Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
File: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft (raw, json)
Hash identifier: v1WtbCLsPZPqACoaHbF78L/U46cMZMpjNZuR1GSkBpU=
Subject key identifier: 41:77:72:71:78:84:C4:F5:FC:29:35:29:84:E4:97:48:0A:B5:F1:55
Authority key identifier: A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
Certificate issuer: /CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Certificate serial: 0195113521308A7D2CBC68F0AE628916684C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
Manifest number: 09CA
Signing time: Mon 17 Feb 2025 00:00:49 +0000
Manifest this update: Mon 17 Feb 2025 00:00:49 +0000
Manifest next update: Tue 18 Feb 2025 00:00:49 +0000
Files and hashes: 1: ehG-SCGwvd8yBJatadELhp3bH6w.roa (hash: YkiZ4YuzwJ9yzU2pKOGO15cIT4PrhxRCvMLtPrdtwoE=)
2: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl (hash: W2Z1b3Z/9FphPTaafMmG2GyjwwafOBJYjjKvafHw2YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:21:30:8a:7d:2c:bc:68:f0:ae:62:89:16:68:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Validity
Not Before: Feb 17 00:00:49 2025 GMT
Not After : Feb 18 00:00:49 2025 GMT
Subject: CN=417772717884c4f5fc29352984e497480ab5f155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dd:ec:ea:37:21:8c:52:d2:9b:d8:0c:87:e2:
68:c1:86:57:b3:e2:fb:a1:9b:16:14:7e:12:d0:4d:
88:81:a8:67:2f:ab:02:79:0c:5d:23:56:68:77:81:
e7:cd:94:26:72:02:9a:86:a9:cc:0e:af:a4:76:64:
bb:3d:03:cd:7e:f9:b9:15:33:0b:67:d9:10:86:7e:
d4:47:17:b3:85:7a:5b:ab:88:7d:7f:bc:58:25:94:
1c:de:4b:9d:df:37:dd:8e:f5:16:fc:d8:7b:a5:3d:
13:1e:6a:35:1e:6a:d1:6e:26:74:73:8b:53:32:17:
05:45:3f:f3:a1:23:4f:99:be:52:e0:2a:27:95:e6:
59:2e:d8:d2:66:f7:fa:cc:39:ae:84:5d:9b:56:f7:
e4:c9:1b:22:45:3c:60:c6:78:d1:71:1d:0c:47:52:
98:f3:46:a5:a3:7e:59:d0:9f:e2:d3:6a:5a:6d:1d:
b7:e2:28:b7:6d:3c:9d:2b:80:5b:db:5c:51:b0:e0:
3d:b3:bc:42:bb:60:73:78:0f:10:ee:06:60:d5:b3:
2a:94:a6:f2:0c:2e:ac:52:b0:ce:9b:87:c6:09:ff:
78:19:2e:59:b0:d0:33:bb:83:3d:74:1d:87:09:a2:
3e:cc:86:36:0f:c5:64:aa:52:dc:5e:26:c3:f7:be:
79:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:77:72:71:78:84:C4:F5:FC:29:35:29:84:E4:97:48:0A:B5:F1:55
X509v3 Authority Key Identifier:
keyid:A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0b:a3:46:65:98:d1:4a:82:d1:37:30:75:d2:d1:f5:52:fc:
ee:c1:bd:77:d1:e6:f6:24:ce:84:d8:04:a3:3f:2a:4b:83:43:
c9:5c:d6:f0:b2:98:2a:f7:b5:be:89:03:10:70:20:5b:71:ce:
c5:9f:1b:60:68:61:61:37:7a:01:87:18:a3:84:4e:72:9e:61:
54:64:09:0c:ce:06:7e:f5:22:0e:3f:47:95:26:bc:0c:8e:56:
38:16:d8:c4:95:6c:6a:94:8f:a4:d1:2b:a1:0a:d2:7a:38:14:
c0:de:02:30:39:a9:14:cb:84:6f:b1:f0:ed:87:8e:26:8f:c1:
e2:e1:a7:71:d8:68:97:ec:b3:3f:7a:07:68:bc:b8:78:a6:da:
8b:3d:72:83:5c:65:10:82:89:bb:29:5b:90:13:ce:62:c7:1f:
f8:4d:ef:17:39:f8:4e:a6:7f:03:09:17:91:e9:bd:b9:4d:24:
35:c7:1c:9a:ab:e8:42:9a:f3:66:13:ed:8b:fc:8a:f1:88:61:
8e:8d:db:30:4f:d9:6f:c2:20:d1:e3:4e:f3:a0:a0:ec:e2:9e:
7b:1f:e1:ff:36:b7:83:7c:6e:43:d2:6c:0a:77:69:20:ce:37:
8c:44:16:72:0a:1d:ac:7b:da:b0:09:6e:d5:d2:38:35:88:71:
99:1d:f0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:54 2025 by rpki-client