Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
File: dHIvFqh8_9eP15BQVoobTJWbEiQ.mft (raw, json)
Hash identifier: xdTBZCRS5fh4jK8AdBEbyRKayKW62oQD1DRfY/bvpwU=
Subject key identifier: CD:30:C9:B7:97:E3:AA:ED:8C:65:52:9B:0E:20:02:7B:E4:41:10:7C
Authority key identifier: 74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
Certificate issuer: /CN=74722f16a87cffd78fd79050568a1b4c959b1224
Certificate serial: 0194C5080F565B8C4396EF6F58461057A6CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
Manifest number: 03D4
Signing time: Sun 02 Feb 2025 05:00:27 +0000
Manifest this update: Sun 02 Feb 2025 05:00:27 +0000
Manifest next update: Mon 03 Feb 2025 05:00:27 +0000
Files and hashes: 1: 7ZY1Q8mS5q8z2UfLPJc5K6uKZQo.roa (hash: jj4WM2xy5po+h+orIYLAd72AyCd84wAZcTm4AiOOtow=)
2: dHIvFqh8_9eP15BQVoobTJWbEiQ.crl (hash: RrjEfqRJZc91i3NOQHN2Oov1yIgHY4Ofhm2AEjduJto=)
3: umqBfoDDAK3jbRiLn4CC-iVGvHg.roa (hash: XnoyZYelLC2MdNI+4AYsdN08BX8Cvr0ms42chjRPStA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:0f:56:5b:8c:43:96:ef:6f:58:46:10:57:a6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74722f16a87cffd78fd79050568a1b4c959b1224
Validity
Not Before: Feb 2 05:00:27 2025 GMT
Not After : Feb 3 05:00:27 2025 GMT
Subject: CN=cd30c9b797e3aaed8c65529b0e20027be441107c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:8f:bd:48:74:9a:da:5d:72:20:ed:e2:91:
23:6c:62:f1:da:de:02:d1:53:af:e7:43:a3:88:0f:
60:d1:1d:59:0a:0d:b6:31:5b:fd:9b:b8:44:3c:1d:
46:57:f3:6a:01:9b:9e:44:cc:99:91:c6:52:e0:b5:
66:5d:fc:5f:39:58:c6:bc:1f:17:b2:08:94:bd:9b:
ce:50:8c:69:0a:73:61:f8:f2:c4:b2:99:c6:94:67:
af:1a:b9:0d:4b:c5:e2:9d:a4:47:5f:58:80:00:87:
fb:a1:6a:c2:7d:9e:ee:17:ab:3b:35:fe:d2:c6:05:
2c:c7:6c:3d:a4:24:db:16:9d:3e:05:45:3f:a7:01:
7e:96:54:e2:2b:27:6e:a9:2d:85:90:bc:1d:e2:13:
82:5e:d8:b8:03:93:6f:c1:4d:c4:20:8e:62:3c:a7:
15:b3:a5:85:b5:02:b0:cd:f3:90:3a:de:77:60:7b:
0c:e5:b5:f6:a4:ae:70:c4:c3:6d:2b:22:11:04:cb:
5f:dc:b3:f7:86:13:e5:57:b1:b3:d9:f7:55:7a:3f:
5b:c9:4d:16:67:6b:a7:82:5c:22:e8:62:cc:68:1f:
c0:99:f5:37:7f:d2:d0:b6:81:ce:bd:22:80:6b:52:
18:e1:c0:01:fb:54:94:3f:9d:d4:a7:db:0c:78:87:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:30:C9:B7:97:E3:AA:ED:8C:65:52:9B:0E:20:02:7B:E4:41:10:7C
X509v3 Authority Key Identifier:
keyid:74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:02:a6:87:c3:2b:3c:92:ac:06:68:5d:36:30:9f:b6:0e:84:
e8:80:ca:a0:03:cf:71:1a:02:24:56:2c:e0:25:5e:af:4b:61:
ea:2f:98:49:e9:67:e7:8f:6b:13:3f:34:3f:3f:c8:bd:3e:45:
21:33:7c:4f:6c:10:a6:d2:c0:99:bc:75:c3:c6:6f:7b:de:d5:
33:15:1a:2f:7f:64:1a:4c:54:15:f3:9f:9f:f3:78:7b:d1:e6:
ff:ac:05:cb:d8:45:e6:e5:1b:f2:71:e9:4f:79:17:9c:fc:da:
ac:fc:ad:ae:d5:14:47:5e:3a:00:29:ff:b7:44:a9:d1:a6:5f:
06:07:3a:9e:38:6c:fb:94:3b:01:7f:c2:31:29:bf:e0:26:a4:
f9:91:9d:8e:f2:e6:fc:28:d8:b6:39:38:ed:2e:32:a8:a8:ae:
6c:0b:e3:39:36:69:28:b1:98:ac:2f:95:49:43:b8:b6:9c:f6:
57:7e:a7:b6:b7:13:61:6b:dd:98:97:f7:d7:0c:55:c8:51:03:
c1:d7:9a:72:f8:40:58:ba:05:ff:96:1f:16:c4:82:af:51:56:
05:51:d7:1b:45:de:89:27:34:16:d2:58:a4:f2:e4:b3:2c:4a:
9f:c2:41:b4:a6:a8:8c:5e:01:5e:cf:ad:9f:a9:d6:a2:b3:e7:
65:49:f3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:33 2025 by rpki-client