Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
File: d88I7pookZe3EQCl8AsZUB2UwJM.mft (raw, json)
Hash identifier: 0xZPQ4bXP8ApbKgk4Tp4RJzptUwlWcyDq7ZZfjdzUSw=
Subject key identifier: E5:4D:98:03:A6:6E:F8:66:2A:40:83:19:1F:7C:F7:3C:0C:FF:49:B3
Authority key identifier: 77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
Certificate issuer: /CN=77cf08ee9a289197b71100a5f00b19501d94c093
Certificate serial: 0194C3F5B039F38E3306CDAD0CE0DC5237C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
Manifest number: 36
Signing time: Sun 02 Feb 2025 00:00:46 +0000
Manifest this update: Sun 02 Feb 2025 00:00:46 +0000
Manifest next update: Mon 03 Feb 2025 00:00:46 +0000
Files and hashes: 1: WecqEhgOSAbXZ3Im_QJkisWYch0.roa (hash: yP0d2DYh05Kav8sMdEFhk832MGjVh6BaMrRs10W9wIw=)
2: d88I7pookZe3EQCl8AsZUB2UwJM.crl (hash: OfX27C3A6n1R21mx78Ssa6S2H273cWyW8lAka8KVvnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:b0:39:f3:8e:33:06:cd:ad:0c:e0:dc:52:37:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cf08ee9a289197b71100a5f00b19501d94c093
Validity
Not Before: Feb 2 00:00:46 2025 GMT
Not After : Feb 3 00:00:46 2025 GMT
Subject: CN=e54d9803a66ef8662a4083191f7cf73c0cff49b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:c8:6d:f5:d8:9f:bc:f4:fc:3f:51:43:00:
02:03:e9:95:b5:d5:10:56:ca:f5:31:c0:b9:6d:7a:
70:15:c5:6b:80:d3:37:ae:03:71:72:b9:04:59:14:
31:79:fc:51:11:f3:1c:9a:f1:89:89:c1:e3:fd:54:
50:a6:a5:30:e7:ce:59:a2:c9:14:13:5d:93:03:d5:
af:03:84:12:73:94:29:75:27:c1:a6:be:84:3a:8f:
cb:3c:f6:3a:e7:72:ac:b8:fa:2c:1a:e6:cf:96:8c:
1c:bd:7e:7b:b0:48:59:14:cf:7e:c5:7f:6e:23:0a:
89:9d:9a:07:90:14:17:12:c3:cd:eb:a9:f9:c2:af:
9f:dd:d8:46:ec:ef:bb:de:0d:7f:30:a5:76:e5:01:
b2:a6:40:cf:e4:9e:bf:6f:f4:52:a5:34:d3:f6:90:
72:14:e0:cb:25:b2:62:5f:fe:25:e1:b6:a6:e5:e9:
b6:63:8a:25:fe:40:f2:b0:8b:df:ff:c9:d8:96:9f:
ae:be:c6:46:4c:3f:d5:d1:e1:83:49:89:04:bf:5e:
66:45:85:6d:0f:43:c1:a0:25:9a:7c:8b:87:b2:16:
8b:6f:48:aa:32:ff:46:57:2d:7b:37:2d:1c:78:ee:
2f:c8:93:77:1a:8f:4d:de:75:57:a3:7c:ad:22:c7:
a0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4D:98:03:A6:6E:F8:66:2A:40:83:19:1F:7C:F7:3C:0C:FF:49:B3
X509v3 Authority Key Identifier:
keyid:77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4c:4b:3a:42:d5:ac:17:df:9e:30:8c:25:cf:21:72:5d:09:
0e:0d:97:40:78:b7:67:74:6d:39:29:dc:90:ac:42:7c:cf:8d:
3d:da:e1:bc:db:3c:88:bf:aa:5c:e3:41:96:60:ee:8e:3a:a9:
74:cb:0b:20:26:5d:f8:5a:eb:ad:f9:e9:1d:79:37:81:93:02:
c9:66:b9:e7:28:5f:ad:74:43:f0:4c:c0:e9:15:1c:bd:44:0e:
dd:27:e5:c2:ec:45:19:aa:c8:d0:aa:3b:44:bf:4e:8e:43:1c:
e2:cd:a3:a5:72:cb:7c:a7:f4:bd:ec:2e:69:1d:88:fc:37:04:
77:40:13:79:1c:6c:dc:f5:87:6a:44:77:57:5e:df:22:b2:5c:
37:03:73:c1:80:41:c9:f5:bb:d2:24:38:a7:73:e6:0e:1a:ee:
b4:15:88:4f:54:4f:82:38:4c:40:2f:f3:b2:73:df:2b:17:0c:
0a:ef:2f:fe:d3:56:64:ef:6f:4c:31:55:bb:58:40:34:ca:c9:
59:42:3d:ca:d7:7b:94:16:14:fd:d6:35:e3:65:da:8d:0d:ee:
4e:66:ba:94:97:4c:81:1b:98:99:fa:cb:6d:e4:ba:f7:8c:42:
85:e4:c8:d2:8e:55:5a:93:74:d6:09:20:fb:ab:fb:9e:11:d0:
30:98:fc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:59 2025 by rpki-client