Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
File: obBHf50JosdPTEWegLcpr-6zEtQ.mft (raw, json)
Hash identifier: ebIh64SNvYVOfWcPP4QdK0T4ADZQU80dY2pgVIoPWdg=
Subject key identifier: 4D:E4:85:F0:2B:5D:07:C8:CC:1A:6E:66:AF:F4:D3:22:02:F8:B7:F2
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 01951134E69362AD600A8A4FE8CF765B7CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
Manifest number: 09F1
Signing time: Mon 17 Feb 2025 00:00:34 +0000
Manifest this update: Mon 17 Feb 2025 00:00:34 +0000
Manifest next update: Tue 18 Feb 2025 00:00:34 +0000
Files and hashes: 1: 72WUZg4a8Mn3wM6qcS6lKaFMvy4.roa (hash: J12B/L+u1x8UjkZE3gEtXs8elHp+K5+c+2ncMirPn90=)
2: GvxdNTfKZ8cK6T0E1lcMYR0-Eug.roa (hash: mWN38f7I4P8OFBnEBE5XW/rXhM8WqbQ5XVGNq6kRS/Y=)
3: HoVqlvj2DjGVdZLOvKg3TFq5rLM.roa (hash: WucuWrLb+R81SwXSHnAbfiXE85yoaiYHwxSfh36VGn0=)
4: obBHf50JosdPTEWegLcpr-6zEtQ.crl (hash: 9HJ0zeivvZPN+LuBor49dlMJev5SOPIb/SjCcbZap9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:e6:93:62:ad:60:0a:8a:4f:e8:cf:76:5b:7c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: Feb 17 00:00:34 2025 GMT
Not After : Feb 18 00:00:34 2025 GMT
Subject: CN=4de485f02b5d07c8cc1a6e66aff4d32202f8b7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:09:27:a1:a6:0c:07:7b:76:67:7d:01:ad:
da:2c:bc:f2:16:c8:e8:7d:3a:43:d9:92:82:71:03:
5b:f5:33:de:cc:8a:27:b5:f3:2e:a8:25:f7:f0:f5:
5a:a2:ac:a5:c3:9f:a3:88:ce:57:95:bf:58:b5:11:
07:64:64:99:03:71:9a:10:f9:6f:cb:52:ac:34:f0:
e5:5b:9f:8f:54:a6:19:35:54:d7:ec:83:bf:5e:23:
6a:0b:67:ef:f9:6c:6b:6a:9a:c2:f4:76:a0:26:22:
9b:e1:09:b9:7f:db:f2:70:ca:0a:d1:28:4f:e5:a3:
8f:09:9a:f9:2c:f1:4a:86:7d:71:e2:03:f4:d2:33:
b9:b7:0e:ed:18:0b:ce:ab:9c:1f:3d:13:ad:ec:f8:
12:17:55:f7:9d:53:ff:13:c1:64:04:3f:07:4d:b5:
6d:ff:fb:39:ff:f0:1e:ba:b2:b3:7b:84:5a:d8:a7:
15:5d:42:a1:9c:b7:3e:c1:14:65:71:17:d3:0b:cf:
76:ca:ba:7b:f1:18:84:fa:76:d0:c0:00:9d:d2:7c:
07:cf:4b:82:19:2d:6f:f4:0f:df:c5:1b:62:ea:4e:
c1:f6:1b:bc:d1:8f:03:d8:5c:db:e1:96:2a:36:16:
4e:ff:fa:23:d0:0c:f5:81:5e:6f:b4:45:07:38:0b:
c2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E4:85:F0:2B:5D:07:C8:CC:1A:6E:66:AF:F4:D3:22:02:F8:B7:F2
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:44:0f:95:2b:55:d0:ac:29:33:19:5e:05:37:b1:fe:ca:76:
b7:a8:b8:cc:2e:54:c8:d9:5a:e2:33:c1:ca:1e:14:64:c7:1f:
95:ae:8c:7b:23:cb:37:57:7a:3f:23:20:fc:d6:5c:03:f4:9c:
3e:2e:7d:1d:3c:6a:48:e1:e2:68:e2:9f:ff:f6:30:97:21:86:
c7:db:77:d0:2c:a3:15:12:18:3b:90:3f:34:16:c1:c3:d7:f1:
9a:26:cd:aa:1b:aa:0c:38:a1:fd:64:6d:6f:7c:5c:9d:d6:41:
cf:32:c6:89:ef:64:e6:f3:6e:72:44:90:42:ec:31:6b:64:93:
fc:8c:a3:49:72:0d:cd:0f:ce:5f:04:18:2f:3f:ce:ee:8a:9e:
f7:40:08:2c:59:98:a0:84:af:41:00:54:0f:61:06:42:f4:4a:
4a:25:0d:77:c7:1a:ef:03:1d:3a:da:b2:fe:67:ce:07:0c:60:
9a:f2:93:36:aa:6e:31:95:d5:50:fc:f3:b6:0c:a6:aa:ee:bf:
c2:36:d2:9a:78:ff:77:ce:19:c2:0a:5d:f3:1b:5a:98:f9:c5:
5a:06:fc:02:c5:25:ab:8a:86:26:13:31:ef:94:e4:6c:77:35:
ab:fc:e6:69:f7:ff:df:2d:59:12:18:76:95:b4:4b:77:22:3c:
87:10:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:09 2025 by rpki-client