Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
File: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft (raw, json)
Hash identifier: UGwNXTr7SSr2+hBm7BKhN/+DTrTARYNNtNU/xLbQdaU=
Subject key identifier: 0D:40:1C:08:B3:4E:C8:CB:F9:65:03:A9:74:8B:36:1C:D4:17:A9:7C
Authority key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
Certificate issuer: /CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Certificate serial: 0195108FF29B43D721BF83827FCEE8F895DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
Manifest number: 0196
Signing time: Sun 16 Feb 2025 21:00:23 +0000
Manifest this update: Sun 16 Feb 2025 21:00:23 +0000
Manifest next update: Mon 17 Feb 2025 21:00:23 +0000
Files and hashes: 1: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl (hash: +t+HY/SDnRcqcomBjnQ8gjvAfdqlvqtZeoYfYxYUnpY=)
2: WBCctmrLBY9TZchWHVefCJRpgwo.roa (hash: ha4SM2FYKNPb6uYgJ7O/6N/bp7uHsy7szwwtLn89ZkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:f2:9b:43:d7:21:bf:83:82:7f:ce:e8:f8:95:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Validity
Not Before: Feb 16 21:00:23 2025 GMT
Not After : Feb 17 21:00:23 2025 GMT
Subject: CN=0d401c08b34ec8cbf96503a9748b361cd417a97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:30:54:be:5d:fd:44:e6:7c:d8:3e:4a:75:5b:
42:61:d4:90:20:c9:5f:17:7a:35:98:34:b6:b8:8c:
9e:80:9d:c6:94:8c:fa:8c:d9:a5:ee:02:d3:cd:f6:
e2:6c:75:96:a7:05:42:d6:2d:fc:2c:ae:e7:67:d2:
05:f8:cd:3f:04:5a:1e:a5:09:0e:c4:78:41:de:70:
bc:3a:f9:4d:ac:58:48:1a:e7:e5:14:30:90:de:ec:
40:88:6f:89:77:23:13:f8:0e:9e:f4:48:f8:47:99:
01:e0:04:29:c4:36:2b:29:ce:2d:85:24:66:ad:a7:
f2:8d:07:28:fd:2d:31:5f:cf:2c:11:c7:8a:d6:9a:
9c:16:eb:60:91:c9:67:8a:62:dd:0c:a3:c3:a0:a5:
33:7c:ce:44:0e:ac:ab:8f:22:0d:96:dd:4f:ec:2a:
58:6a:21:9f:bf:74:95:49:47:88:4c:47:28:86:57:
e9:6a:1d:fb:0f:07:fb:93:4b:46:dd:19:3a:6f:ba:
cb:70:3d:91:54:df:f3:65:4c:09:82:7f:7a:d1:66:
a3:a2:9e:f5:b9:e1:32:5e:68:94:c3:1c:b3:a8:81:
b9:6c:e8:56:25:3d:3c:59:32:a3:6d:6f:a7:16:69:
bb:a3:0b:87:d6:22:79:ee:ba:6b:22:4b:60:52:c3:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:40:1C:08:B3:4E:C8:CB:F9:65:03:A9:74:8B:36:1C:D4:17:A9:7C
X509v3 Authority Key Identifier:
keyid:0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3f:e9:24:41:b0:51:4c:a1:e0:5c:c4:b2:fd:c2:84:c3:02:
40:73:bd:f2:9a:24:a4:3c:6d:56:fe:bc:6a:ca:36:58:bf:8e:
58:85:78:2f:14:fa:7b:d6:5f:d9:82:5a:33:ef:49:2b:3b:a5:
f9:f4:3d:11:ca:20:ba:b1:8d:4f:34:41:ff:d7:61:13:19:f7:
5d:5b:e4:be:d5:f7:da:87:e5:f8:07:ab:00:69:40:03:1c:8e:
22:5f:64:2f:be:73:d2:85:4c:ac:b9:ad:07:6e:de:75:ca:ff:
9b:3e:94:2c:82:a6:67:f5:41:97:e8:94:85:37:f2:b5:a6:ce:
bf:77:33:78:b4:6a:02:bd:36:18:2b:ce:25:8f:f4:4d:4b:96:
f0:59:1b:f2:9a:6e:c3:a9:9e:f1:05:dc:40:b2:df:2b:9a:33:
bb:ad:7a:60:5f:0f:62:42:f9:fb:a6:5d:17:2f:7b:09:8e:77:
8d:60:3d:29:2d:b6:35:bd:6a:d0:67:0a:7e:bc:89:fa:f3:da:
dc:61:83:d2:09:bb:70:04:28:44:16:12:ce:53:01:7f:ea:38:
ed:bc:61:25:92:a5:61:2c:b7:12:ff:53:a2:8b:a9:e6:83:ac:
c2:ba:65:be:32:84:aa:1b:4b:87:79:2d:91:e0:c9:35:f1:8c:
cc:f5:3f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:39 2025 by rpki-client