61:8e:3b:6d:2e:b7:8b:40:
be:5b:6b:1b:77:30:69:d1:53:20:f1:75:26:66:a3:9c:09:40:
8e:1d:86:8d:fb:b6:b2:20:20:2b:b9:e9:69:6d:44:a9:49:7f:
fd:d3:40:0a:0e:fe:3f:e0:40:71:17:fb:7d:47:24:ea:6d:ea:
ab:0a:1e:22:6c:b6:71:2a:47:74:01:22:19:48:ed:64:dc:19:
8b:df:c9:75:86:bc:69:2c:47:ac:b5:68:6b:7c:cb:c6:5f:85:
35:4b:7a:67:41:2b:d4:6d:5c:21:0b:e3:43:ee:4a:ce:eb:84:
33:ea:0e:1f:0a:b9:32:7d:f7:a9:0b:10:9b:7e:d9:c0:5c:24:
66:f3:cd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:48 2025 by rpki-client