Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
File: cRc4aXP7-IqGfIKohnsFD8pgsBE.mft (raw, json)
Hash identifier: P+Y1/tw/X919GKj/EhZMDvsA5CHHJC91aeklGmeR43E=
Subject key identifier: 61:E0:1D:D9:5B:82:F1:01:B6:D4:28:B3:FD:0A:98:FB:3E:D6:71:F2
Authority key identifier: 71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
Certificate issuer: /CN=7117386973fbf88a867c82a8867b050fca60b011
Certificate serial: 019510C7DDE9D14994AC59F4C624E08EB082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:01:28 +0000
Manifest this update: Sun 16 Feb 2025 22:01:28 +0000
Manifest next update: Mon 17 Feb 2025 22:01:28 +0000
Files and hashes: 1: __J8knmzK0D7LeHPBcfH9mDXmDA.roa (hash: KGCws32qTez6CiaSk45QNDqYkcqePM9SEByg+MzKHwo=)
2: cRc4aXP7-IqGfIKohnsFD8pgsBE.crl (hash: CInoPMzr6Apxrsma7Fiuz1KiRYaILqF+X6nm0ppAGeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:dd:e9:d1:49:94:ac:59:f4:c6:24:e0:8e:b0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7117386973fbf88a867c82a8867b050fca60b011
Validity
Not Before: Feb 16 22:01:28 2025 GMT
Not After : Feb 17 22:01:28 2025 GMT
Subject: CN=61e01dd95b82f101b6d428b3fd0a98fb3ed671f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:67:b6:74:ec:20:3a:b9:d5:69:7c:b9:0f:
8c:88:a8:ae:1a:e9:79:8f:6b:09:a6:af:92:73:ac:
2d:45:27:fe:46:bf:a0:64:21:d9:87:1f:20:e2:61:
b3:fc:6b:a3:61:be:fe:e4:5c:46:59:fa:90:c6:38:
58:73:ff:83:9a:df:80:0d:3b:25:0d:b7:b9:a6:ff:
ce:73:30:d1:77:f1:5f:e0:9b:82:d3:1e:fe:61:a1:
ff:06:1d:84:12:41:a0:38:df:bb:33:a8:17:f4:78:
aa:d0:eb:89:cd:dc:da:49:d3:15:b1:d1:de:04:6e:
ba:f7:c6:41:24:fe:9c:a0:a8:a9:8b:f7:19:8f:53:
a3:a0:af:6c:7a:bb:2c:95:96:f3:c7:05:22:69:d0:
e0:d6:9b:3e:64:d3:35:0e:82:2e:5e:07:0b:29:46:
ba:6e:bc:04:7f:7e:61:17:19:a2:42:70:5d:d6:b7:
e1:25:ea:3d:ab:5c:53:40:c4:fc:29:39:21:bf:a8:
d3:ef:c5:dc:ca:40:6d:b7:be:84:43:dc:45:b9:61:
2a:60:c1:c3:c7:3b:c0:d5:07:be:b3:18:5b:7e:77:
f4:41:1f:77:fc:07:a1:b9:cf:a9:5e:6f:93:a9:b0:
58:83:db:ea:74:3d:a4:bb:78:4f:53:6a:6b:f0:99:
9f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E0:1D:D9:5B:82:F1:01:B6:D4:28:B3:FD:0A:98:FB:3E:D6:71:F2
X509v3 Authority Key Identifier:
keyid:71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:69:2f:eb:a8:a5:ab:fa:6d:6f:4a:73:e3:5c:c1:19:32:15:
87:a2:5d:4c:88:94:a1:cb:cc:c9:c9:c0:29:d5:73:28:e6:de:
a2:52:f7:ef:9e:74:e4:5a:62:4d:d0:0f:c6:33:a6:55:51:62:
1f:32:b9:e6:06:40:67:c7:e1:0f:18:43:a5:a5:d1:df:47:7a:
78:e2:7d:81:9b:53:27:80:ed:bc:bd:8e:74:6f:e4:d0:78:ac:
12:02:50:7d:3f:0c:b8:5b:05:8c:45:1c:46:3b:ef:4c:b6:c9:
e1:48:e5:55:2e:8d:ae:07:bf:93:0a:d5:5e:e4:db:57:8e:5f:
d4:53:03:7b:3b:69:b1:51:e7:e8:38:46:e3:ed:ce:e3:c2:6b:
1b:15:20:16:f4:a9:7a:41:52:a1:ce:ec:4f:c6:95:00:cf:b4:
4d:47:e0:a3:1b:59:fa:2a:c7:5c:2f:87:c7:b1:1a:47:1b:78:
39:f9:86:e1:4f:a8:09:4a:5c:08:e2:8c:89:6f:e8:dd:62:87:
ae:0c:47:a7:26:63:2d:1f:ba:86:2b:24:00:91:1f:52:2a:2a:
0b:37:86:8a:b5:bf:88:16:29:3a:7c:ab:7d:f9:f1:63:82:66:
2e:60:74:cf:6e:a5:c1:a7:af:c3:c8:ee:a8:13:7e:3a:60:b7:
d3:b8:d8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:51 2025 by rpki-client