Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
File: T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft (raw, json)
Hash identifier: dJ0pQuI56YlDovGEUhuNZxecCNEBekwtSsGafWD0NwI=
Subject key identifier: 89:AA:1B:91:BC:19:65:9A:F1:B4:58:9C:5A:7F:04:B2:73:78:1C:5E
Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
Certificate issuer: /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Certificate serial: 0194C3F5D032AF16F0916B8CA40F9FF9453A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
Manifest number: D9
Signing time: Sun 02 Feb 2025 00:00:54 +0000
Manifest this update: Sun 02 Feb 2025 00:00:54 +0000
Manifest next update: Mon 03 Feb 2025 00:00:54 +0000
Files and hashes: 1: S0SO0HyBkdo3a_iLFGbpFh-3688.roa (hash: 4aaFEmUhkZXusyFZ1zN2v+eLcgATutmFWhO+KpO/kig=)
2: T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl (hash: L9NavxUVHhlfIhPS1O2sxmUaqa7n32KCWzjQAaSY7SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:d0:32:af:16:f0:91:6b:8c:a4:0f:9f:f9:45:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Validity
Not Before: Feb 2 00:00:54 2025 GMT
Not After : Feb 3 00:00:54 2025 GMT
Subject: CN=89aa1b91bc19659af1b4589c5a7f04b273781c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:49:82:4e:15:af:4f:a3:0c:dc:61:40:28:
83:0a:52:17:d7:2b:bb:50:52:ee:a4:41:a1:2f:9a:
74:12:55:e6:f3:67:4b:1a:0e:22:df:91:07:35:47:
3e:87:ce:30:2c:be:f4:20:75:c3:0b:ce:67:72:ea:
b4:ea:51:5f:5b:45:91:34:5d:9f:fa:9a:9d:31:a9:
76:4d:54:14:24:2e:93:a3:11:1a:5b:86:2b:06:ab:
53:45:3c:e8:f9:db:d4:f3:69:3a:a8:2f:bf:2c:bd:
d0:23:5e:15:70:ee:50:e7:e5:4b:1c:b4:b5:d1:e6:
31:c5:4d:cc:4a:ad:aa:80:9c:f4:18:69:0e:b1:3b:
ce:ca:b3:ad:ac:c1:ab:27:43:18:96:f7:04:55:6c:
f8:0f:e3:be:06:58:a8:2c:d7:c9:11:1f:22:56:9d:
e2:17:91:f4:b9:22:4f:1b:94:70:5a:c8:43:ce:75:
8f:8d:b4:19:cf:e7:b7:e9:b6:2d:02:7f:f2:a1:cc:
9f:c5:9f:a4:93:37:44:82:55:89:9a:e6:8a:bb:da:
47:a8:16:4a:09:19:af:ec:82:77:59:8f:27:5c:5c:
d3:82:4c:20:df:2e:b6:3c:c2:89:06:fc:df:67:73:
92:84:e6:9c:44:1b:93:45:6f:ee:39:29:ca:4b:77:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AA:1B:91:BC:19:65:9A:F1:B4:58:9C:5A:7F:04:B2:73:78:1C:5E
X509v3 Authority Key Identifier:
keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:df:fe:2b:58:ed:c8:f7:f0:25:42:26:ae:01:e9:ed:37:d1:
0b:18:54:11:e4:59:b9:03:79:a6:95:52:4b:78:65:a3:60:5a:
8f:8b:6e:f0:e6:46:cc:e7:d0:2a:95:8f:ec:7b:c0:4a:74:87:
99:5b:50:a3:6b:0b:1b:82:87:68:40:33:ae:54:03:b0:86:70:
2d:33:35:92:82:23:1b:08:de:7d:60:16:a3:cc:b5:41:e2:e3:
5e:45:55:e2:3a:06:00:ae:0d:50:ba:80:79:b2:86:51:84:6a:
46:3b:8f:14:69:1c:b9:0b:71:9b:61:a3:88:f1:ae:86:3c:f9:
63:3b:00:7f:ba:20:d3:5c:00:6c:ef:70:00:3f:4b:eb:4f:c1:
03:25:ec:bc:37:2d:9b:51:ec:b0:98:12:5a:be:a5:bb:6f:d2:
5b:de:23:fb:70:67:4d:30:d4:8b:a6:fb:d9:1d:1d:20:d4:a3:
d8:1f:34:bc:ce:c4:a8:90:aa:90:1e:46:20:bd:ea:d9:64:2e:
33:06:f9:b9:2f:d2:8a:35:c5:9b:f0:cb:95:18:59:64:96:6f:
10:43:e0:d8:92:3e:09:3f:3e:0d:e7:39:7a:c3:f8:b2:da:03:
04:8e:53:1d:4f:2e:71:ca:5d:d2:3c:dc:cc:d8:95:c4:cb:22:
e4:bc:87:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:03 2025 by rpki-client