Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
File: drTT6JcTIsZNegRYurdFqJreTeU.mft (raw, json)
Hash identifier: NzS1wNtCJdgyQ77bv/663C+rF8+9SZmqoif3ck6igl8=
Subject key identifier: 4E:7E:CD:E3:4B:9A:42:A3:1C:54:E0:70:07:EA:D8:C1:ED:D2:71:C7
Authority key identifier: 76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
Certificate issuer: /CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Certificate serial: 0194C3877CFBFDEDB1406B131D9A052F10E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
Manifest number: B1
Signing time: Sat 01 Feb 2025 22:00:23 +0000
Manifest this update: Sat 01 Feb 2025 22:00:23 +0000
Manifest next update: Sun 02 Feb 2025 22:00:23 +0000
Files and hashes: 1: ZYX1Qhws2vdCl-u2QXbSsdG6zUs.roa (hash: 1Yas72g5IvT1A6G5CoyKopOr6adZNC8arOgG6BPNF2I=)
2: drTT6JcTIsZNegRYurdFqJreTeU.crl (hash: jo/En96yZbKDMxiQ2QNM6fzcM4t3Z+Z/spq+qmUUc7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:7c:fb:fd:ed:b1:40:6b:13:1d:9a:05:2f:10:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Validity
Not Before: Feb 1 22:00:23 2025 GMT
Not After : Feb 2 22:00:23 2025 GMT
Subject: CN=4e7ecde34b9a42a31c54e07007ead8c1edd271c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:18:83:6e:6a:37:73:60:c5:e6:b6:a0:e8:
9f:de:85:30:b0:d8:96:9b:b3:49:dd:13:c9:1d:c5:
10:b4:6d:41:a9:03:ec:b5:b1:37:b3:cc:82:50:a8:
52:66:61:e6:d1:19:26:7a:7f:7b:7f:68:2d:3a:5f:
1d:cf:d5:93:40:98:f5:ae:f3:57:b1:44:92:79:d1:
2e:bb:4d:4f:4c:9d:5c:b7:e9:b1:e4:6b:1a:79:7f:
cc:21:f8:6d:45:c5:26:bc:55:a9:66:80:c9:9d:2d:
3d:6c:86:f1:08:14:a5:2a:fd:ab:b2:40:2f:5e:5c:
1c:12:ad:9f:52:78:e3:a8:10:bb:b1:3a:f4:c1:c5:
9d:bd:b6:a3:80:f5:b9:c1:53:24:80:8b:f6:5f:83:
fd:14:77:52:6b:67:f0:9e:f3:24:9b:3f:98:1f:10:
7f:51:1d:91:55:43:7e:d3:ca:29:f4:e4:97:6a:5d:
55:3b:99:79:7a:6d:53:df:d1:71:cc:d0:80:84:23:
c6:8b:5b:ed:32:e5:61:57:59:b2:cb:cc:3d:44:8f:
e0:d1:ec:3b:63:82:88:00:f0:db:f6:29:5b:34:65:
ff:47:ba:d2:58:da:25:56:12:3c:cb:b9:8d:03:a8:
6b:98:60:84:bd:d9:27:c5:17:8d:b3:d9:15:eb:43:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7E:CD:E3:4B:9A:42:A3:1C:54:E0:70:07:EA:D8:C1:ED:D2:71:C7
X509v3 Authority Key Identifier:
keyid:76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2f:b3:50:81:d1:37:26:39:78:aa:17:d6:c2:fb:79:f9:2a:
95:ae:ac:06:a5:ee:9b:a9:3f:97:c1:8d:c0:e3:64:a1:10:98:
c9:08:68:6a:11:c6:2c:e0:40:3c:7a:a2:e2:5b:56:44:b0:ba:
74:72:a0:46:23:0c:fd:88:d3:eb:8f:cf:37:6b:a1:16:5f:7f:
73:3d:0a:5e:00:39:0e:b2:55:fc:41:f5:0f:bd:60:2b:80:e7:
5c:40:85:c2:21:3b:97:10:c3:19:ad:e6:6e:03:4f:2f:10:36:
36:0d:a2:e4:f2:b5:e0:f0:70:29:8c:3a:bb:79:5f:7d:0f:df:
3a:56:51:e1:3b:af:05:df:d9:d3:c7:fb:3f:fe:51:45:66:22:
4b:e1:2d:4f:3a:81:cd:0c:97:18:48:87:c4:eb:a6:d6:3e:57:
4a:08:6e:e6:d5:29:cb:09:06:29:4c:c9:52:4a:15:a0:48:f1:
d3:15:e0:56:28:12:40:ec:cb:c6:66:3a:c2:b5:cd:61:36:87:
36:87:24:4c:51:76:d1:41:ec:c3:d2:a4:e9:0f:49:01:d3:bd:
36:67:e5:46:db:91:49:43:c6:77:b0:56:46:00:90:7b:c1:00:
94:60:63:d3:e4:af:12:71:62:ee:44:8c:50:e9:94:ec:3d:af:
7e:af:62:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:41:40 2025 by rpki-client