Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
File: MVlVxK8-sajTQAqGYl42XCYpjWo.mft (raw, json)
Hash identifier: xv3A9ouJuyxgl3v54/b6+3cILUW64gpMX2UVFPw/aN8=
Subject key identifier: 7D:D6:C4:7C:4C:10:C4:62:F8:EE:91:05:4C:A7:DA:F6:D5:7A:4F:10
Authority key identifier: 31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
Certificate issuer: /CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Certificate serial: 019512107DCEDF4C0FA4C9F4FDC48409A244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
Manifest number: 11FE
Signing time: Mon 17 Feb 2025 04:00:25 +0000
Manifest this update: Mon 17 Feb 2025 04:00:25 +0000
Manifest next update: Tue 18 Feb 2025 04:00:25 +0000
Files and hashes: 1: MVlVxK8-sajTQAqGYl42XCYpjWo.crl (hash: pEZdmrBHT9oV6QmxteTe5L5IAYyMZfMwjEP5isv5/o4=)
2: w_D9zm0G6d-xgLYZDk_6k0Fdo0Y.roa (hash: uNakKZ5cInU4w53MHNcs8H1FEfnS50QeJJ6h44hvoXU=)
3: xFbU4UXG5RajcOwoLmpvCSpG_lI.roa (hash: EpP3aMWHOolyh4RCM05UrLn8Zcfi0zy+85a7iQrKm9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:7d:ce:df:4c:0f:a4:c9:f4:fd:c4:84:09:a2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=315955c4af3eb1a8d3400a86625e365c26298d6a
Validity
Not Before: Feb 17 04:00:25 2025 GMT
Not After : Feb 18 04:00:25 2025 GMT
Subject: CN=7dd6c47c4c10c462f8ee91054ca7daf6d57a4f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:99:5b:44:50:e2:d0:a9:f5:e7:12:4c:c8:
eb:c2:c6:25:5f:cd:c5:cc:a9:e0:1a:d4:db:4c:59:
54:56:a2:51:77:77:39:80:ea:c2:58:62:c0:44:3c:
ff:a9:66:e6:d5:81:56:36:9a:f7:2e:fe:73:0c:75:
cd:ae:71:a4:ea:37:b8:bb:e1:ed:f9:0b:3d:66:47:
e3:a7:0d:72:fd:3d:db:aa:be:fd:87:6d:5e:52:2d:
79:19:9e:3b:46:aa:96:cb:fc:f7:bc:d9:70:1b:92:
a4:05:d7:8f:20:a3:fe:15:fc:14:ba:95:08:f1:f6:
91:6e:7c:35:ad:d5:c4:4f:3c:53:d7:f0:05:b2:42:
44:1e:b6:bb:de:db:0a:61:be:3b:2e:61:05:5b:25:
e8:28:db:9f:1e:7a:fc:6e:7a:96:1c:0c:91:ab:aa:
e2:8b:cc:3f:71:8e:09:45:f7:34:a9:80:52:eb:5d:
83:9b:ce:b1:f6:68:c2:5c:85:c2:4e:34:1e:b6:9d:
1a:77:c3:85:d0:f5:ca:f6:81:b1:ef:d4:ef:8c:b5:
36:84:e8:f0:1d:5f:01:76:f1:66:37:a0:fc:5f:60:
bd:17:52:e7:9e:ad:b1:8e:98:54:45:79:1e:b8:f1:
6b:f6:30:66:8d:e0:3a:38:a9:d6:31:78:5e:c5:80:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D6:C4:7C:4C:10:C4:62:F8:EE:91:05:4C:A7:DA:F6:D5:7A:4F:10
X509v3 Authority Key Identifier:
keyid:31:59:55:C4:AF:3E:B1:A8:D3:40:0A:86:62:5E:36:5C:26:29:8D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVlVxK8-sajTQAqGYl42XCYpjWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/21c61a-d6b1-4aca-9782-97348336f33a/1/MVlVxK8-sajTQAqGYl42XCYpjWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:93:fe:a5:f0:09:d4:28:4c:12:16:35:a2:19:39:e3:e5:3b:
02:19:9d:fe:cc:7c:f6:39:a6:32:76:33:55:db:af:12:95:c2:
ca:8b:4d:c0:86:0a:99:5b:a9:44:8d:a9:82:5e:5e:54:b9:1a:
46:7e:ca:c2:bc:07:66:c5:99:df:a9:4e:c9:6e:3b:99:48:f4:
2b:c2:b2:33:f5:7b:ba:45:e6:a4:13:63:98:ce:69:7a:a4:5f:
35:c1:62:c2:39:1d:42:44:52:e7:77:23:09:06:f2:9d:96:42:
72:3e:8f:52:02:b8:31:7d:1e:de:85:54:08:f3:a6:4b:8b:2e:
20:6b:be:62:35:21:5f:b9:4f:03:98:c4:47:44:38:db:58:b1:
ee:6a:9b:a0:fa:a2:c3:43:b4:80:27:76:a3:de:af:37:1d:50:
d5:b6:09:36:0e:bc:d9:c9:0f:c9:60:f8:e6:c6:79:1a:e2:ac:
cd:17:fb:3c:1c:10:89:5e:41:ed:05:86:b6:01:45:c0:7a:8a:
32:0c:7e:ae:02:b3:71:90:72:ed:6e:a9:f0:e7:83:9e:ed:a8:
8a:25:3e:38:e1:50:4e:5e:8d:60:71:fb:25:2f:86:a8:df:76:
ce:ac:90:81:18:8f:10:c4:f6:00:90:da:8f:cb:ad:d2:e8:20:
f8:66:ce:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:43 2025 by rpki-client