Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
File: dnLA_gg3F2QFjGq4XftdzcEJ934.mft (raw, json)
Hash identifier: emhRrLnvt6Acr/ocHsakTNUK8cVMLG9ebbGNEr1up3Q=
Subject key identifier: 76:9D:46:45:62:9F:54:2E:99:EA:D9:BE:6B:64:92:FE:DC:D1:1D:2F
Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
Certificate issuer: /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Certificate serial: 0195116BDAC9A66671E7006FA55F7ECB4122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
Manifest number: 077A
Signing time: Mon 17 Feb 2025 01:00:35 +0000
Manifest this update: Mon 17 Feb 2025 01:00:35 +0000
Manifest next update: Tue 18 Feb 2025 01:00:35 +0000
Files and hashes: 1: 8whQoCNJkcO8xIN4te953BPSKIE.roa (hash: Hi+Lg2/SC23FTXEW5HEq9SyVqw0M6I1sge9enc2fYd4=)
2: dnLA_gg3F2QFjGq4XftdzcEJ934.crl (hash: 5QZUburYlj1Wd08704AW8q9AxW0heDHjwTAvX+U83Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:da:c9:a6:66:71:e7:00:6f:a5:5f:7e:cb:41:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Validity
Not Before: Feb 17 01:00:35 2025 GMT
Not After : Feb 18 01:00:35 2025 GMT
Subject: CN=769d4645629f542e99ead9be6b6492fedcd11d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9a:f3:7a:1a:33:4d:64:f5:7f:48:da:43:2e:
e5:8f:83:f1:8e:15:7d:4d:d1:41:46:90:a2:b6:ae:
10:c2:43:83:c8:32:fe:4d:f3:de:07:a6:75:ee:5f:
ee:06:b7:30:b2:eb:cf:fa:49:2f:30:a4:a6:e9:f9:
86:bc:de:a0:3d:f2:c6:27:dd:7f:84:e1:d9:c8:e2:
f7:db:52:4d:fd:e5:07:2a:aa:bd:69:45:88:92:2e:
2a:f8:9a:fb:32:a9:62:93:39:c0:a2:0b:af:ed:d3:
8d:e3:76:8d:6b:34:46:41:a2:f6:4c:d3:80:f2:7c:
1c:70:e6:64:0c:2e:74:e6:a2:17:76:2e:5d:35:0b:
cc:7e:84:51:2a:e7:d0:97:81:1d:6c:15:57:31:10:
f8:e8:16:7f:3e:07:c9:08:0a:0a:2f:ac:9e:a8:27:
76:1c:a8:56:f7:a3:e9:38:cf:09:85:fe:03:1f:fd:
2f:18:11:cb:5f:21:d0:41:0c:11:64:4d:43:51:25:
ae:33:3c:ab:43:30:17:6a:92:38:8a:58:af:8b:be:
78:46:cf:31:d6:05:54:72:7e:ac:f1:1f:b7:be:d4:
04:90:65:14:d4:e3:6b:b9:e3:be:85:1f:d9:78:83:
90:44:b9:36:6e:59:19:f8:0d:4c:97:ee:f7:2c:7a:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9D:46:45:62:9F:54:2E:99:EA:D9:BE:6B:64:92:FE:DC:D1:1D:2F
X509v3 Authority Key Identifier:
keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9c:36:56:78:62:37:67:d4:70:ce:e6:d8:49:64:ce:74:c1:
ca:72:bb:4d:28:ee:85:4b:c1:fe:40:b1:d5:af:ab:9e:25:3f:
e4:c8:f7:ca:56:5a:99:52:7e:6a:7b:92:d3:be:61:c5:b8:d1:
53:18:56:2b:3d:0a:ba:6f:15:c2:e3:34:04:42:f3:83:1b:b4:
81:1a:78:ad:02:2a:26:98:77:20:12:c0:fa:8a:d4:91:69:cd:
78:bb:35:16:c9:e0:a6:aa:31:6c:37:2c:6c:21:0a:09:a3:6f:
2c:19:e4:ba:63:0a:f5:5e:d5:fb:48:ed:85:b9:d0:e2:c2:74:
5a:72:38:c9:9a:47:22:f5:b8:d1:79:0c:1b:6c:0d:66:0e:f7:
3b:26:b7:7d:c0:79:36:1c:3f:1c:83:fd:75:da:3b:e0:4b:c6:
49:31:16:4f:32:47:cc:39:08:c8:9b:9c:d9:71:47:32:fc:e1:
eb:98:7b:0f:de:c0:9c:e7:c9:40:2d:5f:f8:38:d5:af:66:ba:
2e:42:ce:20:b3:1f:73:c1:0a:24:ef:3a:c3:d4:da:d9:0d:55:
02:1e:79:9d:46:9d:e1:6a:bd:80:c0:9c:11:4b:20:cb:6f:43:
04:7b:18:34:44:27:07:37:ad:b7:d5:2b:f0:c4:22:37:d6:d9:
0f:af:80:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:41 2025 by rpki-client