Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
File: 2afNm3hyoceqJis_rRqQdlAlKDI.mft (raw, json)
Hash identifier: L8ViUD9+BRYhfMWbc78MS5YE6nsg0Kiq3wddYobDMTg=
Subject key identifier: EC:E3:F8:27:2D:B9:8B:CA:F6:75:4E:FF:0D:D2:D0:26:7C:8D:50:96
Authority key identifier: D9:A7:CD:9B:78:72:A1:C7:AA:26:2B:3F:AD:1A:90:76:50:25:28:32
Certificate issuer: /CN=d9a7cd9b7872a1c7aa262b3fad1a907650252832
Certificate serial: 0195116C30AB0C3157B04F7B2C3A51167DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
Manifest number: 027C
Signing time: Mon 17 Feb 2025 01:00:57 +0000
Manifest this update: Mon 17 Feb 2025 01:00:57 +0000
Manifest next update: Tue 18 Feb 2025 01:00:57 +0000
Files and hashes: 1: 2afNm3hyoceqJis_rRqQdlAlKDI.crl (hash: 5W0kybraX9Mc+NGX/dNXPT968hLJAkuqyk92C+QdlbU=)
2: 8xRb-DPzCzHiHinhBGSiJKFCfq0.roa (hash: A9plqAZ6tW823XWa6YGs85LIMKZtOqJdz/q0S+8zYRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:30:ab:0c:31:57:b0:4f:7b:2c:3a:51:16:7d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a7cd9b7872a1c7aa262b3fad1a907650252832
Validity
Not Before: Feb 17 01:00:57 2025 GMT
Not After : Feb 18 01:00:57 2025 GMT
Subject: CN=ece3f8272db98bcaf6754eff0dd2d0267c8d5096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:b4:86:96:32:09:6b:28:f2:88:97:4e:08:
5d:15:91:70:77:83:29:46:d8:95:7b:3d:26:9c:42:
0a:1b:ec:35:d9:58:1d:9b:54:18:dc:10:7c:36:09:
3c:d7:e3:ae:98:56:3d:dc:07:0a:c4:ee:8d:60:25:
5d:27:d2:cd:3a:75:6e:b3:a4:f0:30:b1:83:b4:98:
f5:69:b6:32:49:f1:09:cd:bd:2f:cb:95:6e:5b:a0:
29:f0:46:2c:4f:8e:e1:10:01:95:a7:54:e6:7c:9c:
a1:85:bb:75:e9:10:48:57:6e:6e:2e:a4:7e:b1:b4:
fc:38:8b:8b:82:9d:71:34:db:c1:09:19:23:3e:f8:
ba:f7:c0:d7:18:da:6a:ae:df:e0:84:d8:e5:23:8e:
26:4c:b8:bf:8c:89:90:8b:02:2e:6e:22:99:33:cf:
5c:9c:5a:d9:2c:ca:b2:41:c7:21:43:68:9f:ac:43:
3c:84:25:8d:10:16:af:b1:98:47:71:c8:3f:55:7c:
36:8b:ce:27:35:1a:93:51:ab:c6:87:9e:c5:49:e0:
54:64:68:8d:9d:10:96:dc:39:ff:f4:49:04:71:ad:
94:8e:4f:6e:d8:15:f9:10:28:79:e3:a2:3e:be:1b:
8f:e5:e6:db:1a:e1:39:ec:72:aa:82:fe:41:73:f6:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E3:F8:27:2D:B9:8B:CA:F6:75:4E:FF:0D:D2:D0:26:7C:8D:50:96
X509v3 Authority Key Identifier:
keyid:D9:A7:CD:9B:78:72:A1:C7:AA:26:2B:3F:AD:1A:90:76:50:25:28:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:11:1e:20:63:75:c7:b2:b4:47:53:3d:06:5f:34:b0:f9:25:
c9:66:d6:02:85:43:b7:42:8a:3e:ac:60:0c:62:9e:df:9b:de:
d1:07:3e:5e:45:09:13:cf:03:7b:3a:6b:37:03:e0:18:52:c0:
dd:6d:e4:cd:8d:f4:26:27:39:18:7f:d6:9d:45:03:87:5b:b0:
20:b8:26:30:48:3b:3b:a4:01:ff:e0:05:b9:3b:de:c5:0a:40:
6f:86:2a:80:60:56:04:03:62:4a:2b:e5:f2:6b:b4:70:b6:5b:
f9:1c:f5:ce:32:5e:68:5f:16:70:ae:3f:9b:2a:1e:81:36:d5:
8e:23:25:ec:1b:be:79:8b:a4:bd:74:79:19:f9:db:8f:a0:4b:
89:63:17:9d:40:90:ae:9c:39:1e:6d:58:0b:98:63:dc:9c:c2:
cc:29:99:2c:35:2c:f2:8f:0e:e4:0b:1f:05:8c:22:3f:6a:a7:
b4:4f:b5:ed:a2:5d:bc:3f:7c:e0:cb:4d:bb:49:5a:4a:6b:46:
17:6e:7a:62:a4:6d:ac:de:58:26:d2:3b:58:65:ef:94:3e:e4:
8c:44:52:39:20:33:83:0b:09:fa:a0:dd:a4:9e:4a:13:6c:67:
c4:a2:17:c0:82:7b:a4:4b:2f:5d:49:d5:4a:81:de:ca:8b:a7:
21:74:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:57 2025 by rpki-client