Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
File: Sy7AqbnmDoZSFoymnZI58nMHw3I.mft (raw, json)
Hash identifier: Oif4Egh9T/HSEnvNUYae+B90LwYzN/OddWeet0KBapU=
Subject key identifier: B2:AF:78:80:50:5B:34:05:F4:D7:9C:5E:D5:3B:3B:6C:09:10:BF:98
Authority key identifier: 4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72
Certificate issuer: /CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372
Certificate serial: 0194C42C1DE2F1453005F3F8B0FCDB575480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
Manifest number: 1393
Signing time: Sun 02 Feb 2025 01:00:13 +0000
Manifest this update: Sun 02 Feb 2025 01:00:13 +0000
Manifest next update: Mon 03 Feb 2025 01:00:13 +0000
Files and hashes: 1: I0uKuQxKXFKWPHV3tWp8USg1X-E.roa (hash: WXxoeNxUFy+lmF1DwKWF+FMyVOrtNM4sTEwb6rXBq/g=)
2: Sy7AqbnmDoZSFoymnZI58nMHw3I.crl (hash: bg1+obzzubAAj86Tni/laznLJxB/43SpR/s7qsIdrLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:1d:e2:f1:45:30:05:f3:f8:b0:fc:db:57:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372
Validity
Not Before: Feb 2 01:00:13 2025 GMT
Not After : Feb 3 01:00:13 2025 GMT
Subject: CN=b2af7880505b3405f4d79c5ed53b3b6c0910bf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:93:33:43:98:b8:a4:0b:26:ad:06:53:0b:
4b:7b:9b:b8:9a:b3:13:ae:35:a1:94:10:6d:cb:74:
ca:5d:e5:0e:75:3c:b9:7a:35:d7:f9:36:12:f4:67:
7d:b8:e8:f6:4c:90:0a:f4:ba:50:b0:bc:f4:9a:1c:
5c:41:e0:02:77:b2:5a:74:b6:27:f2:cf:62:43:85:
6d:da:cc:07:29:9d:23:66:4d:f1:e4:1e:97:67:ef:
3c:9b:2f:e9:68:84:c4:b7:3d:77:f6:ab:73:05:cb:
e3:f2:95:e2:fc:1d:b6:4b:4d:ec:00:51:b3:6a:0a:
58:22:f8:a4:e9:ac:77:f8:40:b3:4c:c3:59:df:6c:
5f:7f:71:3b:9a:10:96:bf:f8:f7:af:b1:21:bd:87:
20:58:56:ed:1b:30:12:b1:e8:94:02:ab:b5:3c:0a:
ac:98:6f:bf:ef:51:91:c1:f6:36:b2:fc:93:19:da:
7d:58:da:3d:b1:ab:02:29:1f:68:51:83:a4:ee:b3:
2f:ea:18:e6:cb:3c:e4:56:0c:9f:a0:36:92:ae:fd:
76:97:17:e7:d0:1f:c5:c1:3f:b5:49:07:1a:95:9e:
03:3e:51:ed:22:36:12:e2:0c:dc:de:40:d2:9d:b4:
a5:26:cc:41:03:9b:83:3c:db:b1:de:ec:f5:17:29:
41:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AF:78:80:50:5B:34:05:F4:D7:9C:5E:D5:3B:3B:6C:09:10:BF:98
X509v3 Authority Key Identifier:
keyid:4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a7:2d:9e:a3:b2:9f:f7:13:04:a1:a8:87:ac:b8:fc:ee:b1:
b8:13:00:29:c2:13:bf:c9:bf:75:8b:97:10:f3:2b:25:dd:ab:
fd:97:0a:03:a9:7c:58:b3:87:32:45:ca:15:b8:4e:a2:54:f4:
7a:6d:4e:75:58:99:f9:e5:89:66:21:55:a2:28:3d:4c:73:03:
58:6d:bd:d7:16:54:86:14:c1:90:38:d9:3e:a8:d9:d6:c0:cc:
a1:92:08:40:76:56:2e:54:26:44:ed:20:84:b7:6a:f1:8e:35:
c4:dd:d6:6d:82:00:37:8e:da:fb:a9:7c:3a:65:90:4b:9c:0a:
29:ef:e3:0a:10:48:81:a0:d3:2a:f7:76:da:33:74:44:c6:06:
fb:35:11:f3:a2:9a:cf:8b:1f:32:de:44:71:fd:da:42:9d:31:
43:2d:65:b0:84:1c:33:45:e3:3e:7e:e7:0f:fb:d8:04:c0:69:
c0:ef:fc:1f:9d:91:35:42:36:72:be:63:e5:b8:a9:25:1e:bf:
32:63:af:9d:2b:98:54:9d:17:19:eb:54:5f:46:0e:86:12:02:
94:ec:2b:0c:74:0c:50:db:6a:4d:7f:54:af:3c:77:06:8a:a3:
76:a8:55:ce:95:43:f1:96:de:e7:66:b4:da:21:72:59:02:01:
10:77:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:50 2025 by rpki-client