Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
File: iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft (raw, json)
Hash identifier: lW9pmfry2CVcwM1l3L6OabNhJ8jP3az05GAIn6uabZ0=
Subject key identifier: 78:0A:68:46:AA:F9:87:39:44:A1:56:34:E9:DD:0D:EC:27:31:08:A0
Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
Certificate issuer: /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Certificate serial: 01951134C801A89367564103FE8FBB83C713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 00:00:26 +0000
Manifest this update: Mon 17 Feb 2025 00:00:26 +0000
Manifest next update: Tue 18 Feb 2025 00:00:26 +0000
Files and hashes: 1: RVfUxaKwVOxHFRtJ1M0yTsL4WXU.roa (hash: pKnXAopaFCsi1rLxZMLLXoTv9xoOBoXWRjgeegBslqw=)
2: iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl (hash: z58bPAVfZ5trHEx8iaPwNjhzU83RH6Js00iRksVJmrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:c8:01:a8:93:67:56:41:03:fe:8f:bb:83:c7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Validity
Not Before: Feb 17 00:00:26 2025 GMT
Not After : Feb 18 00:00:26 2025 GMT
Subject: CN=780a6846aaf9873944a15634e9dd0dec273108a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:3c:2a:30:7b:1b:5e:75:4c:8c:e8:00:8d:
61:25:1c:33:2c:76:5c:0d:40:6d:12:e3:5c:39:46:
b6:76:48:1e:10:34:97:9b:5b:48:c0:47:7a:b9:69:
5c:6b:f8:10:53:6a:46:ea:cc:c7:b5:cb:e9:d4:7e:
dd:80:c5:e3:8e:31:4d:9b:3c:7d:10:60:c6:44:c0:
70:fa:69:5e:07:91:dd:82:75:4b:4b:e5:a2:08:88:
b1:81:d6:f4:d4:2a:50:65:c4:a8:28:18:68:1f:b2:
7b:b8:42:f4:e3:6e:a6:9e:b6:07:a6:26:47:db:b0:
bf:87:6c:f0:de:c2:c1:ea:bc:b9:94:3f:78:0b:68:
ec:14:71:6a:d8:54:15:22:81:ea:fc:63:c1:65:de:
73:42:bb:0f:f7:b5:98:04:c9:c1:c4:d1:3c:54:c1:
7f:21:c3:bc:0b:aa:cb:e0:4d:4d:32:79:35:da:c7:
b1:07:4d:20:6f:3b:6d:2c:ef:66:cc:42:c6:09:ee:
a2:c3:7b:2d:cb:6c:37:db:8c:4a:a1:26:2f:3d:c4:
8b:e0:4d:76:64:ce:af:2e:96:87:89:18:7c:3d:a6:
d3:8c:a8:9b:21:62:19:39:d2:d9:a3:e6:2a:83:26:
2d:cc:2b:07:59:bf:6b:12:25:0b:da:e3:dc:8f:04:
32:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0A:68:46:AA:F9:87:39:44:A1:56:34:E9:DD:0D:EC:27:31:08:A0
X509v3 Authority Key Identifier:
keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e1:82:13:ce:00:24:38:7a:29:2b:98:a2:37:11:0b:9e:5b:
b6:a8:cd:65:08:14:e7:4a:dd:e7:34:66:a5:22:8e:77:80:bc:
dd:f4:f5:57:89:84:2e:02:a5:7c:69:5f:67:0a:a0:1f:f8:5b:
75:5a:d7:1b:29:19:36:63:89:81:c9:11:6a:14:ed:26:8b:5b:
d7:65:f0:32:99:c8:42:c6:d6:db:90:d2:f0:55:46:cf:15:ef:
91:32:a4:e4:9d:b0:b4:d9:bc:e9:2e:77:1b:c5:38:8c:01:99:
37:a2:2a:25:37:e5:67:b0:92:07:75:f1:8e:14:a8:49:8d:5a:
9d:77:43:c5:0a:aa:d4:3e:f7:8a:cd:a6:dc:fa:c6:aa:e8:fd:
50:87:c1:ff:f5:e2:bb:c3:0f:4e:ce:57:b9:f8:cb:9d:ea:41:
cc:97:18:0b:2e:a8:ab:9e:bf:77:ba:6d:e2:15:25:08:44:18:
94:36:88:77:93:a3:7e:92:e3:1e:78:b7:1c:07:1f:6d:14:d1:
c0:54:16:c6:4f:f9:72:a1:7c:98:7a:d5:5b:cc:2f:a2:88:bb:
14:cb:83:d5:1a:32:b4:03:27:e8:c5:b0:ec:06:80:96:17:00:
a9:ba:36:cd:4b:13:e1:5f:0a:8d:5b:9e:22:cd:98:b9:78:08:
9b:dd:af:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:39 2025 by rpki-client