Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
File: i5LFXos1lQd133Y-dJMNUinJ-gA.mft (raw, json)
Hash identifier: O4IamfYq7JKKlW/NwToOdZVg56SKJ3TqEXpBjHM+SEY=
Subject key identifier: 19:BD:E6:45:34:0C:53:6E:60:A1:AF:59:22:8E:65:E0:DE:87:E5:7D
Authority key identifier: 8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
Certificate issuer: /CN=8b92c55e8b35950775df763e74930d5229c9fa00
Certificate serial: 019510FE30800312D37ED2A9A60C3ACA6DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
Manifest number: 13E9
Signing time: Sun 16 Feb 2025 23:00:48 +0000
Manifest this update: Sun 16 Feb 2025 23:00:48 +0000
Manifest next update: Mon 17 Feb 2025 23:00:48 +0000
Files and hashes: 1: LNuPziOYyIrKubsBwXhoqEItKOI.roa (hash: HVHsB2c8MGUhz2rUlgm+F2HzTtyYnTiTaoLJeI/5tZw=)
2: i5LFXos1lQd133Y-dJMNUinJ-gA.crl (hash: 68Jk1BdcEb2fuMiwICnjwmHGHI5BCHISDxzKQrnoXR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:30:80:03:12:d3:7e:d2:a9:a6:0c:3a:ca:6d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b92c55e8b35950775df763e74930d5229c9fa00
Validity
Not Before: Feb 16 23:00:48 2025 GMT
Not After : Feb 17 23:00:48 2025 GMT
Subject: CN=19bde645340c536e60a1af59228e65e0de87e57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:89:3d:f5:91:20:c1:b4:cb:b2:71:bf:00:
c9:e5:ec:0e:70:9e:ef:e1:f2:c4:9b:cd:56:5b:68:
fd:96:ae:e3:bd:60:8f:8f:84:79:c7:a4:5a:52:7c:
97:b2:13:99:be:c6:10:a0:8e:9d:be:b4:a9:25:e7:
e1:23:3e:82:fb:23:78:a3:46:1f:84:18:c7:a9:b7:
fd:a5:59:18:26:7d:0d:ce:ef:76:76:96:40:06:ca:
8f:e2:e1:64:7d:d2:b2:7a:82:4e:9e:fe:79:e0:b8:
8f:3d:31:c7:6d:cb:e9:30:29:43:6c:a1:00:e5:3a:
46:94:66:f1:c1:4c:bd:f9:77:09:7c:f3:b4:ff:29:
45:1a:93:98:04:9e:6c:db:79:32:ab:df:56:a3:c5:
3a:9b:26:24:43:53:e6:da:ad:3d:55:d0:9f:82:d3:
99:f2:26:d8:2f:63:00:cd:db:b8:98:6e:b4:18:74:
70:50:e9:09:93:23:83:6a:f4:83:2b:46:4e:82:35:
95:28:83:82:7f:c6:79:bc:2c:d3:fe:03:8a:44:28:
ad:fd:f3:51:63:d3:79:33:ec:a2:f0:73:fe:fa:29:
7a:bb:45:71:5d:a5:a7:c6:3d:93:45:a4:a6:1a:b9:
6e:3e:f4:62:ed:2b:13:05:f5:59:03:67:05:d1:ad:
42:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BD:E6:45:34:0C:53:6E:60:A1:AF:59:22:8E:65:E0:DE:87:E5:7D
X509v3 Authority Key Identifier:
keyid:8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:dc:4c:7d:b4:a5:6e:95:77:54:48:ca:63:c8:b0:fa:b5:d2:
f6:d0:74:ff:12:45:22:54:66:c4:27:30:c5:98:15:2a:6b:88:
38:1c:51:7b:f6:2f:23:76:28:30:18:dc:0d:75:fd:b4:c2:f4:
7f:cc:4f:5b:6f:c2:eb:61:f6:3f:cf:31:eb:da:78:24:17:6c:
63:e1:b8:b9:eb:c6:e8:c4:63:2d:60:17:bc:8a:4c:4b:31:f0:
36:5b:f6:d5:b3:43:e2:00:3b:0d:6a:79:61:02:ed:ed:54:8e:
c0:8a:5b:fd:24:33:91:2d:5a:70:3f:a0:b7:2f:cf:f9:d9:d3:
00:82:56:02:0b:1b:f1:7c:ec:98:64:c0:df:65:29:54:1f:31:
9a:97:f8:62:8a:74:43:fd:dc:59:54:0a:52:23:3d:55:8b:c0:
32:94:d4:6e:c3:27:26:1b:2c:73:5b:b2:6a:29:25:fa:e6:af:
3b:ad:ce:d8:a4:f2:b1:cd:96:08:a7:38:7d:35:9f:9c:a0:df:
bf:5d:77:0f:04:84:11:19:89:7b:ac:6c:6f:27:c9:86:fe:44:
15:2b:c6:9b:c8:07:43:52:14:68:5f:88:65:d3:10:9a:d1:f2:
1d:47:8d:4b:e8:f6:c1:a0:80:3e:c5:cb:a2:cd:ca:5f:83:77:
7b:7d:04:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:39 2025 by rpki-client