Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
File: rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json)
Hash identifier: TZBOBWoeljV04yyjipCK6F++pwSli2cIUadB1tP5/mE=
Subject key identifier: DC:FB:84:79:1E:57:7A:53:6A:FE:44:16:60:78:DC:9D:09:95:EC:44
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial: 019511D96F620761ED77424FC8B6B944AD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 03:00:17 +0000
Manifest this update: Mon 17 Feb 2025 03:00:17 +0000
Manifest next update: Tue 18 Feb 2025 03:00:17 +0000
Files and hashes: 1: A88LbPdx-8cfYkVb8yLzaoaOIc8.roa (hash: vbrcMRJHvTfymU9cXgb/J1eu18qmF5+dFVWeyuuyCEU=)
2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: oXa9CEU1eaFUvrOEfO+eurI3zSMmbdVsoxyuiSNAEsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:6f:62:07:61:ed:77:42:4f:c8:b6:b9:44:ad:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
Validity
Not Before: Feb 17 03:00:17 2025 GMT
Not After : Feb 18 03:00:17 2025 GMT
Subject: CN=dcfb84791e577a536afe44166078dc9d0995ec44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:31:e3:a2:33:e8:20:42:23:b4:df:52:54:
b9:f7:38:25:d8:16:a8:4d:f9:28:b3:d7:b5:62:84:
bd:27:98:b6:6d:fb:d5:a3:08:47:68:af:0b:84:f4:
af:e1:96:d9:86:45:75:fa:7e:23:8f:42:cf:7a:0e:
22:4d:cc:c8:04:66:40:17:b2:f9:5f:b0:43:a3:b7:
bb:c9:78:41:0e:a4:4a:c5:6a:24:b3:bf:11:8d:92:
4f:ea:5a:ec:b6:04:9b:fe:4d:c0:97:5c:f3:f1:7c:
5c:30:04:7f:95:37:3f:fb:0f:56:ee:d9:91:ca:9f:
37:f0:77:d3:87:c5:df:88:78:99:e7:f1:cc:b1:47:
7c:61:41:cb:34:ba:11:4e:48:ef:07:b0:38:e1:05:
bf:72:f9:74:88:e0:37:ba:27:41:de:1a:00:c1:9f:
8d:e8:c7:ff:5a:11:73:6e:6e:1d:42:7a:1c:5f:65:
6d:2f:ec:2f:0c:16:58:e5:5e:52:ad:ca:a3:8f:36:
a8:71:2a:76:6b:30:06:b0:5a:d0:26:00:52:2a:04:
52:86:73:3a:a7:1d:3b:9d:4f:73:d2:98:24:76:38:
81:00:fa:0c:3c:fb:b9:c8:9b:b8:a9:fd:c2:f2:44:
95:70:c7:42:47:9d:4d:9f:d2:13:47:af:7d:9f:00:
09:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:84:79:1E:57:7A:53:6A:FE:44:16:60:78:DC:9D:09:95:EC:44
X509v3 Authority Key Identifier:
keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0f:c6:cc:68:d6:17:dd:be:c6:1e:1c:b9:49:89:20:c3:1d:
65:3d:98:02:dc:d9:f2:88:b8:7b:1a:67:fd:d9:c7:d2:04:e1:
33:e7:56:ee:eb:d4:5e:c3:e6:9a:ff:11:93:48:e9:90:9f:00:
72:9c:30:c2:f5:61:49:13:d1:b5:93:d7:84:06:29:df:55:68:
d4:50:4d:b2:57:39:1d:07:38:1e:cc:f7:7d:e3:00:b5:65:e8:
c4:2f:8e:9f:d2:33:d9:54:b1:52:8b:e3:14:46:08:5c:0a:e3:
c0:32:00:09:6b:a0:31:b5:d4:44:2c:bb:3b:1a:79:2a:d2:b0:
3f:33:bc:1f:62:ec:c9:3c:4c:35:13:96:45:ad:59:75:04:77:
60:e5:00:9f:f0:d7:8a:5f:5f:aa:c8:e7:89:2c:87:5a:d6:b4:
30:9d:c8:90:a9:34:0b:06:02:04:7b:a2:0b:7e:35:13:06:6b:
06:66:4b:22:6b:dd:f3:75:cd:4e:a4:f0:67:28:9d:21:0a:15:
38:6c:2d:c9:7c:9f:63:82:bb:c4:f0:12:b5:0f:27:7d:c7:94:
17:c7:93:8f:cf:6f:d4:a7:f6:32:c1:c0:27:f7:12:5f:1c:c9:
fa:fe:67:03:2d:83:6d:a2:73:f8:67:48:9b:ab:4f:81:47:37:
de:3a:e9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:33 2025 by rpki-client