Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
File: 9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json)
Hash identifier: lVZuQCTdX91C9scCg9Ony2g7FqUDhh8c04NvWwZRR8I=
Subject key identifier: 24:45:D8:D8:ED:6F:F2:D1:CB:D9:68:59:AB:14:06:9C:C5:2B:0A:2E
Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Certificate issuer: /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Certificate serial: 0195124757504FD22204603EEEB9C3041935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 05:00:20 +0000
Manifest this update: Mon 17 Feb 2025 05:00:20 +0000
Manifest next update: Tue 18 Feb 2025 05:00:20 +0000
Files and hashes: 1: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: l0sWF/iGfoMAOT2B1U7txAQ0GqPoWrUmWKAYUAi/XV0=)
2: Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa (hash: 5hTfi5zIdy0pksBzayRUkBZiz92X7DgH1Hnbmun+ujM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:57:50:4f:d2:22:04:60:3e:ee:b9:c3:04:19:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Validity
Not Before: Feb 17 05:00:20 2025 GMT
Not After : Feb 18 05:00:20 2025 GMT
Subject: CN=2445d8d8ed6ff2d1cbd96859ab14069cc52b0a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:3f:5b:a1:ec:7e:c7:9f:96:cc:58:89:68:
05:be:43:86:9d:4d:b8:da:f6:be:ee:d7:05:ee:5f:
fe:fe:2b:97:2f:b1:de:68:ef:b0:4a:b5:49:e8:5c:
52:67:84:0f:e1:33:06:ca:ef:e5:9d:3f:1d:55:22:
7b:d4:46:30:41:da:9e:82:32:ca:aa:c3:90:df:3a:
25:73:72:ad:c5:d6:4b:e4:00:4e:cc:f9:e1:d4:0e:
27:ff:48:8c:8d:0f:22:f0:60:7d:09:c8:d7:cf:eb:
39:ff:51:00:f1:19:a2:82:d1:4b:14:08:b8:2f:d0:
82:fc:d9:f9:92:9c:fa:94:00:01:2c:ee:be:5d:5b:
b9:d6:eb:f6:84:e1:6a:6e:f8:68:96:14:31:5d:9d:
09:65:62:50:2a:5e:fd:97:36:9e:39:d6:bf:45:bf:
d3:fc:a3:fa:b0:db:5b:08:dc:9a:90:5c:a4:8e:cc:
8e:63:19:95:03:68:b9:ee:02:7d:ec:dd:a4:36:8c:
7c:60:69:40:fb:a8:0a:00:ca:e0:37:78:aa:ad:0e:
15:c4:88:dc:e5:6a:a7:a2:41:8d:0d:9e:57:42:75:
39:4a:1b:97:0e:29:12:2c:6a:69:37:f5:96:81:49:
80:30:60:f4:e8:0b:e3:b3:3d:d1:d1:52:60:f8:51:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:45:D8:D8:ED:6F:F2:D1:CB:D9:68:59:AB:14:06:9C:C5:2B:0A:2E
X509v3 Authority Key Identifier:
keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:13:dd:58:11:d0:99:1e:55:ff:6d:71:1d:39:97:39:a4:5c:
3f:5d:80:b0:3d:e4:40:41:ac:a4:b4:99:b6:58:6c:74:c7:cd:
ca:79:e7:51:cb:8a:c1:12:c7:e8:ea:a7:b2:1c:a7:7d:52:b9:
28:cc:28:a6:67:cf:ab:d4:2f:75:35:a3:98:c3:00:37:45:c4:
79:ba:c5:64:40:39:72:69:ef:ee:08:3e:ed:83:cd:22:82:cb:
92:da:a3:15:f0:d7:02:eb:5b:ff:fd:94:f3:b0:35:15:f7:db:
bd:7e:0c:4a:fc:01:c5:ea:54:ce:d2:ba:91:92:d3:25:bb:c5:
a3:99:ea:28:59:98:9c:d8:d5:3c:13:dd:ba:d7:ce:aa:6f:cb:
bf:ec:b7:7a:42:ab:6e:ef:7a:74:82:23:3c:34:9f:e7:bb:e4:
43:9c:0a:a5:93:eb:4f:03:58:3b:01:f2:d8:26:8d:af:45:31:
81:8c:47:06:e2:5c:9c:02:3c:e6:3c:77:91:dd:f2:49:ad:89:
82:7b:6d:40:1f:6e:81:58:24:54:8b:1a:f1:42:f6:f2:ef:0b:
82:2c:1f:47:f7:98:27:be:dc:c5:49:62:a4:a7:f7:73:61:87:
f0:a6:0b:11:d5:72:13:07:86:0c:cb:9e:7f:cb:cc:bd:db:e8:
ae:bf:fd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:16 2025 by rpki-client