Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
File: 15ToHXL1nGWg0YFEobJgeYNTa0o.mft (raw, json)
Hash identifier: ZsMVxGTqdqDkQwH4Lp6NBNKFk0N4VAuHr/t4eXnEBf0=
Subject key identifier: 2C:FC:17:6D:BE:6A:66:8D:A1:FD:85:4D:A7:CE:83:1E:AA:AB:44:1E
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 0195116BA7EEAAFBE707B54F0B7DB3727140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
Manifest number: 0B5F
Signing time: Mon 17 Feb 2025 01:00:22 +0000
Manifest this update: Mon 17 Feb 2025 01:00:22 +0000
Manifest next update: Tue 18 Feb 2025 01:00:22 +0000
Files and hashes: 1: 15ToHXL1nGWg0YFEobJgeYNTa0o.crl (hash: Z6yu0gm+JeRPTPZixq6DZUxb8f2WlaGtEzwPf4sTVnY=)
2: ATm3n0KFZ5OKTQtdaMLYTaNNVew.roa (hash: 2UTJGztOoJrr9yNdFqpMauhjZZvVEquE5BNwI7gR6Xg=)
3: ac_ZR0uyAlaCoYYTyxabMzs0ruQ.roa (hash: 2lsdqjwrAVWCJd53FIUYeMEFwheNjGGCw24m80TwAaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:a7:ee:aa:fb:e7:07:b5:4f:0b:7d:b3:72:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Feb 17 01:00:22 2025 GMT
Not After : Feb 18 01:00:22 2025 GMT
Subject: CN=2cfc176dbe6a668da1fd854da7ce831eaaab441e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:77:47:ad:6d:52:bc:3f:bf:51:4b:07:a8:08:
8c:fb:57:69:6e:8d:dd:55:cf:f0:26:50:fe:c7:2c:
5a:32:3f:e6:4d:a4:ec:57:d9:3b:e0:20:04:03:a6:
60:a8:9c:f3:4f:3a:67:38:71:95:cb:d3:8e:9c:65:
e8:06:95:ea:a1:b1:48:ab:0d:90:b6:1b:e3:ef:5f:
72:73:fb:97:2f:02:e6:42:54:bb:ec:13:dd:c7:31:
0c:ec:76:df:0b:16:78:63:40:e6:79:93:71:08:a6:
0b:86:d5:ad:3a:5b:08:7e:ed:d4:6a:90:3c:09:80:
6c:c8:a0:ec:b3:2c:5c:3e:46:2b:89:de:c0:d9:60:
75:ab:dc:70:59:99:91:2d:41:62:11:19:34:d2:cf:
42:b2:85:84:c4:81:a7:97:f9:a0:29:38:54:c9:39:
e1:3b:da:28:c0:77:6a:a3:76:2b:b6:7e:c2:13:11:
57:ce:9a:a8:66:97:91:cc:7f:3f:43:3a:a3:65:88:
d6:ee:c5:29:f7:9e:a2:ed:8d:ad:71:1c:e6:bc:ab:
24:3d:83:be:09:7a:0d:58:1c:da:87:c7:6f:3b:cb:
ff:77:71:ec:03:03:4f:7b:80:66:f8:ed:21:4a:2c:
8a:b7:8a:09:67:26:bc:2c:cb:c5:83:bf:0f:92:e6:
3d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FC:17:6D:BE:6A:66:8D:A1:FD:85:4D:A7:CE:83:1E:AA:AB:44:1E
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:05:53:b8:5c:5a:9c:b3:24:19:e7:d3:25:9b:15:86:e2:07:
07:8f:66:09:59:21:4f:da:aa:10:84:d0:ec:3e:d8:d2:21:f5:
e0:0e:02:6c:11:ea:9a:4b:a7:47:a9:57:c3:2f:c9:34:29:ee:
61:ef:59:b4:f0:65:51:aa:e2:f4:ff:24:91:aa:55:0a:78:e6:
77:b3:4c:37:fc:9c:3a:22:90:55:08:e4:cc:9b:a9:95:2e:f8:
aa:8f:cb:b1:8b:1f:c7:27:f2:43:59:5c:00:3a:1d:44:c0:fe:
33:82:ff:a7:ca:80:c3:3a:30:06:8c:6c:90:3f:17:48:0d:9a:
10:d5:8a:76:16:80:c2:fe:15:eb:cd:43:62:27:13:29:ae:be:
eb:6f:3f:07:f0:90:1d:eb:ac:87:39:27:8a:06:9f:5f:4a:47:
55:db:9d:f7:50:71:a3:e1:0b:52:be:2c:d2:e7:e2:90:ec:bd:
29:6b:4c:95:72:62:cb:dc:ff:03:e0:9e:b3:93:5d:a8:00:f1:
84:3c:83:42:29:31:76:df:4b:a6:9b:e7:d3:42:ba:80:f3:cd:
a5:a0:e0:67:e5:15:52:08:c9:80:0e:4c:4e:b9:1b:d5:b9:5c:
f7:44:bd:a7:f3:b6:f4:1d:3f:ba:e9:a8:90:a2:da:3d:dd:13:
55:f3:3e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:15 2025 by rpki-client