Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
File: Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json)
Hash identifier: 3ZtKlCPMjmZ1raI+QAS5rfXqgzzTK8iTNM7pqhi/NSw=
Subject key identifier: B3:D0:39:EF:75:4E:1A:DE:14:B6:9E:40:15:3F:7C:E9:AE:E9:B2:3C
Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Certificate serial: 0194C463C0B8C34243353A6099011B4D75E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
Manifest number: 067B
Signing time: Sun 02 Feb 2025 02:00:59 +0000
Manifest this update: Sun 02 Feb 2025 02:00:59 +0000
Manifest next update: Mon 03 Feb 2025 02:00:59 +0000
Files and hashes: 1: 1KuevLKOXin1b0wgf0GWz0r6nwg.roa (hash: ASw2YdXHtzStc1C+SsPAtANeLSe13bWPdtXsO3TzYqc=)
2: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: Ui1e2muP/0JqZBbiMeQFgVHFxbv6fla/AK+SEglWH50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:c0:b8:c3:42:43:35:3a:60:99:01:1b:4d:75:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Validity
Not Before: Feb 2 02:00:59 2025 GMT
Not After : Feb 3 02:00:59 2025 GMT
Subject: CN=b3d039ef754e1ade14b69e40153f7ce9aee9b23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:c6:54:c5:ee:7a:f0:29:aa:4b:a5:56:79:
c1:9d:24:38:73:b3:e5:6c:ec:e9:79:13:09:1e:ee:
b2:25:45:d3:84:3d:01:69:cc:af:10:10:4b:e3:d3:
98:9b:50:97:40:34:85:6a:91:9d:ed:20:51:36:fb:
ff:e1:d9:3a:c1:97:69:6a:d6:88:63:db:f8:0d:68:
06:cf:ab:78:c4:42:ef:33:ad:cb:63:61:9c:17:d2:
ea:a3:f7:67:65:61:16:04:d6:18:28:9b:12:ed:50:
4d:5f:31:08:b0:a7:cd:58:cc:86:c9:e6:bb:79:e9:
45:cc:2f:d2:05:b6:57:ee:70:82:8b:0f:fc:fa:82:
54:ec:eb:07:ec:3c:82:38:1c:d6:a4:67:7a:43:c7:
1f:0e:df:d9:5a:9e:7a:11:54:85:cd:1e:5b:1f:5d:
77:08:77:c0:04:92:cf:b8:6e:e8:96:84:36:a0:63:
a2:1e:8f:4a:4e:20:11:82:79:1a:cf:1b:81:04:de:
96:5b:2f:3d:6b:6c:3d:a7:2b:88:56:1f:c3:67:3e:
35:cb:d7:0e:1c:c9:80:fd:0b:38:66:0b:71:72:36:
1f:0d:f1:e0:5d:62:11:58:d5:bb:bc:a6:be:1d:94:
ce:65:9b:86:5f:d3:08:7e:7c:c1:d7:6e:fb:1f:99:
2d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D0:39:EF:75:4E:1A:DE:14:B6:9E:40:15:3F:7C:E9:AE:E9:B2:3C
X509v3 Authority Key Identifier:
keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0c:32:7d:2c:35:37:31:dc:9e:3f:6d:c0:38:e6:49:87:6f:
e6:77:a5:f5:67:5f:11:6a:05:b3:62:33:ed:ef:fd:d3:a9:58:
28:5e:fb:d0:28:67:f0:4c:d3:00:31:3e:46:66:dc:ce:3b:cd:
c9:95:01:c7:cd:a6:87:01:b7:b4:a5:4a:c8:82:5c:f7:d9:e0:
18:d3:b5:73:f7:a9:4f:a6:29:90:f4:d3:8e:68:02:cc:5e:e7:
88:3f:cc:37:38:f2:1f:51:ea:0f:87:9b:7d:1c:e9:c2:fa:00:
5f:2e:98:85:3f:75:06:89:f3:e1:b4:01:de:5e:04:2b:b0:3f:
e8:4e:c5:25:8a:ad:8b:13:23:df:b3:cf:f4:04:e4:f3:61:70:
3b:72:7b:2d:c0:bb:d5:d4:a4:f9:13:33:51:e2:4c:09:0d:f6:
dd:79:19:90:19:dd:0d:85:25:51:87:99:15:c9:96:99:2a:a4:
00:9c:41:9d:32:43:de:23:b8:57:9b:25:7d:2c:37:73:a3:ee:
9b:2b:bf:58:c0:15:08:2a:c8:46:cf:ce:db:81:49:18:f6:9d:
36:d5:78:44:75:8a:c9:a0:77:8d:3b:f3:bf:e6:06:43:63:a2:
b9:f7:c2:e1:a1:21:14:13:29:46:3f:55:f8:d7:ea:f2:3c:00:
b5:29:91:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:12 2025 by rpki-client