Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
File: dvkMwSPQ0gRp05xsNFXzHqYSP04.mft (raw, json)
Hash identifier: rSuj9x6vi+4GrdhPUN/FTVDmMmGh7D5jYIgIFAp+c8Y=
Subject key identifier: AE:5D:FB:E4:1A:2C:5A:AD:A4:E4:37:61:67:4A:2F:02:0C:79:E4:76
Authority key identifier: 76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
Certificate issuer: /CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Certificate serial: 019510C74DC595890B61CC03F75B7A7EAD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
Manifest number: 1455
Signing time: Sun 16 Feb 2025 22:00:51 +0000
Manifest this update: Sun 16 Feb 2025 22:00:51 +0000
Manifest next update: Mon 17 Feb 2025 22:00:51 +0000
Files and hashes: 1: dvkMwSPQ0gRp05xsNFXzHqYSP04.crl (hash: ih62MpeoaFneoHXJeBx5LqPiJYEEkukx/395tS1c1WU=)
2: u3lxxc1lkavM0xc30bqZfpWxvHo.roa (hash: UHLRAbtjmSCDadx2fBrU+RDEoeooREQATwB2er11mzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:4d:c5:95:89:0b:61:cc:03:f7:5b:7a:7e:ad:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Validity
Not Before: Feb 16 22:00:51 2025 GMT
Not After : Feb 17 22:00:51 2025 GMT
Subject: CN=ae5dfbe41a2c5aada4e43761674a2f020c79e476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a8:2c:a2:b2:ee:bc:9e:7c:53:02:e4:8b:7c:
60:01:d6:91:bf:52:0b:7b:6a:e2:cb:3d:2f:54:65:
4a:f6:d4:1a:5e:14:ee:82:b8:22:60:b8:60:30:9d:
76:26:1f:be:71:61:8e:d2:a7:7b:e9:fc:b5:e9:4f:
bd:6e:64:f8:50:23:47:66:9f:b9:c8:a2:ba:48:42:
85:f1:e7:68:3f:b4:9c:7a:4e:3a:82:58:e3:e3:be:
a7:26:07:47:c2:92:b4:5f:19:c7:df:5b:98:9d:5f:
94:2c:d9:d3:89:bf:f2:58:7f:2d:6f:3a:cd:f0:9b:
ab:c6:9d:c9:66:0d:ed:09:76:f2:f6:71:87:39:90:
79:c1:56:96:de:c4:12:74:d7:c7:4b:31:dc:85:c4:
66:09:48:df:16:02:80:86:30:8d:42:1a:41:d0:ec:
07:22:9a:1c:0f:24:99:10:6f:c8:ef:61:78:61:c3:
54:46:2a:49:eb:90:4a:04:1c:e3:3f:57:1f:7e:90:
4f:7a:31:8e:66:c0:1b:5d:19:e5:b8:df:0a:66:b0:
c3:09:ea:d7:bb:4f:8c:a8:23:1a:8a:73:45:95:6c:
a5:1d:22:75:5d:fe:ef:cb:e4:a4:b6:92:18:87:78:
f9:99:72:e2:e8:52:a7:31:d2:96:ac:77:ce:25:1f:
a5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5D:FB:E4:1A:2C:5A:AD:A4:E4:37:61:67:4A:2F:02:0C:79:E4:76
X509v3 Authority Key Identifier:
keyid:76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:96:4b:43:f3:ef:1a:c2:46:9a:e0:43:6f:92:a3:b7:64:74:
07:06:8c:fe:e5:2f:f5:c5:57:fd:30:c0:19:a1:65:fd:98:bb:
25:2d:e7:dd:12:a6:cb:8b:fe:24:b7:a9:4a:c0:24:4d:a3:76:
52:40:46:d0:1e:4b:cc:18:6c:c7:15:32:44:84:18:c9:b8:d9:
14:5b:79:c2:33:68:81:da:36:8f:a6:7c:0d:ad:6e:24:4c:a8:
73:b6:3d:87:f7:9b:f5:ab:d0:10:47:82:ef:ca:48:54:75:a8:
cf:f7:f7:fd:ca:b5:a3:5e:31:f2:97:3f:95:f4:17:49:2c:7a:
9b:a1:9d:9c:e3:e1:44:61:41:6d:fd:ea:8a:44:85:11:9b:45:
89:78:e0:f8:ce:d3:ff:c6:c3:82:da:9b:5c:af:1f:d8:e6:ed:
1f:50:40:3a:08:d4:62:d1:5f:9e:30:6d:56:9b:79:83:69:a9:
32:da:62:46:bf:f0:62:cf:dd:ba:ad:1f:66:1f:37:76:d6:ed:
95:da:31:e7:48:92:89:94:07:e5:f5:58:91:c5:38:21:01:92:
93:ec:c3:e7:e3:e2:4d:fe:1b:fd:25:c9:a4:68:3b:6f:a1:b0:
3c:4f:c6:cd:ef:f8:05:be:6c:98:08:e1:a5:04:3d:83:49:9b:
3f:ba:19:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:16 2025 by rpki-client