Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
File: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft (raw, json)
Hash identifier: 6aHwM1GKFVc7v6ciLT/DEyYY1ZzCz+9W+IFOo9HG4hE=
Subject key identifier: 8D:0F:C7:CA:57:0E:25:39:A7:F7:53:50:60:4F:CA:DE:AE:22:AD:9A
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial: 0195127E17D985396307EEED2E93410158EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 06:00:08 +0000
Manifest this update: Mon 17 Feb 2025 06:00:08 +0000
Manifest next update: Tue 18 Feb 2025 06:00:08 +0000
Files and hashes: 1: 31Tgo6hkUgGEDxpcJDek08Avr_U.roa (hash: kmmgYbNt9oWzUWS0e88Ufjcw3KVy4vM/TBImZVi6icQ=)
2: BVA-ewMKFfhNlaM9uEKeCRcxb44.roa (hash: p6Ztck3uBhR0bzcjLWO0QVdiIOvuYAXPjQqrSbEcptQ=)
3: HqPvNlx7UZiRVbk5_3PH9NhbC6A.roa (hash: +/Uf0WY1OyHo7LRFa5WaahOPnbyyowzO8Q8lBC3l8kM=)
4: RowHyzmbIUhwLNzP2aGdUq-bTxw.roa (hash: BWNoFSha19ToKG1Hm+elPv4NQAdo5EC6p+W2DfujBas=)
5: dcug0fKg-KsGzBpKENJINtdS5vw.roa (hash: 4mmQ47qSm1UkTR696jh82p3nO+ZrpORkySuxILnJi4I=)
6: kXFsWv63EX5LzlpEXl1PFUMjMlU.roa (hash: 55+NcYoCAfsxn/1QTku+M6mFFv7l9njuKzUccasgI84=)
7: qBz1hjzykMH_ZcIwvTn0SDyhgfs.roa (hash: W/hp3H2l3tBtLyOj1Fa5/YEuC/XubK4WM06Ks3Q9e/8=)
8: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl (hash: wOARTC1+vLZHYSEC+EcNkR8Fps7SLFnl5dPShToNYbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:17:d9:85:39:63:07:ee:ed:2e:93:41:01:58:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Validity
Not Before: Feb 17 06:00:08 2025 GMT
Not After : Feb 18 06:00:08 2025 GMT
Subject: CN=8d0fc7ca570e2539a7f75350604fcadeae22ad9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:50:0c:91:d1:d3:96:d1:62:cd:de:ab:f5:60:
da:68:f1:ca:9a:93:98:45:c0:38:d9:b9:f1:d5:6a:
7c:d4:b3:08:d7:06:c3:e1:a0:52:ac:a1:6a:59:29:
9d:7a:aa:96:96:b4:1a:ff:79:ba:8a:46:a7:7e:e7:
9a:83:1a:8d:4b:b7:1c:52:75:64:69:29:c2:df:92:
a9:fb:b7:94:c1:b3:fa:74:be:f7:8a:08:fd:08:87:
34:aa:f1:38:f7:36:20:ed:3e:d6:6a:66:72:d3:58:
eb:58:09:9f:cc:12:22:6d:70:24:15:3a:c9:b9:68:
f5:0e:64:a8:f1:5e:9f:63:ef:2b:b3:ac:12:52:b8:
d6:aa:07:da:9c:16:49:84:c9:14:6d:46:02:60:88:
d0:f8:9f:86:a3:11:3f:61:4c:a9:ec:a5:45:ce:17:
3b:2c:ff:27:53:ad:a9:b6:59:e1:53:de:91:40:85:
42:58:97:dd:c0:bd:31:08:05:a9:e0:cb:4b:26:f3:
c3:9c:45:9a:ea:c8:ea:cb:d7:20:b4:c8:7c:2d:90:
70:cd:5b:25:31:77:c9:51:7f:34:99:27:20:ba:ff:
dc:18:c4:d5:5a:43:a0:9d:eb:de:64:36:f6:cf:5c:
c3:01:84:20:f9:1d:c9:8e:70:8e:22:8b:9a:2a:43:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0F:C7:CA:57:0E:25:39:A7:F7:53:50:60:4F:CA:DE:AE:22:AD:9A
X509v3 Authority Key Identifier:
keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0b:e1:8f:2b:a9:c1:df:17:63:de:aa:92:58:8a:56:8a:0a:
94:28:7e:46:bc:09:1f:c2:e8:91:b3:23:44:05:27:14:56:18:
d0:86:8c:9d:18:af:8f:9c:a2:a5:68:47:fb:f0:9e:b3:43:2a:
09:ff:09:b8:d9:50:e1:ef:d9:84:53:f5:2f:cc:46:f3:d8:ff:
39:73:db:ae:a4:d8:66:30:1c:36:c7:97:c7:96:a7:a9:29:9a:
82:15:88:45:11:23:e7:f9:bf:c9:ae:d4:ef:ad:7a:60:85:16:
8b:1e:02:a6:e9:c3:93:dc:28:b6:19:b2:cf:3d:6e:13:d4:ea:
ce:dd:a8:8a:73:0f:05:8d:bb:1e:27:2e:c8:03:26:20:bc:43:
01:98:f9:c7:e3:b2:78:57:69:30:3c:3d:f9:65:9c:f8:75:89:
c7:5e:60:35:ee:68:5a:17:c3:cb:1e:a7:5c:67:51:4e:61:48:
a5:e4:a4:17:ed:b2:0e:1d:44:57:6b:cc:60:42:62:3a:fa:de:
2d:48:78:d0:aa:ca:09:c2:11:5a:45:f9:70:3b:6d:7e:48:9e:
5f:94:c6:cf:77:49:9a:2a:72:80:27:d6:a1:3a:84:47:b3:87:
78:c2:c6:41:64:71:c9:67:9e:44:ca:aa:98:05:8f:17:8d:6d:
01:81:ac:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:03 2025 by rpki-client