Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
File: fZ9lKePCbtCMlfdP5j17Lush9XE.mft (raw, json)
Hash identifier: HOk6rIwudfMi/AiMDkKOfU/zK9Bdw9mI/Vc3vgSffbA=
Subject key identifier: 4D:1E:93:53:73:A1:1E:FE:BA:5B:F9:16:37:95:02:06:DC:7B:A5:DC
Authority key identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
Certificate issuer: /CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Certificate serial: 0195116BDECC84D0FDE8D2713227FB761655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
Manifest number: E9
Signing time: Mon 17 Feb 2025 01:00:36 +0000
Manifest this update: Mon 17 Feb 2025 01:00:36 +0000
Manifest next update: Tue 18 Feb 2025 01:00:36 +0000
Files and hashes: 1: 8KvlfbRq8s2GAiIRzqG7Rk422Gs.roa (hash: dNyvw6BImK/4I7a0t4iqRMr5gilh+0d+uv1VajB8u9E=)
2: fZ9lKePCbtCMlfdP5j17Lush9XE.crl (hash: YyLf0RD2JAs4Uv4TlPy3Bt29A3iwvYJSNLswb3KYRUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:de:cc:84:d0:fd:e8:d2:71:32:27:fb:76:16:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Validity
Not Before: Feb 17 01:00:36 2025 GMT
Not After : Feb 18 01:00:36 2025 GMT
Subject: CN=4d1e935373a11efeba5bf91637950206dc7ba5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:d5:f0:53:19:1f:48:58:52:5f:ed:c4:fb:
38:2b:34:46:b0:08:5e:ae:93:03:a0:16:a8:82:14:
32:17:f9:a9:fd:42:0f:59:bc:9e:df:3c:c2:13:b4:
47:cb:aa:a5:5d:d5:2c:a7:14:1d:1d:88:73:47:87:
df:7e:57:1d:0b:7b:25:59:3d:af:c0:f2:a6:89:af:
74:32:6d:30:06:ee:90:3c:eb:43:62:50:6a:09:00:
51:f9:47:3d:85:a5:f8:19:00:ee:74:d0:60:45:f2:
61:1f:4f:60:3d:3f:a0:aa:35:9d:2b:2c:5d:ac:7d:
a8:17:2a:67:c1:67:60:aa:ca:a4:6b:96:00:7e:6e:
ad:78:f7:43:43:1a:5d:dc:22:31:b9:6b:e5:ab:2e:
8b:0f:3f:17:3e:06:ca:4f:63:85:6a:a3:ae:64:52:
e3:f0:dd:f5:9b:c2:8f:58:31:0d:d4:16:60:48:9d:
8d:28:e0:67:a7:af:3e:8e:57:ee:1b:ec:88:d0:bc:
dd:dc:73:d6:54:72:cc:44:6c:0f:fa:73:e1:74:ae:
c5:64:f6:70:6f:07:6d:00:8f:4e:72:07:2a:8a:0a:
65:d7:b4:19:2c:0d:1d:63:fc:df:14:ce:ba:48:c1:
e3:72:55:61:19:56:a0:9c:9c:4d:d2:d1:00:41:7b:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1E:93:53:73:A1:1E:FE:BA:5B:F9:16:37:95:02:06:DC:7B:A5:DC
X509v3 Authority Key Identifier:
keyid:7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:30:8c:8c:01:d6:9d:6a:8a:f4:c7:92:84:60:70:d2:29:73:
48:6b:7d:3a:cf:8e:d3:39:50:c2:f6:68:3d:f0:0b:4f:61:c0:
9b:1b:ae:fe:d4:73:16:eb:1a:1d:29:f1:85:99:36:1d:2a:50:
a1:59:77:3e:3d:4f:2a:ff:5e:29:45:21:a4:ad:d7:73:f8:2d:
16:7d:05:17:bc:16:85:e4:32:60:39:fb:5a:37:78:71:9c:ac:
4c:eb:83:a4:7d:5e:8e:b8:e8:15:90:6d:91:8e:61:3a:24:1d:
a0:f6:3c:69:9a:61:a0:9c:de:ad:6a:44:13:e1:86:5f:17:dc:
03:27:d0:d4:7f:fc:ae:7b:e6:ec:d8:36:86:e0:3d:14:5a:31:
09:72:cf:95:d7:08:b3:a4:ef:03:b0:6e:9d:fa:9f:39:98:8b:
b8:ca:0a:44:97:6d:a8:c2:c0:98:6e:e9:b8:1e:24:62:d1:1f:
3f:0a:1f:6f:78:cc:04:c4:c4:08:53:32:8f:4a:e4:b7:26:83:
fe:3a:03:9a:f1:49:70:c8:a8:47:6e:22:29:ab:a0:c1:cc:2e:
d4:c7:c6:17:1c:bf:52:9a:e8:1d:a8:a1:cb:8b:4d:91:9a:97:
fe:da:04:18:95:de:d8:f6:00:bd:f1:bf:b5:eb:df:80:5f:3f:
ba:07:a6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:44 2025 by rpki-client