Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
File: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft (raw, json)
Hash identifier: ucmaUQNLyRre2badG/qDKJbUNu/FTdSj3r6gpC63h88=
Subject key identifier: D7:66:8A:43:7C:AF:3E:ED:FA:BB:51:7D:F6:18:11:7A:FF:B8:0D:0B
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 019510C6BB879B32B01C756DC1D0DF18081F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
Manifest number: 1455
Signing time: Sun 16 Feb 2025 22:00:14 +0000
Manifest this update: Sun 16 Feb 2025 22:00:14 +0000
Manifest next update: Mon 17 Feb 2025 22:00:14 +0000
Files and hashes: 1: 1-TOVnm2gd04tI-uLivEABR6Pazo.roa (hash: QVp2c0LkMSwloi3MOMCG1fyuxaPczwJ3tn0nHSxmhjE=)
2: HgA_tKLG5N3ASR5gcHl20EupVRE.roa (hash: DRYtmqvkH/s26hespCVF8HpGzgqR1cL88tvUFROmz9s=)
3: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl (hash: d4qVk0NNV48e1AszHFDRDJ8xuqpr2ujfB4fVkiYNsWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:bb:87:9b:32:b0:1c:75:6d:c1:d0:df:18:08:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: Feb 16 22:00:14 2025 GMT
Not After : Feb 17 22:00:14 2025 GMT
Subject: CN=d7668a437caf3eedfabb517df618117affb80d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4e:9c:4f:04:34:a1:70:64:0b:d8:01:c0:a9:
74:55:b9:97:e3:1d:fa:38:8a:ec:f0:f6:ac:3e:9c:
e0:bb:48:a8:63:2c:1a:28:d4:fa:66:df:a8:e1:ad:
95:b4:85:73:6d:3f:76:30:fc:42:56:33:64:22:44:
ca:a2:27:f0:44:bd:13:bd:83:01:ce:bf:e6:4c:29:
bf:4d:1d:f8:56:71:ed:b8:88:69:3d:4b:73:fd:fb:
70:f4:b8:9a:08:35:93:a4:fe:82:71:40:29:56:ff:
cd:75:fc:68:79:44:a0:a0:bc:6f:8b:13:60:c1:ec:
a6:69:80:e0:75:fe:a2:15:4f:b9:a2:c3:5f:aa:0e:
24:14:20:88:68:68:71:1c:55:09:0b:83:9c:20:da:
e9:4c:e9:36:df:65:99:3b:a7:b8:f3:2c:c3:ad:8a:
81:e4:ac:3a:e2:96:1e:ac:b8:0c:c7:4b:6e:52:c7:
28:9b:a2:ac:a1:64:27:c3:c1:fe:2f:6f:e4:5f:50:
05:e1:d3:c3:e6:28:eb:0e:78:88:57:e3:32:0c:b0:
3c:36:e6:37:0d:ef:1c:56:2c:a6:02:23:ed:6f:43:
38:9a:6c:ca:6f:12:47:9e:0b:04:bf:bf:2d:0f:df:
cf:6d:aa:66:36:fe:01:e0:e1:02:dc:70:0a:21:d8:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:66:8A:43:7C:AF:3E:ED:FA:BB:51:7D:F6:18:11:7A:FF:B8:0D:0B
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:14:82:be:a9:9d:4d:a0:33:c2:c1:a4:fe:c7:a7:f7:84:e4:
59:c8:c8:1d:ab:cf:b1:b0:ad:85:1f:53:de:88:77:84:45:89:
15:64:cf:b3:0f:7c:cd:f8:68:76:5d:e4:98:f4:f0:cc:14:39:
b4:55:33:28:ff:c0:81:f7:d8:b1:66:0e:6e:57:95:e9:00:bd:
0c:de:a8:2c:b1:93:c1:72:2b:8e:8e:fb:83:3c:26:3c:0e:76:
32:06:be:3f:ec:7b:30:7a:5b:1f:74:e5:62:7c:61:d6:87:42:
ae:02:af:7b:07:83:f8:c8:19:03:ac:8a:ab:97:8c:b6:63:08:
29:50:34:dd:fd:a0:34:ea:da:20:30:22:60:58:85:ea:2a:1f:
90:68:de:58:37:b7:64:9b:f6:b2:7b:c4:5e:f5:0e:0b:5f:53:
d7:6d:cb:81:1c:b0:af:7f:62:ac:b2:1d:7d:47:be:f7:5a:91:
fb:28:01:b6:f6:a3:96:69:46:32:7a:d6:af:47:4b:0f:e4:34:
81:af:a0:d9:1e:d3:65:d8:95:0a:b7:5d:ce:84:fe:ae:03:7a:
91:69:64:f6:a8:4c:22:c1:22:61:73:3e:77:ad:80:9b:94:a7:
63:31:16:37:4c:be:aa:aa:52:af:e5:d7:56:94:80:28:70:77:
02:cc:c1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:52 2025 by rpki-client