Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier: 5Vz4HhEElyCk4cqka2gAxjvLw5KzaimbPZVr0up/rwQ=
Subject key identifier: 7F:D8:B9:49:F5:8C:44:76:2B:5D:EA:29:95:C2:00:6B:F2:3F:28:B5
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 01951021F31F007A9837AD89A2E659FC4344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number: 0D7D
Signing time: Sun 16 Feb 2025 19:00:15 +0000
Manifest this update: Sun 16 Feb 2025 19:00:15 +0000
Manifest next update: Mon 17 Feb 2025 19:00:15 +0000
Files and hashes: 1: EBviMFYi8rZcphn8RJGlAKBgxTk.roa (hash: 8nvV1InE36Gf9l6K4C4ZM0vFwJYFzsCUlHvr3Ohnwio=)
2: GyhAtf15yZqMprvOSAG-mSzNZTU.roa (hash: jfVjDUAXNOWRUx2duW7NqVNPhOHvwJFkEOJDlRjLf1c=)
3: UVX7i73xTf8HXSe4y9KHKB797Lc.roa (hash: aDk/GLVDvACcwLd9kMCdjb1R7e1Nu8NwyRgL4qjO1BE=)
4: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: UtPcLPDDiyYXtca0zijVqwUhBx92CHfk4i2Ic64sLJw=)
5: VjMPHeJDKYGawcvbQkGRY-IGbRw.roa (hash: U2Wh3/ktayWnH5Ju+3oCrYV1vRV7bDQpKkdbX5Ys83Y=)
6: Y2_bnui3NBLO8jQirmiUuAzGyRw.roa (hash: Sj4Gp5iophRPrZcWhz+iS2BZX0tuH2ZNqq3e2/zFjig=)
7: ntrt1qLEp7JFw_l17Dbev4liPcY.roa (hash: 5lVCUBQu1df/S1FQOKl/MyF/XxoO3ZxscsaY8Q1dPLk=)
8: vfMCWDXHqUhfE9pCWjy3UIK3sYE.roa (hash: cZ4cjZLkxHd/pGP9SjokJ4j+E/I+MNHdDpithj4CeCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:21:f3:1f:00:7a:98:37:ad:89:a2:e6:59:fc:43:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Feb 16 19:00:15 2025 GMT
Not After : Feb 17 19:00:15 2025 GMT
Subject: CN=7fd8b949f58c44762b5dea2995c2006bf23f28b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:50:1d:4c:21:91:12:88:19:30:31:00:19:
7a:ba:b0:be:5e:be:ea:cb:6f:de:a7:86:5f:17:61:
71:2d:fc:ef:4b:ae:73:af:12:42:f6:89:dd:2f:ad:
5d:6a:91:6f:f3:1f:47:2b:05:07:5c:59:73:59:30:
8d:50:c6:16:30:07:a3:c1:87:8e:34:a2:fb:e4:0b:
7f:fe:2a:a9:7e:49:80:ed:b2:15:de:94:b3:f0:e9:
8c:54:92:5f:33:ae:33:4f:03:24:99:15:65:cf:22:
af:77:33:d3:10:fb:49:eb:27:b4:c4:82:33:4d:68:
f8:53:66:d7:fa:e2:e1:42:d6:75:ec:1f:6c:e7:2e:
d5:cf:da:16:99:5b:21:2c:d0:a0:7a:6f:a7:de:97:
7c:cf:72:89:cb:b7:dd:0b:01:07:2b:3e:ca:26:be:
cd:0e:26:2a:e4:cd:5c:63:2a:cc:16:27:2f:c7:66:
4a:6c:ad:56:69:74:65:cf:56:e7:9f:c2:c1:c3:18:
13:d1:00:30:0e:0a:bb:5c:b3:da:38:24:5c:97:0a:
c9:8a:35:d0:4b:26:c5:02:f9:24:2a:99:f2:c7:83:
1d:42:1e:f3:2b:9d:fd:37:50:41:8d:b9:ea:a6:e0:
d2:ae:a7:c1:65:4d:e2:68:37:b5:c0:a9:af:30:57:
36:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D8:B9:49:F5:8C:44:76:2B:5D:EA:29:95:C2:00:6B:F2:3F:28:B5
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ef:f5:f8:98:aa:c2:41:71:f4:9b:8f:e5:5c:96:9e:58:e7:
7c:a2:3f:66:09:4f:96:dd:4a:a3:a7:cc:c6:4b:a7:96:76:44:
47:a5:57:a2:c2:fc:b3:40:66:56:4f:55:76:98:3f:62:de:49:
5c:fb:dd:f2:00:78:6a:29:c7:86:9c:83:02:06:9f:68:71:39:
f2:6e:3f:5f:71:af:00:a8:88:e6:0e:ba:9c:72:02:33:52:0d:
be:1f:c2:71:b2:ff:64:5a:5d:76:e1:3e:c2:18:0b:ac:36:bc:
9f:f2:c4:c0:50:ef:af:d3:eb:90:32:20:0d:d1:71:33:6c:19:
75:8e:fd:85:da:64:2c:b9:c1:8d:81:52:38:be:c4:27:6f:e6:
c8:2e:20:8c:ee:e9:e4:8a:6b:1a:44:7a:5c:c7:1a:56:bf:bf:
33:cf:76:16:fe:35:92:3e:5a:89:43:b5:13:f0:0e:16:fe:15:
db:4c:78:3d:79:3f:a9:7e:73:62:a7:c8:a4:2f:02:58:51:2d:
85:10:0c:77:76:52:1b:c7:62:15:f1:93:75:38:c4:b2:6e:ef:
df:b5:66:6f:c7:9d:86:97:66:a4:d8:b6:fd:6a:4a:77:5a:20:
c5:17:d7:20:42:d5:2b:50:2e:c8:5b:eb:04:6a:ec:82:2e:b7:
7c:ff:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:13 2025 by rpki-client