Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File: lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier: 18j2ZFy6vKoMTcF/JkTcExmvj80L2A1IHkPIN8RJ9EM=
Subject key identifier: 37:C9:E4:49:0E:6C:81:7B:8B:0F:6E:51:3F:64:DB:FB:4A:6B:DA:F4
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial: 019510C6C5E70BFABD165B796D421B33C7A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number: 1455
Signing time: Sun 16 Feb 2025 22:00:17 +0000
Manifest this update: Sun 16 Feb 2025 22:00:17 +0000
Manifest next update: Mon 17 Feb 2025 22:00:17 +0000
Files and hashes: 1: __MYyid4GtIkDzQxVkfCnSU_9K0.roa (hash: wGfHIHi66rHTs2wGskl+w+/VWjBeUlcRI6guMD/KMNQ=)
2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: U4g24iTm/yTwh35ltqsJTbS9TynKvjUX87wZTMzw9cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:c5:e7:0b:fa:bd:16:5b:79:6d:42:1b:33:c7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Validity
Not Before: Feb 16 22:00:17 2025 GMT
Not After : Feb 17 22:00:17 2025 GMT
Subject: CN=37c9e4490e6c817b8b0f6e513f64dbfb4a6bdaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:dd:cb:ad:da:30:88:d8:38:8d:47:d2:2e:
a4:fe:14:67:24:75:d1:95:28:c4:c4:28:50:52:45:
3b:42:c9:2e:19:d7:e9:78:2d:b5:1a:b6:05:2e:79:
76:dd:67:1f:5d:05:bf:0b:27:db:1e:ba:ba:12:85:
53:49:d5:cc:5d:dc:36:ea:56:78:5f:48:35:9b:70:
c7:6c:b2:25:c0:81:98:cf:40:7b:25:e7:7a:b1:24:
13:9f:10:cf:d8:b9:71:89:cb:63:2d:ea:0b:1b:2c:
b2:99:34:81:6a:d9:d6:4e:69:93:95:e2:86:64:a1:
1e:ce:7a:06:4f:50:e8:65:09:8c:b4:e4:6a:3f:95:
ff:dd:77:10:7d:74:0d:38:7f:0b:78:30:be:2f:db:
32:e9:d4:e3:51:a5:a0:f1:6f:8a:8a:8c:a4:ba:7f:
ac:a3:aa:6a:c3:bd:ce:78:fa:a1:91:ff:6b:c5:53:
1c:7d:7b:f4:27:c7:97:31:38:da:5c:83:90:a0:5b:
2c:f4:2e:68:fb:fa:95:57:a6:18:07:23:5b:ba:0b:
ef:24:95:6a:1f:b2:01:7f:53:65:a9:89:fe:e2:0a:
e6:51:1b:b0:be:93:e7:62:13:16:39:20:be:12:1b:
7c:fc:d3:14:61:00:db:03:4e:04:36:92:3d:82:6b:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C9:E4:49:0E:6C:81:7B:8B:0F:6E:51:3F:64:DB:FB:4A:6B:DA:F4
X509v3 Authority Key Identifier:
keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:65:ca:19:a2:f0:7f:24:ee:5c:25:08:e1:4e:16:ae:b5:20:
2a:05:7e:4a:a8:28:e0:7a:5f:5b:d5:11:9e:2c:99:df:e9:43:
c6:a8:7a:5f:6b:4c:ae:b5:fd:0e:8c:de:5e:56:df:e9:c4:70:
02:f5:d4:f3:01:2a:11:af:a7:c1:1d:ea:60:1e:da:96:6b:9d:
4e:e9:3e:ff:05:9e:6f:77:c7:7a:a9:1b:03:d5:d5:88:11:1d:
8a:d7:54:f7:25:20:78:91:8f:2d:14:66:2a:27:1e:b3:a0:55:
e9:bf:d9:8d:c9:05:aa:fc:a6:fe:8c:1b:88:e7:3c:22:02:7e:
87:f9:e3:30:c2:28:b3:a1:b5:6c:e4:75:9c:60:94:85:5e:d2:
ef:bd:fa:82:1b:35:7d:77:0d:e9:95:57:f8:bb:bf:73:08:58:
bc:00:1a:6a:a8:45:2f:6e:6d:40:42:c2:23:a6:ec:27:be:60:
8e:38:53:34:c0:86:32:f6:a7:86:1f:57:d9:e8:c3:5a:68:32:
cf:7c:fe:1a:7b:ca:60:9c:fd:d6:04:57:96:7c:d9:0a:0d:bd:
8d:c1:44:5c:b0:ea:86:dc:66:d4:24:b7:43:5c:70:46:b8:7d:
e1:d1:ab:e3:07:b5:06:23:b1:af:79:3f:93:30:9f:09:aa:e6:
c3:23:5a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:32 2025 by rpki-client