Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
File: flVV8aLO6JtxNGVghvBU15Y1PB4.mft (raw, json)
Hash identifier: K1nj+kTpIN5LkP3I7yQtYD6TYrx7ASr8xlQtwcqjRXg=
Subject key identifier: 76:C3:DF:B0:68:D8:4D:6E:56:CB:32:32:BC:43:F2:B5:82:C9:EC:5A
Authority key identifier: 7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
Certificate issuer: /CN=7e5555f1a2cee89b7134656086f054d796353c1e
Certificate serial: 0195108FD2CAE64804C816E798D09E7A9756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
Manifest number: 145A
Signing time: Sun 16 Feb 2025 21:00:15 +0000
Manifest this update: Sun 16 Feb 2025 21:00:15 +0000
Manifest next update: Mon 17 Feb 2025 21:00:15 +0000
Files and hashes: 1: KqK95kA_OeRU7nACiSd3lAze0vY.roa (hash: B7AMB5/+VeIa1+pxAsGTh2RB/UvVZMPeKnxdMUh4GP8=)
2: XDVhwmlTf_nqhCgNATZSd0ar0Aw.roa (hash: 4sk0t2n52t1+zIieedKbu6GF5jguH4obuoBrZPYHYOc=)
3: flVV8aLO6JtxNGVghvBU15Y1PB4.crl (hash: MhM/A+CFNwTLm8uSQ/ssSBZpjnXX+SMhLzzV2bjob4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:d2:ca:e6:48:04:c8:16:e7:98:d0:9e:7a:97:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5555f1a2cee89b7134656086f054d796353c1e
Validity
Not Before: Feb 16 21:00:15 2025 GMT
Not After : Feb 17 21:00:15 2025 GMT
Subject: CN=76c3dfb068d84d6e56cb3232bc43f2b582c9ec5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:5b:d8:1d:71:70:6d:ed:62:c6:71:85:98:
9a:68:31:58:56:2f:f4:e7:84:a3:71:85:af:aa:58:
64:f4:5b:a6:82:c5:f8:70:34:b9:c6:26:40:8a:bb:
fb:3e:18:07:10:b4:a0:55:e1:02:80:72:bf:55:60:
38:04:87:95:dc:36:35:5d:b0:46:e5:49:03:1d:ca:
86:00:0c:6a:78:05:28:f0:42:59:07:54:fc:3f:9b:
91:96:f7:42:e4:4d:37:f6:1d:8c:9f:6b:bc:59:1e:
ab:6a:d3:34:0d:c5:75:bb:36:c2:42:10:14:7c:69:
da:5c:aa:78:f5:40:74:fc:3a:17:ea:37:3f:6e:e1:
12:18:68:b1:43:82:46:75:e5:bf:43:93:27:3c:95:
af:02:f0:92:bb:b1:7b:b8:f0:fc:d5:c8:61:54:4b:
18:fd:d5:92:84:f6:b4:a4:d9:3b:a4:57:16:4c:e3:
ba:fa:b7:96:7b:c7:00:93:9f:e7:85:3a:51:21:3e:
8d:1e:6a:af:f9:12:ef:3f:6c:1b:c1:62:c2:37:99:
f6:60:84:0c:0b:c1:13:43:a2:b2:c2:b3:63:9c:68:
9e:f1:2b:de:dd:c9:7e:55:d5:cb:ef:f6:80:32:5c:
fe:31:e3:96:87:e0:ca:10:84:ec:cc:bc:f8:50:f0:
22:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C3:DF:B0:68:D8:4D:6E:56:CB:32:32:BC:43:F2:B5:82:C9:EC:5A
X509v3 Authority Key Identifier:
keyid:7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:08:15:8e:29:47:16:48:c5:52:34:cd:a8:ea:ef:09:4e:92:
14:ca:3f:c0:d1:bf:a9:44:bb:b4:0d:30:5c:2e:57:41:2f:ad:
dc:db:7b:dd:b8:16:b1:48:dc:2f:b8:13:86:40:69:7f:2a:83:
8b:5b:d7:f1:f0:0d:e5:6c:53:81:9a:8c:48:82:fc:64:45:d9:
23:76:1e:1f:3c:4d:3d:38:b6:73:91:09:71:41:be:e6:dd:08:
95:7d:37:7e:0f:d9:31:2d:69:de:1d:5e:71:5d:76:9a:9d:b7:
69:43:e1:16:08:a1:9c:44:d2:8b:b8:d1:22:0d:cb:58:c1:b2:
b2:a0:7e:cc:44:76:e1:8e:e8:a7:e3:d9:43:98:91:18:8f:17:
5c:1c:06:3b:0b:02:3d:bb:35:15:59:5e:ce:67:4c:62:0b:61:
68:4e:65:8a:d2:28:cf:30:cd:2c:b5:75:e1:c9:dc:5c:40:12:
25:5e:63:e7:45:5f:9c:65:29:7e:f4:87:10:30:a6:d0:ef:1e:
cf:82:d5:06:f0:73:a9:05:69:9c:dc:24:39:2f:27:dc:c5:18:
1a:29:3b:f1:af:fc:88:8e:b6:2e:11:cf:46:17:f2:6c:c7:fd:
a5:81:a2:fc:e3:cf:b2:f6:4e:bd:c6:65:66:9c:55:f4:52:79:
28:b3:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:00 2025 by rpki-client