Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File: ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier: omuW+UtFS7nA32D7VBgZoIqM+6FYRNpVSns3LYOkjtY=
Subject key identifier: 3D:C6:98:43:BE:18:3E:2D:79:E1:AB:BE:57:53:6F:8B:09:95:D8:50
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial: 019511D9606E33965AD382DC91213EB95C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 03:00:13 +0000
Manifest this update: Mon 17 Feb 2025 03:00:13 +0000
Manifest next update: Tue 18 Feb 2025 03:00:13 +0000
Files and hashes: 1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: oxFfeqm96mmGMDqcHcdrSKHVfhoTm8j8wnstFWxlpiw=)
2: DLTd3WJjxjvYe7s9RQaXW0-asFQ.roa (hash: CEzU0MiwDAlXifXvS9Fry7MUXXUL96cqYeU54NDS/g8=)
3: MzKwgAtz12wzIsjgwju5LaHLtH8.roa (hash: DsGzfZzJWXHpJi5oY7AKelnpp/ss483xMhTBHOGogIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:60:6e:33:96:5a:d3:82:dc:91:21:3e:b9:5c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Validity
Not Before: Feb 17 03:00:13 2025 GMT
Not After : Feb 18 03:00:13 2025 GMT
Subject: CN=3dc69843be183e2d79e1abbe57536f8b0995d850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:f3:28:f1:78:cf:6a:4c:b7:2e:c6:f6:01:
05:51:a5:92:f1:34:ed:06:18:dd:a2:2a:f2:b3:af:
3e:e9:c3:27:03:66:59:60:27:8c:8f:5d:1d:0f:10:
ec:1d:94:cb:54:a4:a9:28:91:6a:9a:a8:4a:e0:ab:
16:b3:c2:2e:2f:da:cd:dd:29:97:a9:a7:09:04:d8:
63:50:98:f8:f3:96:21:79:db:64:e4:1a:1d:64:16:
a8:fb:2b:69:fd:56:22:4a:21:86:e6:4e:e6:9d:6c:
67:1a:78:7e:51:79:ea:73:48:dd:72:9d:cc:dd:a1:
fc:d7:75:2a:d0:79:c2:36:25:dd:c6:71:b1:ac:39:
5a:6a:30:80:46:4a:73:8f:cb:5e:89:ee:0c:26:c7:
cc:e0:de:e4:64:2d:4a:43:83:28:3b:ad:4e:ae:3d:
82:f0:dd:11:2e:ee:fa:eb:28:23:b8:a9:67:6d:03:
b2:9e:c0:17:fc:a8:dc:b2:c6:f1:c7:aa:c6:4c:ba:
1f:9f:6a:ea:46:2d:48:1c:9c:bf:0f:7a:3a:9a:f0:
70:32:52:cd:46:50:ab:1f:2f:4a:34:77:ee:6e:b9:
69:76:ef:0c:8e:05:2e:af:c4:8b:7f:68:21:42:74:
ee:58:3a:0d:28:50:6d:96:1f:32:e2:3d:2e:c2:31:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C6:98:43:BE:18:3E:2D:79:E1:AB:BE:57:53:6F:8B:09:95:D8:50
X509v3 Authority Key Identifier:
keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8d:43:75:b2:4d:0c:7b:a1:f8:8a:5f:5c:c3:8a:b6:e2:18:
a4:b4:d5:c8:bf:7a:a1:36:c8:45:5e:ad:8b:a8:56:31:02:a2:
c5:e8:dc:5f:22:c5:71:7a:74:8f:44:3b:97:08:90:46:ed:dd:
9e:16:04:dd:00:2f:28:68:e8:6c:f8:9f:19:39:55:bc:8a:a3:
8b:51:e7:6c:22:5f:7f:96:5e:65:33:1f:c4:f3:31:56:e1:b1:
0d:06:33:01:7f:c9:40:a6:40:8a:da:ef:a8:a0:2a:c5:99:35:
ed:e1:38:6e:60:97:8e:0d:b4:1f:db:3d:72:77:5b:77:b3:40:
0b:46:0b:86:9b:85:0a:0f:61:27:73:07:5e:ef:a3:60:3c:22:
0d:a8:9b:ca:09:96:6c:c8:35:7e:4b:4d:96:57:f5:e5:0d:2a:
ec:9c:f6:6b:56:8e:ba:cf:ff:63:45:c7:7e:66:19:cf:5d:e9:
63:08:41:7f:fc:b8:0c:47:0a:bd:4f:8b:99:01:62:a3:31:07:
fd:46:f4:88:2b:7f:1e:c5:d8:62:b1:a2:d2:65:80:14:01:70:
72:49:06:77:0a:71:39:5e:ca:96:c3:68:6e:7c:87:b5:4b:92:
e2:ce:3f:e7:75:e4:a0:99:1a:47:b6:8c:ee:49:88:de:e9:2c:
44:9c:b2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:32 2025 by rpki-client