Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
File: k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft (raw, json)
Hash identifier: KBsJgLGWx/xndTSj9Q4mEUgKDplMZIRsYt+7qt5gLaU=
Subject key identifier: 81:09:F1:02:3A:17:5C:B0:95:BD:01:9B:E1:F6:B9:00:84:8D:B4:E0
Authority key identifier: 93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
Certificate issuer: /CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Certificate serial: 0195113491CABA6810CB1D3EBB9EA7A59BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 00:00:12 +0000
Manifest this update: Mon 17 Feb 2025 00:00:12 +0000
Manifest next update: Tue 18 Feb 2025 00:00:12 +0000
Files and hashes: 1: flYbOaZUTMSub8BsHu2rfjttzDE.roa (hash: HL0djvSGG70J3+l3P1WRT3IniXpCn0S8s4R5hQdBqTY=)
2: k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl (hash: GLiAilcPqgBN+OqCvJpUPkpaWWAOKtl3tHFd/H1mtgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:91:ca:ba:68:10:cb:1d:3e:bb:9e:a7:a5:9b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Validity
Not Before: Feb 17 00:00:12 2025 GMT
Not After : Feb 18 00:00:12 2025 GMT
Subject: CN=8109f1023a175cb095bd019be1f6b900848db4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:c5:cd:7a:41:fe:f9:59:94:38:26:fc:d9:
ac:6b:68:cf:5d:ac:4f:99:03:6d:c0:63:8e:55:76:
27:19:b8:aa:17:a6:b7:fb:97:bb:b6:94:98:5e:ae:
6f:f9:8e:f3:63:b1:92:9e:70:ae:43:63:b3:3d:50:
d9:58:96:ba:ce:cb:a1:78:7a:5e:3b:7b:1c:59:92:
59:5a:bc:cb:61:c4:b1:b6:58:ce:b5:1f:c9:e3:b8:
96:35:08:ab:82:a7:e3:db:b8:99:c2:35:ef:da:74:
be:7e:22:7e:21:fc:f5:94:c4:37:bc:57:13:af:17:
78:8e:e9:63:1d:06:b7:4c:ac:f5:e3:43:b6:68:03:
40:b7:3a:08:9d:86:1d:f4:6e:d6:65:39:cf:91:fb:
42:ef:41:28:99:69:16:50:9d:5d:91:6e:29:c9:b1:
55:74:1d:b4:ee:f4:53:22:bc:88:ed:4c:f8:b3:96:
10:d6:fc:3b:04:2b:c7:19:58:d7:5d:3a:2f:b8:f4:
4d:ec:05:19:eb:e0:73:b3:71:c0:8d:dd:c8:61:c3:
ff:2c:08:2d:9f:97:bc:dc:0e:40:b0:60:2f:3d:66:
d5:4a:27:e9:99:3e:3a:5f:a5:b5:3e:07:f3:32:e5:
31:ba:36:9a:8a:2e:37:a7:c6:25:e1:5e:9b:e7:96:
a0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:09:F1:02:3A:17:5C:B0:95:BD:01:9B:E1:F6:B9:00:84:8D:B4:E0
X509v3 Authority Key Identifier:
keyid:93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:22:b1:a4:58:77:b3:a6:f0:0c:4b:f9:86:23:e7:a9:a8:02:
b6:cb:c0:07:fb:35:f9:be:70:76:ab:6a:b7:bb:64:59:bb:69:
f0:c2:36:ef:1b:1b:0c:83:05:ee:d3:04:32:ef:62:ac:a5:b8:
36:2e:91:7c:6c:d8:c7:09:16:50:56:09:e8:d1:1e:06:f5:c5:
a4:3d:8a:70:0b:7d:af:80:1a:73:ca:d3:4f:74:3a:f8:02:3f:
96:78:b9:40:c2:13:51:96:ec:55:a1:af:3e:05:dc:7a:14:9d:
e6:50:70:3f:66:d4:43:28:ee:e0:a5:99:8d:3e:51:c5:46:d7:
bd:9c:02:04:29:83:7f:d4:c6:50:47:5e:70:69:72:26:9b:13:
dd:aa:e5:e2:6f:5e:e6:3a:ca:a1:60:40:6b:95:8d:e3:0b:4b:
cb:c4:96:74:8e:17:50:9a:b8:15:f6:9d:f0:ab:ce:28:6a:e3:
23:b0:18:a8:65:88:9f:11:34:be:75:88:66:5a:f9:1e:96:be:
b7:0d:af:25:75:92:f4:9a:64:cf:f1:d0:f9:35:b8:2e:b4:52:
63:7b:30:f8:35:85:55:19:01:c1:ef:4a:73:1a:c2:52:a7:3e:
01:b4:18:d1:4f:73:56:40:0d:ca:5b:ae:8e:51:f6:d1:43:0b:
fc:f0:de:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:59 2025 by rpki-client