Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
File: 9B_-fSl-5OHU0jM1qatKAIjAJdc.mft (raw, json)
Hash identifier: t52f1VYJz2s4MF0slsE/bwRhEUeOH3srcBfmrB/42R4=
Subject key identifier: 7D:5C:25:12:E1:C0:82:4B:D2:3F:A7:32:9D:7E:D8:0B:83:CE:D9:04
Authority key identifier: F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
Certificate issuer: /CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Certificate serial: 019510C7C6A485A98901FA7C603FC8307064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
Manifest number: 0A2A
Signing time: Sun 16 Feb 2025 22:01:22 +0000
Manifest this update: Sun 16 Feb 2025 22:01:22 +0000
Manifest next update: Mon 17 Feb 2025 22:01:22 +0000
Files and hashes: 1: 9B_-fSl-5OHU0jM1qatKAIjAJdc.crl (hash: ux0rdYleXgpob6K7aj0pqaAdp3J8pshfIQUtqa4dYjQ=)
2: PRDF7uUUDEgvhpybsRj704dqk1M.roa (hash: 1hJ8QC4+sDAxjl4A67W+QBueyb9hgkEoDhfUwnkhNeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:c6:a4:85:a9:89:01:fa:7c:60:3f:c8:30:70:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Validity
Not Before: Feb 16 22:01:22 2025 GMT
Not After : Feb 17 22:01:22 2025 GMT
Subject: CN=7d5c2512e1c0824bd23fa7329d7ed80b83ced904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:dd:aa:88:5b:8f:20:e5:e1:65:b0:60:52:
d1:1c:1a:1c:e0:e6:9f:66:06:42:eb:f1:4d:40:d0:
70:93:c8:cd:31:1a:2b:be:fa:66:41:94:8b:2d:64:
00:fd:11:3d:27:7e:74:b7:dd:6f:13:5c:d2:e3:cd:
b1:3a:ce:ce:99:72:e6:4f:ab:79:62:6d:19:15:47:
4e:76:d4:29:e2:e6:50:e4:b5:13:c0:42:c9:c9:a1:
be:98:bf:37:81:2e:a6:e0:43:a0:3e:c6:72:42:ea:
c8:7e:bf:b6:97:4b:68:12:98:7b:cb:78:f2:4d:71:
2c:68:21:48:a8:52:15:11:56:17:3c:a5:88:ff:1c:
48:ad:6c:e7:33:de:9c:e5:7e:aa:f2:7f:46:f4:e0:
31:f5:98:cf:c5:82:1c:c2:7c:04:f1:d3:15:62:ff:
aa:2e:bc:57:a5:68:92:0e:27:36:13:3e:b5:c3:52:
61:04:70:a3:35:05:ba:e0:6a:d9:f2:34:64:96:4a:
b9:c8:01:6b:cb:10:11:22:8a:db:e7:0c:af:34:82:
ae:53:84:73:45:e3:b2:bf:a4:e7:8b:8a:de:54:bb:
e4:08:16:43:41:ca:05:b0:9a:b3:fb:0d:bc:8b:9d:
5c:90:cb:d8:5f:9d:58:43:33:51:91:4e:81:5e:2c:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5C:25:12:E1:C0:82:4B:D2:3F:A7:32:9D:7E:D8:0B:83:CE:D9:04
X509v3 Authority Key Identifier:
keyid:F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:58:2a:6a:a0:50:b2:d7:95:66:cd:b2:76:1a:ac:61:ad:c1:
a7:11:cf:34:e4:80:6e:95:5d:a5:ab:a4:0f:70:06:56:31:23:
5f:09:5f:78:c9:22:39:ba:65:6f:33:86:53:d0:c3:0f:05:48:
e4:47:9c:a6:53:83:b4:e9:ab:6f:aa:a6:8f:54:6d:af:69:25:
aa:ae:1d:11:ea:4b:ba:81:cc:07:8d:c2:a6:81:a7:b1:2e:2f:
21:6e:42:e7:0a:5d:77:79:0c:e5:d9:5b:4a:22:c5:77:c6:72:
4a:89:3c:31:4d:e6:08:cc:d5:67:20:47:28:a9:54:3d:2c:e1:
b6:4f:96:1b:64:92:79:9e:95:0d:c5:b4:d6:f5:d6:be:0b:1f:
38:7f:81:a6:c3:85:bd:75:3c:2e:e0:57:51:86:7a:4f:1f:e3:
09:e1:8b:d6:9a:c9:88:0b:64:c2:21:68:0b:3f:bb:1f:ab:94:
0d:e0:bb:1f:dd:85:5e:e4:8e:5f:2f:b1:93:08:18:b7:a5:49:
b6:eb:7a:39:ae:12:28:c4:1d:fd:27:9f:07:c0:35:1b:50:6d:
2c:58:e5:c3:69:a1:ff:bf:0a:0c:1c:d8:e4:b8:b5:28:62:52:
51:bd:e5:3d:e2:ff:71:e4:b2:cc:a0:68:98:5f:35:c5:79:df:
f9:63:9b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:15 2025 by rpki-client