Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
File: _AY2gjog5gJjQv6MiOpyqPj3p0k.mft (raw, json)
Hash identifier: S0XlxiOX+lw1a+aBsq3M4JVkTDs/7gt/JFMMD4iGfAk=
Subject key identifier: 7A:9F:A1:C0:7B:87:DA:4B:38:74:F0:37:1C:F0:09:FC:84:EC:90:91
Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Certificate serial: 019510FDB55592B9A2D42453D0FD4DDCA450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
Manifest number: 1079
Signing time: Sun 16 Feb 2025 23:00:17 +0000
Manifest this update: Sun 16 Feb 2025 23:00:17 +0000
Manifest next update: Mon 17 Feb 2025 23:00:17 +0000
Files and hashes: 1: _AY2gjog5gJjQv6MiOpyqPj3p0k.crl (hash: kNpSU4lBuOBM7R35ebUxUWk9JNOg++W5gooViRhVrIU=)
2: hIlU1ledlK0WoRmp-tL_K_qi2N0.roa (hash: ZI6M6O4nwpCFukoO/yVoA24rabSe9nnOSdxH4aDpFEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:b5:55:92:b9:a2:d4:24:53:d0:fd:4d:dc:a4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Validity
Not Before: Feb 16 23:00:17 2025 GMT
Not After : Feb 17 23:00:17 2025 GMT
Subject: CN=7a9fa1c07b87da4b3874f0371cf009fc84ec9091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:69:c6:32:79:d8:61:0b:20:59:0e:ce:ba:6f:
bb:92:10:0f:91:0f:e9:f0:cc:e8:5b:68:c7:f8:a6:
80:1c:9f:af:70:d4:6e:82:d3:68:dc:7d:3e:8c:44:
c4:09:fa:b1:28:0b:b6:9c:60:09:8e:0d:93:d6:20:
61:19:14:2d:d9:bc:09:8d:30:4f:86:e8:b4:5d:24:
15:93:33:a5:1c:9b:f1:49:20:90:86:c3:64:53:7f:
e3:77:c5:ba:ac:37:95:00:90:41:ed:04:c2:ca:2f:
20:07:65:51:26:10:29:46:3a:d8:18:3e:25:ad:52:
db:68:87:9f:e6:2c:cd:55:08:9a:7c:25:56:a0:27:
65:88:4d:ca:1e:07:77:d8:bd:ee:ad:85:a8:3f:f2:
b9:cf:63:89:7e:a1:fc:cd:c5:2a:39:83:ad:87:56:
87:8f:73:e8:db:46:e2:b3:fa:6b:fe:1c:93:00:cc:
d5:32:07:c1:e3:69:f2:4f:f0:eb:19:e2:85:64:4f:
fc:4f:b1:56:a4:1e:7c:94:b9:e9:71:a6:df:6f:be:
0f:fa:99:b1:3f:80:6d:12:9a:33:1d:df:88:c9:42:
f7:20:67:c5:b1:bf:cd:9f:38:50:ff:46:d5:ea:98:
4d:02:3f:08:6a:69:40:b8:be:ff:d7:d7:46:5f:d7:
49:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9F:A1:C0:7B:87:DA:4B:38:74:F0:37:1C:F0:09:FC:84:EC:90:91
X509v3 Authority Key Identifier:
keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b8:7b:e0:31:81:57:85:1d:41:21:ec:d7:ca:7f:7b:62:b0:
a0:d8:07:eb:85:45:5b:26:b1:b2:4d:89:6e:5d:df:8e:0c:3e:
ba:b6:ee:3a:7f:d7:a7:eb:1e:47:04:12:0d:6b:ba:db:ba:7e:
71:2f:6a:6d:ed:6d:64:c0:1b:18:31:07:b5:20:b9:a0:d4:62:
19:6a:9d:b5:7c:3e:61:fa:3b:bd:f7:f6:d1:a4:54:66:11:4b:
86:c7:52:4b:d0:d6:5b:b0:23:07:32:04:87:50:47:bd:fb:5d:
9f:cc:c9:d9:df:33:14:59:ec:32:3c:00:16:91:1a:64:f3:d1:
0a:cf:9b:d1:4b:bc:4d:aa:68:ea:b0:d9:f3:55:1f:f7:ae:47:
25:11:59:93:43:7c:01:df:cd:66:6f:3e:b3:31:f4:e0:4a:f4:
dd:4f:02:5a:3f:0e:8a:70:a7:7b:89:23:4f:64:1a:94:f9:19:
f3:e3:72:75:b6:e2:d2:4e:09:cc:17:46:90:84:cc:6c:60:69:
4a:42:b9:07:4e:96:87:29:49:d8:af:0f:5e:38:dd:56:d4:d4:
45:80:19:95:6d:a0:f9:2b:99:10:48:5b:9b:a0:7a:ee:e8:7d:
e4:f3:ba:35:bc:3f:97:f2:9a:7d:e6:6d:e5:f0:5e:fc:e9:31:
bb:53:96:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:42 2025 by rpki-client