Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
File: 92O3x0pHzua9mbvGKu-DalYCtTE.mft (raw, json)
Hash identifier: Ti3MctEf5zoKM9AGwAr4IAj28U0o4EyuY5g3ZOiesCY=
Subject key identifier: CD:CB:F4:54:38:58:7B:35:E2:38:47:38:BE:59:D7:FC:FC:EE:9E:4B
Authority key identifier: F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31
Certificate issuer: /CN=f763b7c74a47cee6bd99bbc62aef836a5602b531
Certificate serial: 0195116BB3FAFAAD1BB5043DC55F002D8926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
Manifest number: 03D9
Signing time: Mon 17 Feb 2025 01:00:25 +0000
Manifest this update: Mon 17 Feb 2025 01:00:25 +0000
Manifest next update: Tue 18 Feb 2025 01:00:25 +0000
Files and hashes: 1: 92O3x0pHzua9mbvGKu-DalYCtTE.crl (hash: 2XUWyfY9u/Rbr+TXS43OSZpMxJALy8kASNudedjt4RQ=)
2: wN1wFK2nod8Oc7XWg-Kjf2cevZI.roa (hash: S+MrRK13xZ8FD9NbutVvWutfcwGFlY+gNxR94qjOH3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:b3:fa:fa:ad:1b:b5:04:3d:c5:5f:00:2d:89:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f763b7c74a47cee6bd99bbc62aef836a5602b531
Validity
Not Before: Feb 17 01:00:25 2025 GMT
Not After : Feb 18 01:00:25 2025 GMT
Subject: CN=cdcbf45438587b35e2384738be59d7fcfcee9e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:9a:6a:99:0e:6a:ae:d3:e4:1e:af:2c:ae:
a7:c3:50:da:1c:85:54:52:a1:ed:de:de:bf:ce:c1:
59:09:0f:b2:0e:25:52:18:fa:df:5b:23:18:4b:ee:
23:52:a5:3a:05:29:3d:7d:5d:34:56:d3:50:ff:bf:
30:59:a8:e7:39:0a:a2:a9:9a:97:38:f7:d3:1f:71:
d0:ec:92:59:f9:9a:09:36:e7:a6:e0:3b:e9:c3:06:
5e:1b:f2:3e:07:2c:89:46:68:01:cc:77:d5:10:07:
70:c7:21:d4:02:ce:79:a6:cf:be:05:84:2e:fb:8f:
f6:c3:42:01:92:96:83:5f:83:7f:c3:de:81:7c:f5:
5c:cf:32:09:e6:4c:35:db:55:bc:52:03:8f:7d:05:
94:19:3b:00:27:cc:80:cc:7a:77:c0:6e:87:87:b8:
14:44:d2:41:68:d1:35:d5:25:0c:1f:19:cd:a4:9b:
93:35:44:5a:5b:c3:23:ab:b7:1a:64:93:c6:9c:6b:
c6:52:6d:4b:e1:d5:4e:7f:b6:ee:2b:3e:b4:db:d5:
d2:e1:61:98:db:05:f9:c4:3e:7d:73:45:7c:2b:af:
bc:fc:6b:8e:35:c8:32:1f:18:6b:b5:13:f9:cb:58:
d7:b7:2f:7a:e6:19:b9:29:3c:86:4d:a0:94:63:31:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CB:F4:54:38:58:7B:35:E2:38:47:38:BE:59:D7:FC:FC:EE:9E:4B
X509v3 Authority Key Identifier:
keyid:F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f2:47:4d:f4:38:29:de:29:6a:93:08:5d:50:83:ce:13:31:
ce:f3:ae:27:3d:7f:4e:2d:3a:b9:a4:a3:be:63:ca:66:54:d4:
e3:c1:ef:2d:54:c2:52:1b:45:52:3d:96:fe:50:0a:60:55:e7:
fd:7d:8b:fb:a4:e2:38:d1:7b:92:ab:61:a4:b8:25:ce:c2:9a:
1a:30:8d:c2:0f:e0:cc:db:1e:ea:fc:d7:bc:31:4b:91:17:a8:
8d:b0:bd:84:0a:86:b0:8d:57:f8:ce:57:bd:0e:d4:fb:cc:98:
f4:ec:50:13:35:af:ef:8b:d6:c4:af:f3:d1:23:d0:40:69:09:
c4:77:11:c7:da:9a:cb:23:12:4e:3c:d1:1a:53:7d:6a:39:14:
72:23:da:d0:29:55:53:4a:2d:55:03:20:fe:ea:02:15:30:67:
c7:65:2d:a8:23:18:90:b2:aa:23:97:73:73:f3:78:00:ac:70:
37:f0:22:77:0d:d5:33:06:b6:b7:23:ca:0c:4d:d6:c9:e1:cb:
58:ef:b5:0d:fa:a9:d4:54:54:79:01:cb:0d:8e:73:70:ff:e0:
0b:e0:3b:7f:3c:07:07:e6:0a:df:c3:10:cb:5d:02:62:05:64:
28:37:f4:2b:f6:65:ba:ad:b1:0c:4c:37:e2:56:8a:c5:7b:95:
2a:55:d9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:30 2025 by rpki-client