Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
File: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft (raw, json)
Hash identifier: AoB8ibu5J70P5kww1pwbcFqJYXShaDkhx7wHgIpE+68=
Subject key identifier: 94:CA:30:AD:66:BD:3F:20:3A:78:D0:A5:F7:35:AF:83:C1:EE:02:32
Authority key identifier: B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
Certificate issuer: /CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Certificate serial: 01951210A79CDC67E2D9A004D9EE9F40A9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
Manifest number: 0E89
Signing time: Mon 17 Feb 2025 04:00:36 +0000
Manifest this update: Mon 17 Feb 2025 04:00:36 +0000
Manifest next update: Tue 18 Feb 2025 04:00:36 +0000
Files and hashes: 1: snSOZMPfK49AItHHPweedqu08i4.roa (hash: pOp6DYxwdd50QS7EO4q/xTqIWe4F0C/r3RXRy+6+GXo=)
2: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl (hash: sFA1wBlAwiIiq/APmX2oyV1suSTj8O1dRfWqHelu/fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:a7:9c:dc:67:e2:d9:a0:04:d9:ee:9f:40:a9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Validity
Not Before: Feb 17 04:00:36 2025 GMT
Not After : Feb 18 04:00:36 2025 GMT
Subject: CN=94ca30ad66bd3f203a78d0a5f735af83c1ee0232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:6e:f3:cc:54:99:b4:48:91:dd:6e:11:f2:
96:d4:93:cb:12:14:1e:41:13:47:80:48:7d:01:2e:
d3:24:d0:d9:df:24:8f:74:a4:52:81:77:8f:74:e3:
e7:e6:19:90:d8:b5:41:a0:c5:57:af:10:53:4d:21:
16:a6:b6:40:6e:09:ba:b5:80:8e:1b:4f:55:c5:dd:
79:55:2a:8d:05:6a:a2:b8:c6:7b:5a:70:0b:af:70:
03:cb:f0:3b:07:eb:20:d3:af:b1:75:aa:ec:bc:71:
ca:6c:8b:4e:00:2d:d3:c0:ed:ba:ba:07:ed:88:eb:
e7:c4:57:13:0e:02:93:85:1e:31:cd:5d:f5:92:05:
c5:b6:9a:af:de:8b:44:15:ba:c5:64:40:d7:08:2e:
d1:ae:fc:d9:f1:ba:35:98:83:27:ed:5b:5a:18:81:
87:d5:f5:80:5a:76:be:33:98:f4:5b:c2:94:90:d0:
2e:ca:27:0e:3d:97:84:0c:08:9c:a4:1f:9f:a0:9e:
6a:17:cf:48:77:27:b1:9d:68:69:f8:b5:c1:e2:a0:
ea:34:ac:25:2c:db:c7:88:47:5b:02:40:4b:0a:a2:
63:a3:33:6d:31:d9:cb:60:6a:2f:1a:45:65:d4:db:
4a:70:f7:4b:65:ea:d6:73:3d:90:81:07:4c:47:b2:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CA:30:AD:66:BD:3F:20:3A:78:D0:A5:F7:35:AF:83:C1:EE:02:32
X509v3 Authority Key Identifier:
keyid:B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f4:3c:82:96:ec:b4:42:51:63:19:a0:fc:ac:a3:9e:e1:15:
e1:da:78:c0:51:37:fd:89:76:ae:fd:ed:e1:8b:96:64:a3:38:
b2:07:84:dc:b2:fc:e0:3a:b3:15:88:d6:51:a0:42:9d:35:cb:
3f:e7:03:42:6e:c7:ba:d8:85:d3:8c:af:d2:23:6b:0b:cc:f0:
72:ce:e7:3c:d9:dd:ff:d6:24:ea:78:61:a4:72:e4:d9:66:9c:
bc:c3:1d:37:23:d9:65:e5:a9:b7:bc:58:3c:ab:df:79:3b:ed:
81:33:57:50:89:91:f3:3e:03:26:d2:77:11:5b:13:a9:98:eb:
b9:c3:df:12:92:7c:53:41:f5:e5:38:7b:6c:a5:46:4a:6d:5c:
c7:2d:c5:c6:1c:b3:60:9c:b9:00:53:0a:6e:08:5c:be:00:4b:
06:40:89:f3:b8:95:e9:68:a6:7e:42:69:6b:e6:d0:db:b2:67:
41:79:2f:71:f9:30:a5:45:a0:46:12:3d:a3:ce:f7:14:d8:bd:
28:a3:78:f1:61:71:1e:e0:e5:8d:54:9f:10:df:ee:26:b4:3c:
60:df:ba:8a:20:d1:c2:fc:fd:b6:27:3e:86:61:38:e6:c7:40:
a1:13:08:1c:e9:20:e9:22:f7:fe:fe:90:14:4e:f8:d8:5f:c6:
f3:6f:74:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:24 2025 by rpki-client