Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
File: n8wvPua1w_9txTRqdTVQb6gkEj4.mft (raw, json)
Hash identifier: 3JruoND/dCJGuIP0zsZS7lMmEdQI0IGjKMk0abvWdMQ=
Subject key identifier: 7D:81:6B:02:CF:BF:68:58:8A:E1:C9:51:7F:4A:F4:3D:12:0A:35:1A
Authority key identifier: 9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E
Certificate issuer: /CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
Certificate serial: 0195108FF84499BC609E2D7AE845B3C64C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
Manifest number: 0957
Signing time: Sun 16 Feb 2025 21:00:25 +0000
Manifest this update: Sun 16 Feb 2025 21:00:25 +0000
Manifest next update: Mon 17 Feb 2025 21:00:25 +0000
Files and hashes: 1: d6576JrBH9SAWrjxOsX8R_x4jzM.roa (hash: tOpLNCmhcfBx5S04WHkAz4ZSeX9flEr3FqNx70rcKF0=)
2: n8wvPua1w_9txTRqdTVQb6gkEj4.crl (hash: wvKLawWohYj5nzEmPgfsKunj3SX4L4ljsd4QjhJ4Fvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:f8:44:99:bc:60:9e:2d:7a:e8:45:b3:c6:4c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
Validity
Not Before: Feb 16 21:00:25 2025 GMT
Not After : Feb 17 21:00:25 2025 GMT
Subject: CN=7d816b02cfbf68588ae1c9517f4af43d120a351a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:57:02:57:53:51:aa:18:11:70:8d:e1:6a:
2d:54:97:28:96:7d:26:e0:52:14:63:d0:ef:77:c4:
6b:a5:4c:9d:2b:c4:6d:f7:ab:f2:e4:f5:c0:52:be:
37:32:97:2d:82:b5:5a:be:dc:23:cb:47:04:cd:68:
c5:3a:49:98:ea:fc:15:33:2d:fe:ec:0d:29:93:d4:
ab:ca:6e:05:30:75:c6:ce:ae:9f:3c:14:29:78:56:
04:17:db:90:78:70:73:d9:2b:4e:43:5e:12:f1:5a:
c0:f5:e7:e6:ca:6d:c7:92:ae:75:36:24:76:1e:b7:
e5:d7:a6:d5:be:b7:31:ae:33:73:2a:1c:91:a5:77:
4b:6f:8c:8d:bf:8a:ad:ed:49:b3:b8:4d:e3:cb:98:
66:f9:04:ae:e5:11:e8:e9:ef:12:23:49:00:f0:6d:
69:95:40:e7:c9:d7:ce:1d:fa:cf:ff:78:1a:bd:51:
9c:fd:cf:68:46:a9:e7:73:bf:2a:51:04:66:d7:a4:
a4:10:51:df:4e:0f:8c:e1:e7:47:65:e4:7b:8c:38:
af:5c:99:62:5d:63:69:8b:fb:06:4c:ed:5a:75:a4:
fb:64:c3:fe:29:58:1c:e0:6d:33:8e:f8:ec:0d:45:
1d:53:1a:81:1d:18:a2:f5:e5:51:dd:ae:4e:72:0f:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:81:6B:02:CF:BF:68:58:8A:E1:C9:51:7F:4A:F4:3D:12:0A:35:1A
X509v3 Authority Key Identifier:
keyid:9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:51:4c:77:91:5a:8e:ed:8f:a3:fd:64:83:a0:07:ae:60:ab:
2c:31:54:27:61:30:56:96:40:f1:65:98:2b:85:67:2d:1e:c4:
53:0d:c5:a2:27:bd:38:ad:27:c9:81:f9:46:ff:d7:69:62:2d:
1d:a8:30:5b:0e:4d:31:b6:4c:4f:89:6b:35:f8:33:da:23:6e:
7b:3d:18:04:3c:c0:1e:4c:79:4a:64:13:34:c8:c4:f4:1d:97:
dc:b2:c8:4c:53:80:c6:49:c9:fd:9f:6c:13:aa:46:7f:dd:3f:
de:6d:c8:77:4d:5e:55:57:9f:e3:5c:3c:03:1a:89:fd:e6:d8:
6b:28:fe:a4:63:6d:56:6f:ba:e7:b4:f0:d7:85:db:96:a7:65:
10:e5:e1:c4:8c:52:67:73:d5:38:36:4e:04:84:d9:7d:e2:bb:
a8:d5:23:41:2b:eb:31:63:49:50:8c:6d:e5:7f:0b:6c:7e:d6:
3d:a6:45:cb:12:70:58:9c:e5:f5:1a:fd:f7:b9:d2:8d:64:a7:
aa:e4:1a:06:de:05:bf:0c:be:d6:22:00:d7:c4:4d:f9:8d:36:
65:db:e0:f2:f8:0a:2a:45:35:14:59:cb:8d:16:dd:7b:fe:bd:
31:19:07:77:8f:f8:bc:5e:ef:b4:c3:df:46:81:d3:78:da:08:
74:0e:80:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:34 2025 by rpki-client