Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
File: svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft (raw, json)
Hash identifier: qoPjOYiRSeUi6sFDFf1qG7UfxY8mJJT21UExTOZTmPs=
Subject key identifier: ED:B0:FD:54:45:00:19:40:12:CF:48:DF:3D:5F:C4:8D:48:F9:A1:06
Authority key identifier: B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37
Certificate issuer: /CN=b2fba356186c1dc5031c2fb20bc635491f878637
Certificate serial: 019510FDB8C728CDB41EDE4636B1261DF595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
Manifest number: 0DE9
Signing time: Sun 16 Feb 2025 23:00:18 +0000
Manifest this update: Sun 16 Feb 2025 23:00:18 +0000
Manifest next update: Mon 17 Feb 2025 23:00:18 +0000
Files and hashes: 1: 4QP14L9LxP1FDJDVa3DI94blGWY.roa (hash: bLtR0ptcRwZJ4yJiejffUukpQF+MAsqc3I6CXZQZA40=)
2: svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl (hash: gVdWmkU+4b6QbE73g5eg1OWG2f6fa5dS9umiU8Off2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:b8:c7:28:cd:b4:1e:de:46:36:b1:26:1d:f5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2fba356186c1dc5031c2fb20bc635491f878637
Validity
Not Before: Feb 16 23:00:18 2025 GMT
Not After : Feb 17 23:00:18 2025 GMT
Subject: CN=edb0fd544500194012cf48df3d5fc48d48f9a106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:af:f1:e4:68:3d:de:f9:c4:cb:f5:63:65:ad:
61:7c:e6:0d:e9:d0:cd:1d:55:a9:b9:7f:f3:15:bc:
08:23:f3:d9:12:dc:6c:53:42:6a:3b:08:5c:92:55:
61:4a:64:45:18:41:59:c0:b7:33:cd:2d:9e:28:81:
e0:1c:b8:80:75:fc:b9:52:53:6b:8d:30:c8:5a:69:
3d:a5:4a:6c:34:99:d4:03:1b:d4:de:24:a4:4b:fc:
70:53:88:40:e0:7a:b3:d7:57:f5:c8:76:4e:80:bb:
d0:23:66:81:ce:5f:d5:57:51:7b:6b:32:be:6b:04:
e2:4f:66:d2:1f:d7:87:f3:f5:ae:ba:51:30:8f:9c:
91:e3:2d:b1:7d:24:71:92:b5:85:d8:a6:cf:44:0a:
a0:94:34:e2:08:a2:c5:f3:d2:a5:73:5d:aa:ec:d4:
80:a5:21:03:1a:33:11:5a:47:db:d6:3f:1b:cc:d1:
1c:b2:b6:ba:b6:de:f5:ec:92:d5:ca:e6:f9:12:0e:
aa:f5:bc:b6:04:11:92:48:e2:8f:dd:b8:dc:8e:2d:
4b:47:ea:85:8e:e1:69:a8:c3:6e:17:bd:1b:87:a4:
2e:36:90:06:5e:a2:4b:6d:15:c9:92:3a:bc:5b:11:
ec:5a:fe:26:93:fd:0f:58:3f:24:e9:ee:ba:04:78:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B0:FD:54:45:00:19:40:12:CF:48:DF:3D:5F:C4:8D:48:F9:A1:06
X509v3 Authority Key Identifier:
keyid:B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2e:b4:b8:b1:e7:7f:a0:3c:27:74:c0:4f:dd:5d:a8:70:8c:
f2:c1:38:e8:e1:e9:a2:8f:b0:7c:93:43:5d:71:15:88:33:91:
34:a3:6d:3c:4f:4d:79:23:48:97:78:d0:e8:14:ae:df:96:b5:
6e:de:20:e9:68:d6:ea:3f:3b:f0:35:58:db:68:46:e9:3a:b7:
95:fe:eb:e7:69:ae:eb:92:a6:51:93:7e:b5:f1:09:87:66:3a:
05:15:c5:56:a0:f6:14:5e:75:85:5e:35:7d:1c:67:c0:67:68:
77:9d:fd:82:9a:ef:3e:13:06:c4:71:0c:6e:c8:9c:7f:82:04:
5d:93:82:49:29:0f:42:6b:9f:f5:d5:d8:2c:3a:a1:9a:12:f7:
fb:a7:bb:62:45:8e:17:14:bc:64:45:c9:02:25:d9:f0:2f:4d:
a2:b8:2f:f1:4b:cc:48:57:d6:71:6a:33:7a:1e:70:b2:a0:d7:
0e:a5:74:a3:30:00:76:57:90:0f:0c:e8:6a:26:51:ec:46:ef:
24:50:5f:ce:15:dc:6c:99:ad:8e:04:0a:88:98:90:14:9b:9c:
e5:5f:0e:8d:79:62:70:50:60:01:a4:f2:dd:a2:8f:77:3f:ba:
cb:14:3e:4b:b6:e1:77:14:fe:77:89:8f:1e:87:76:3c:09:21:
82:63:80:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:41 2025 by rpki-client