Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
File: MC0R6FJhV0AHazKBuK_w-sXKLzM.mft (raw, json)
Hash identifier: kvj/JdIw4RNdV5XTuXdH0rjuaXyEfdmabG5Y1XfXhRY=
Subject key identifier: AC:85:9A:37:49:7D:D4:76:E7:64:19:83:4E:A2:BB:59:C7:7E:EF:32
Authority key identifier: 30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
Certificate issuer: /CN=302d11e852615740076b3281b8aff0fac5ca2f33
Certificate serial: 0194C3F6370CEB2E2764067F4A16FC0E672B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
Manifest number: 0F43
Signing time: Sun 02 Feb 2025 00:01:20 +0000
Manifest this update: Sun 02 Feb 2025 00:01:20 +0000
Manifest next update: Mon 03 Feb 2025 00:01:20 +0000
Files and hashes: 1: AV_h3jqDqBv8GTowG5NZT83IRVM.roa (hash: 7I92tp7yKWv9nRYHQ0pF0g4dedaK+rFfmKLNQHVUe28=)
2: MC0R6FJhV0AHazKBuK_w-sXKLzM.crl (hash: BVwM2OCi8YNHNUu9kXc5Qgp1HQcHsFaI3GSx6TD4HL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:37:0c:eb:2e:27:64:06:7f:4a:16:fc:0e:67:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=302d11e852615740076b3281b8aff0fac5ca2f33
Validity
Not Before: Feb 2 00:01:20 2025 GMT
Not After : Feb 3 00:01:20 2025 GMT
Subject: CN=ac859a37497dd476e76419834ea2bb59c77eef32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:87:d7:e0:d4:d0:b0:2d:76:7a:73:08:ea:20:
a8:11:b2:1b:a7:d3:a2:3f:d6:0d:a7:6b:fb:2b:12:
dd:54:36:65:89:c7:7f:41:71:9b:d0:1e:64:2b:03:
eb:05:61:34:d9:55:5d:c1:b4:b4:11:86:74:c2:e5:
ae:1f:06:63:0b:5a:ee:8f:46:29:cf:72:52:9b:7a:
71:1e:8d:07:16:db:66:c4:12:e7:ba:27:63:e8:99:
08:2f:4d:d2:41:26:93:33:e1:22:3f:cc:30:d8:02:
58:b8:c6:c7:c7:83:a9:d4:6d:50:93:c9:e6:b5:87:
69:9c:35:0b:a7:99:a9:90:54:48:79:ce:b5:7b:45:
7e:2c:c4:3f:e7:91:65:3e:12:bb:e6:0f:37:fe:31:
1b:67:1c:fa:c4:e5:61:2c:ff:10:e9:86:9c:58:70:
54:7f:ab:c1:d7:7c:82:c4:af:3b:90:82:b1:63:34:
57:af:2f:4a:e9:61:2a:91:16:f0:f8:34:43:a7:5a:
4b:a1:70:f1:2f:93:bf:f3:de:8d:bc:e5:45:b2:35:
90:a1:1f:7e:49:66:61:3f:25:0c:ed:27:2f:78:9c:
90:53:94:64:21:c4:c4:6f:0a:17:97:60:a0:38:76:
9e:3e:9a:fb:29:59:05:ba:42:ac:68:5f:8b:85:1a:
37:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:85:9A:37:49:7D:D4:76:E7:64:19:83:4E:A2:BB:59:C7:7E:EF:32
X509v3 Authority Key Identifier:
keyid:30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0b:52:54:57:a9:1f:56:7e:63:2c:a5:39:09:75:1b:ab:9b:
19:f4:2e:0f:e7:40:f0:d2:e9:b2:36:b1:fe:e2:30:c8:2d:22:
7d:d4:d6:b8:f2:10:6c:db:82:d6:c6:c1:c8:32:ca:94:ec:f9:
e3:08:ad:e8:f1:ac:65:ec:63:06:04:09:a3:d4:6d:0e:6d:29:
a3:3a:59:a8:59:64:b6:bc:5d:f7:75:5d:0c:e4:0c:34:44:9d:
95:76:51:e9:8c:91:86:38:6d:c8:2d:d9:c2:c2:19:09:f0:53:
6f:63:23:60:13:1e:34:b9:fc:f8:f4:1f:39:d3:0c:b3:e3:12:
44:31:f4:cf:df:32:1a:60:dc:ad:f9:01:87:cd:b3:eb:32:d3:
01:27:5d:1b:ef:4a:79:6b:a8:d1:69:02:9f:4e:66:c5:20:62:
dc:c6:2d:6b:b6:ef:54:24:fa:40:5d:24:54:ac:a6:63:0e:04:
44:1b:3b:a2:da:21:ce:dc:9f:ca:6c:f3:9f:91:3a:93:ed:3e:
97:92:ca:5e:72:74:88:23:2b:73:53:d9:9c:41:fc:2a:30:ea:
4f:ca:57:ab:0d:a4:7f:58:3d:f0:85:2e:a7:c3:5c:9c:83:0d:
05:da:85:d4:ef:d0:8c:13:67:29:33:ff:12:46:53:6c:e7:da:
dd:39:49:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:41 2025 by rpki-client