Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
File: D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json)
Hash identifier: Pd2siYCymIZZQ5Mo5+rnZHmDHQb247ZBVXfMYxYiBS0=
Subject key identifier: FE:6E:CA:0D:AB:77:FD:17:23:76:AA:84:B7:E7:89:F4:EE:BA:71:6F
Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Certificate serial: 0195124776F8CDF3D89B2838B7564E14AF07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
Manifest number: 01A5
Signing time: Mon 17 Feb 2025 05:00:27 +0000
Manifest this update: Mon 17 Feb 2025 05:00:27 +0000
Manifest next update: Tue 18 Feb 2025 05:00:27 +0000
Files and hashes: 1: 6t_nnlmTXWp3OzIKRqSj0hcN4no.roa (hash: W90ueV41Ar0nzHXhwJLVE6WKCjLM7hges3g+HZc2lOE=)
2: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: chkZ85gLOXE9EQf62Trmv15nYRUhGoznZwrCRayRe9g=)
3: vkoeIYHKBiHw3JW2EwGeByZF2OI.roa (hash: 0gHlaMAsvnnPjNWVDTFa0UhQf6R/7xyb1Ul2Br7gTg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:76:f8:cd:f3:d8:9b:28:38:b7:56:4e:14:af:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Validity
Not Before: Feb 17 05:00:27 2025 GMT
Not After : Feb 18 05:00:27 2025 GMT
Subject: CN=fe6eca0dab77fd172376aa84b7e789f4eeba716f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:5c:71:cd:23:c3:79:93:ac:ec:90:c7:5d:
65:f2:93:e9:03:3c:c0:36:05:6d:95:32:6e:b1:d4:
3b:21:cd:4e:6d:ea:7f:b4:41:26:89:1b:bf:fa:5d:
13:b9:32:36:79:37:74:6f:31:3c:f0:ab:ed:b0:fa:
30:fc:20:78:46:ad:25:49:2a:e2:45:70:22:66:c2:
36:8f:4d:5b:c3:1f:fc:ef:ea:07:30:b9:5c:d0:b3:
75:aa:36:c2:a4:ad:66:45:ed:da:f4:de:69:cd:35:
42:69:8f:96:0a:2b:9e:38:26:27:ba:02:15:e4:31:
f4:ef:5a:9d:b6:12:6e:e8:3d:70:92:5f:ec:38:c5:
c7:f6:a5:2d:03:01:18:25:2b:a8:35:e7:f5:38:ab:
f0:61:65:b3:b0:94:30:1d:68:56:fa:1b:7b:26:d9:
e1:b4:36:0b:02:f2:3c:45:9a:bb:29:d5:38:9a:bd:
87:7d:20:83:9c:71:98:d6:a2:23:58:ec:4a:5d:3a:
11:ac:5a:28:62:b9:2f:3e:82:cc:34:46:4b:30:5f:
ef:3b:d4:25:4a:6e:e7:a8:d2:12:1f:6d:6d:4b:06:
7f:20:80:99:45:45:ab:d2:cd:f8:e6:5c:7c:97:18:
19:0c:12:0a:22:2a:72:59:d9:ef:33:e9:9d:01:cd:
f2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6E:CA:0D:AB:77:FD:17:23:76:AA:84:B7:E7:89:F4:EE:BA:71:6F
X509v3 Authority Key Identifier:
keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1b:59:87:77:44:7e:54:8f:75:b1:24:df:89:e2:93:63:f8:
f7:0a:5a:de:d5:a0:a7:45:dc:33:46:2a:08:12:dc:c4:f9:e5:
9d:ff:b7:28:72:86:7a:5e:f2:e5:a1:f7:86:49:5a:29:66:fb:
83:eb:94:81:75:54:12:3c:9b:b8:3b:eb:af:39:98:1c:1c:a9:
95:2b:7d:34:fd:e5:75:a1:99:ea:18:29:f0:09:6d:e3:6e:5e:
05:3b:e5:60:61:d3:32:21:17:a0:78:0f:5e:62:23:54:e0:7a:
0d:30:75:06:41:f9:cc:e1:a6:43:ec:9c:3f:37:e9:3a:7b:13:
cd:cd:27:fc:a9:1d:9d:6a:6e:58:31:ed:19:a3:50:81:93:60:
75:42:82:c2:b3:c8:e1:7e:37:ec:3e:18:b9:60:e7:65:35:39:
a3:8b:f0:49:e2:fe:f0:ae:f6:1f:a4:09:64:25:6a:b2:87:08:
59:68:55:d9:e2:89:89:cc:6c:54:00:92:c2:86:fe:77:40:8f:
f5:9f:5a:02:6d:19:94:59:17:6f:50:61:75:6e:2b:73:74:70:
d2:8a:33:ac:4c:ab:e5:6d:d9:89:fb:eb:ca:b1:e6:67:c6:ea:
b5:62:5d:d3:a7:ce:71:b4:ce:bc:bc:11:2f:b8:cf:d5:fa:14:
d5:fa:8f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:09 2025 by rpki-client