Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json)
Hash identifier: f7odW77ER9wA6us6bLnA9Fk2ZPALBPB3fZ2p+D4JU5w=
Subject key identifier: F3:97:15:E7:1B:49:33:8A:6D:52:C4:ED:53:11:90:E5:CA:C4:1E:72
Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
Certificate issuer: /CN=740f65f302335baa90ed81c05384d53f2332391a
Certificate serial: 01951134BDFE0F6BC6019865A0877DE0FAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
Manifest number: 0568
Signing time: Mon 17 Feb 2025 00:00:23 +0000
Manifest this update: Mon 17 Feb 2025 00:00:23 +0000
Manifest next update: Tue 18 Feb 2025 00:00:23 +0000
Files and hashes: 1: WofWi7AY2voZ8zuxEwCCF11Li9Y.roa (hash: SwJtYvJm5nh+3634W4p5oPoXAQ3iVFOZXE2jIXt509U=)
2: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: cmJokPMf4eK4P42wi5nqzG0ef+Rexd3eJsuZT9LLhJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:bd:fe:0f:6b:c6:01:98:65:a0:87:7d:e0:fa:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a
Validity
Not Before: Feb 17 00:00:23 2025 GMT
Not After : Feb 18 00:00:23 2025 GMT
Subject: CN=f39715e71b49338a6d52c4ed531190e5cac41e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:d1:95:54:2e:fc:46:21:f4:60:cd:b2:4f:
64:c0:14:06:96:90:76:63:3d:26:9e:23:fe:2c:ec:
a4:a3:ee:65:20:6e:ab:e4:89:14:2b:f9:9b:ca:88:
63:1d:85:da:2c:c3:68:4d:7c:a8:e4:0e:fc:ce:03:
53:7d:31:f9:15:f7:0d:f4:ff:f7:f8:65:5d:7f:e0:
1b:90:59:d4:8d:b6:9c:7b:89:34:e7:91:d7:e3:a4:
87:46:ec:1b:95:fe:cf:14:ee:41:3a:14:7f:57:d2:
c5:78:47:9a:51:67:2c:6c:bf:18:28:49:cd:41:41:
0b:03:cc:85:b2:29:eb:65:ca:1a:73:d4:0a:de:10:
fa:6f:2c:ae:39:b0:a0:ed:a7:d6:b8:ea:a0:48:d7:
c1:95:de:7f:e9:91:3a:a7:a6:0f:3f:8c:a3:cc:65:
76:69:8b:6a:31:fc:f4:3d:86:91:1f:55:fa:dd:ff:
f8:eb:9c:82:ee:fa:78:56:ce:a0:f0:d6:ef:a9:f8:
2d:9a:3e:36:96:fc:9e:7c:ef:31:54:43:57:c1:3c:
a1:f6:13:c6:07:ac:1f:c7:7b:47:45:0a:58:71:61:
f9:bd:b2:a9:21:e7:eb:29:bb:91:20:ac:31:d5:76:
e3:c9:7b:3e:e8:63:4e:6d:41:77:45:d2:df:5d:b1:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:97:15:E7:1B:49:33:8A:6D:52:C4:ED:53:11:90:E5:CA:C4:1E:72
X509v3 Authority Key Identifier:
keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b6:4f:f5:4d:04:66:50:84:20:06:8a:9f:53:c0:44:54:d7:
64:a2:24:1c:e3:4f:82:98:ff:62:0f:10:18:92:41:a8:41:dd:
d0:d8:85:14:28:c8:79:4d:ae:5d:83:b8:5d:7a:d5:a5:60:7d:
87:e4:36:cc:45:8e:30:80:60:52:bd:2d:47:d8:cc:0c:1d:80:
21:2a:ab:cc:35:06:7d:13:f9:f0:d7:d1:97:24:1f:2a:8d:a2:
cb:c7:a7:19:c9:2f:d0:a3:ec:e0:2f:52:65:dd:92:37:e6:14:
82:74:5b:81:28:d9:d2:e6:77:6c:a0:87:7c:52:7e:23:1c:52:
92:3d:df:05:c5:e1:63:d4:95:05:c6:d9:6f:cd:d8:90:0b:50:
ff:8f:2a:c3:56:f8:dd:88:c4:44:e9:fa:b4:3f:2c:6f:4f:6a:
ae:23:e4:4d:3f:33:0c:79:40:65:1f:45:07:d2:da:af:eb:ed:
59:bc:45:aa:6f:6e:56:7d:a7:6a:08:3c:0f:13:c4:7e:cf:84:
ed:d8:62:67:bb:ca:e0:73:14:5f:3d:74:57:a0:00:c4:e6:08:
14:cc:12:0a:63:71:4a:a8:65:f2:e7:c5:97:79:80:f0:32:e9:
bb:fb:c2:4d:6b:39:a4:fa:e8:ad:d4:67:21:78:7e:42:ae:f0:
32:a9:82:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:24 2025 by rpki-client