Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
File: _PXwgDHjWvlUXTrT0TjK0QOW4so.mft (raw, json)
Hash identifier: l0dCwGYJGebeK5od82y/dkexC2igOvgnNO56tFyEl2Y=
Subject key identifier: 83:95:81:5B:C8:F3:FC:02:70:D6:7D:A5:57:2F:49:4B:57:79:F0:96
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Certificate issuer: /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial: 019512473F0EE5336DFCE78669D09108675C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 05:00:13 +0000
Manifest this update: Mon 17 Feb 2025 05:00:13 +0000
Manifest next update: Tue 18 Feb 2025 05:00:13 +0000
Files and hashes: 1: 27ql0pmKcM7odOuyt-r9IUbz8H0.roa (hash: 8BtUKmV8OD/wNsVNWexZC4Gh5lDDpl/q9sI4sznft7k=)
2: _PXwgDHjWvlUXTrT0TjK0QOW4so.crl (hash: grDUWQDUue9I9DYYubfURjPcwSkNEmCJTzbemmltbJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:3f:0e:e5:33:6d:fc:e7:86:69:d0:91:08:67:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Validity
Not Before: Feb 17 05:00:13 2025 GMT
Not After : Feb 18 05:00:13 2025 GMT
Subject: CN=8395815bc8f3fc0270d67da5572f494b5779f096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9a:6b:79:9e:a9:8a:25:cd:7a:eb:6e:b6:d2:
55:82:76:27:70:b8:4a:3d:ec:a1:41:c8:dc:fb:8d:
27:b3:61:50:b1:f5:8e:29:5b:17:76:b2:cf:d1:a6:
22:0e:29:bb:83:3f:6f:54:6d:32:42:46:d0:ff:5f:
0d:e7:04:73:f2:a6:53:0c:85:2e:22:33:22:e4:a5:
68:46:80:ef:30:71:c4:47:58:fe:01:8a:de:ab:af:
d4:a6:6f:da:e9:be:77:5c:94:68:2c:80:fa:fa:67:
72:c2:b3:b4:c9:70:38:18:6c:5c:96:40:f0:f8:24:
90:f3:67:80:31:ff:98:a4:48:6b:3e:79:cb:63:fb:
49:bd:ef:94:34:d7:5a:eb:0a:52:c2:df:2a:26:d8:
2a:0c:2b:45:4e:d9:44:f7:7c:00:93:b6:d5:8d:4d:
c4:44:d6:bd:62:ea:3e:77:61:6e:14:08:25:59:bc:
16:fe:54:6f:16:6b:4c:1b:fe:f5:4e:8f:a9:90:56:
28:14:a6:24:6f:87:c8:55:ed:f0:5a:b7:e7:da:84:
c9:67:96:b3:52:ca:67:bd:af:16:3b:d5:bf:49:8f:
46:b7:50:fd:fe:4c:5b:6e:ac:53:f4:02:4c:04:9c:
d2:75:1a:3c:1d:08:c6:5f:c3:c5:c9:e9:41:16:47:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:95:81:5B:C8:F3:FC:02:70:D6:7D:A5:57:2F:49:4B:57:79:F0:96
X509v3 Authority Key Identifier:
keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9e:77:79:65:6d:8a:96:78:df:ba:31:2a:89:98:98:1f:c8:
32:a7:c1:d0:7d:de:84:73:80:ec:3a:7d:e5:09:f3:b9:12:61:
02:d1:60:b9:14:e2:cd:e6:0b:b2:ff:f0:3b:93:ff:8b:d0:77:
02:20:2a:4e:4d:c5:ed:fe:03:49:1b:29:5f:25:bc:97:4c:0f:
f4:fb:c1:f4:2b:7f:7e:55:3c:be:c1:d8:da:fe:1f:0b:ee:bf:
e8:a9:50:dc:c6:2e:77:3c:75:29:95:dd:45:e7:25:87:b2:83:
21:4f:42:3e:1b:58:82:99:4b:43:fc:51:38:a3:46:e8:b3:6c:
1f:a3:ae:b1:98:71:0e:33:2a:a6:52:15:3c:86:06:c3:a9:90:
ec:4f:7c:6f:9b:d7:04:de:9a:be:80:e4:28:3c:47:1b:40:07:
2f:ad:90:06:30:4f:fd:2c:ea:22:3a:f5:cf:9f:d3:19:73:9c:
ba:9c:96:42:e4:4f:7a:7e:b4:da:74:8e:9c:a9:5c:14:82:db:
2a:f2:d0:7f:42:99:59:2a:b3:ba:93:55:ab:80:97:58:fd:89:
08:fb:cb:8a:a1:f4:b6:a0:ee:8e:73:f9:f3:d3:c3:4c:1a:14:
8d:f2:c7:78:f4:0a:47:d2:c3:7e:74:34:df:f6:21:4f:1f:5b:
7c:f1:7e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:30 2025 by rpki-client