Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: s+EBre9+VXYqkNSowy+bt5jUxN0FpfYT1fl2TDLsbmQ=
Subject key identifier: D6:EB:0A:07:A2:9A:0A:90:8E:76:DF:EC:DA:44:F7:6B:DC:FE:78:7A
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 01951135171D883A2442F6661CA1CACD0754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 13E8
Signing time: Mon 17 Feb 2025 00:00:46 +0000
Manifest this update: Mon 17 Feb 2025 00:00:46 +0000
Manifest next update: Tue 18 Feb 2025 00:00:46 +0000
Files and hashes: 1: 5GQUPOVGommpVDGycPNjbxgsAD0.roa (hash: FIE52nDWdmLHUw5eNYHFQW5KOb1fH0QVln67hfDRIhI=)
2: As_2g2yroeYldeSEBOBcptHFZjw.roa (hash: 2A+ZAisZSqDWuxJUH2YsftgFU0YaUFKEL3In2EBPDcU=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: o3yspVGfXP1QMTcU19Dj+4q7db8F75Mbe9fX4vutjQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:17:1d:88:3a:24:42:f6:66:1c:a1:ca:cd:07:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Feb 17 00:00:46 2025 GMT
Not After : Feb 18 00:00:46 2025 GMT
Subject: CN=d6eb0a07a29a0a908e76dfecda44f76bdcfe787a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:7e:5f:f0:45:6c:0f:02:20:49:5a:97:e6:
fd:e3:de:a9:33:81:fe:b2:65:98:d0:70:d7:ee:0c:
bd:eb:1f:05:f2:a4:f3:47:a7:44:f4:21:80:1e:a8:
d8:47:ec:8a:9c:23:56:df:24:00:5d:61:8d:28:cd:
82:eb:f6:06:b6:c4:64:9a:5e:4f:0f:f6:62:f5:85:
ad:42:58:02:97:f0:43:cf:31:f2:d5:ef:d7:9e:b6:
d6:6c:70:d3:34:28:c9:64:d8:9a:69:d7:33:0e:aa:
8f:7d:f0:8b:aa:de:5e:b9:c4:e0:68:cc:2a:da:59:
b4:fe:7b:b3:18:57:1a:3f:a7:61:c5:a5:51:44:91:
9b:62:cc:cc:bb:42:2c:dd:9a:9b:2c:d7:0f:98:6e:
dc:93:96:0c:26:48:b9:c2:6e:08:78:0c:0b:4b:cf:
a8:00:ca:d8:75:fa:14:5b:24:e9:4e:c3:0b:c6:07:
71:d0:5f:81:c2:bf:91:56:7c:59:2b:94:80:eb:a6:
f0:bf:b3:7d:f2:25:fc:94:65:62:e3:84:64:ae:54:
b0:64:27:b5:27:62:f1:63:51:27:52:b7:53:ee:ce:
36:08:14:ad:92:cb:e1:6b:74:3c:66:02:70:06:29:
2e:7f:d2:0a:cc:0d:3f:f4:a9:4d:d2:a3:ef:03:6c:
b6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EB:0A:07:A2:9A:0A:90:8E:76:DF:EC:DA:44:F7:6B:DC:FE:78:7A
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1a:2f:59:95:c3:10:09:4f:46:9f:98:cf:b7:8e:5b:43:f7:
48:ee:51:91:c2:e3:6b:22:1b:f0:6e:0c:46:99:fe:e1:84:b9:
9c:fa:13:e3:a4:fc:79:00:88:52:32:e1:ce:5d:39:57:f4:54:
e9:ca:2e:4c:1c:c6:27:fd:46:17:34:21:8f:42:a4:4c:e8:19:
18:f5:44:2f:1f:fb:66:96:bf:4b:a1:a2:f1:7a:25:6c:14:06:
89:fe:c9:4f:38:94:9e:3d:15:7a:44:b2:a9:fb:66:59:96:f4:
9b:91:82:0e:42:d8:85:56:a2:54:63:0c:63:ad:b8:6a:c5:da:
36:77:f9:6a:3d:74:59:ee:1c:ba:52:a7:b6:e0:f4:b3:91:ee:
e0:7d:fa:7b:72:e2:0d:78:ca:0c:ae:30:7e:ab:dd:1d:97:a7:
29:e4:24:ae:9f:80:9c:4f:02:5b:1f:0f:e7:61:0e:b3:33:60:
2d:af:9c:df:a7:4f:50:b6:3b:ee:65:13:70:ad:20:73:59:ef:
9e:89:f9:81:7e:c1:9b:42:72:fa:b7:69:7d:42:ba:74:35:77:
8a:2d:bb:77:27:89:13:22:1e:b7:9c:c7:be:04:7b:7e:f4:e5:
95:18:7e:c4:56:d8:90:44:f3:4f:e9:df:67:2f:ea:7d:b6:29:
ba:d1:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:54 2025 by rpki-client