Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
File: rrdjIcjUae47oCOSCzcszaXeng8.mft (raw, json)
Hash identifier: GYYhUSR01eD/nvRbrwHx0FCVJgACssYDXWoyT52eZqM=
Subject key identifier: A3:E3:51:65:A1:4F:6E:D7:28:46:8C:52:AD:5B:66:11:BF:FE:B3:05
Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Certificate serial: 0195116B91C83F1E4F462688947BCCD7F3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
Manifest number: 05FA
Signing time: Mon 17 Feb 2025 01:00:17 +0000
Manifest this update: Mon 17 Feb 2025 01:00:17 +0000
Manifest next update: Tue 18 Feb 2025 01:00:17 +0000
Files and hashes: 1: a9ofITqqYa60yp597jFNJiFfkDk.roa (hash: +VNpTQzKJJZj8EZ6senrGu1+xne4/xLouiN0wCmmxbU=)
2: rrdjIcjUae47oCOSCzcszaXeng8.crl (hash: 7a2AR5qad/LZcQb9vqWhanqRnMnTU17UWYJFIUFgP/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:91:c8:3f:1e:4f:46:26:88:94:7b:cc:d7:f3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Validity
Not Before: Feb 17 01:00:17 2025 GMT
Not After : Feb 18 01:00:17 2025 GMT
Subject: CN=a3e35165a14f6ed728468c52ad5b6611bffeb305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e3:4e:05:cc:d2:55:4a:3c:c2:ea:97:87:3b:
1b:33:b7:3b:81:d7:e0:65:b7:0e:cb:ca:10:61:e0:
8f:54:f5:44:3e:15:8b:74:c6:65:e0:13:dd:40:25:
20:0a:b9:c7:fa:c8:66:e5:85:18:ca:a1:b4:a0:cd:
56:06:d0:ed:3f:11:e6:a2:34:0c:f7:b8:9e:00:02:
60:1f:13:cc:da:ff:17:4c:cb:82:a3:79:b8:3e:77:
4c:05:b1:05:7b:16:ae:77:a2:dd:61:1f:67:0a:1d:
15:1d:be:95:ed:fd:3b:11:46:df:81:8d:6b:0d:72:
5a:df:4b:10:11:83:4e:f7:20:67:e8:be:4f:bb:03:
5f:50:ef:5e:2d:c4:c9:8c:cd:7c:c3:84:49:37:61:
44:79:e6:e5:97:f3:51:5c:c6:ec:68:87:8b:2e:48:
a3:c7:71:2f:fe:fb:a5:3a:38:46:44:e7:01:8e:ad:
bd:1b:17:62:39:d1:60:54:45:6d:34:4a:99:cc:e2:
6a:36:c2:ce:0b:87:a1:3f:6c:12:dc:57:2b:0e:57:
88:54:c8:12:f5:5b:43:a4:a5:99:59:fa:17:33:aa:
12:8b:ce:3f:78:e0:13:78:0e:e4:2a:e8:aa:64:87:
6f:03:fc:57:6d:93:60:30:37:75:5c:f1:36:06:d5:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E3:51:65:A1:4F:6E:D7:28:46:8C:52:AD:5B:66:11:BF:FE:B3:05
X509v3 Authority Key Identifier:
keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:99:f2:9c:8e:1d:9b:c6:95:bd:d6:db:30:5b:be:da:b9:7f:
30:5f:b4:a7:07:de:87:4a:40:73:2c:00:34:5d:c6:77:21:80:
e3:b9:c7:84:a1:f7:2e:ea:4d:38:68:0a:a5:bf:4b:05:bd:74:
92:ec:53:a9:75:ce:99:50:06:dd:df:a3:0f:74:1b:ab:b9:5a:
82:fc:75:3f:ff:d6:60:36:ff:b2:ba:0e:8d:42:ac:57:2e:28:
43:e8:37:40:c6:40:97:ca:fd:fd:ac:6d:4e:8e:bb:67:04:cb:
7d:6f:e7:43:7e:d4:85:81:62:9b:c5:d2:64:80:74:cb:c2:f4:
32:a4:8d:f5:57:d0:80:9c:30:b8:82:1c:11:24:f3:0c:ea:15:
b9:45:a2:4a:b3:4e:57:a1:4b:71:83:9f:ac:2c:4a:88:8f:70:
33:7b:ce:0c:22:5c:a0:b1:89:ea:bf:46:c3:9b:7a:ce:ef:2a:
cb:5b:84:58:cc:c8:a1:11:9d:08:c8:05:03:d7:30:91:44:21:
c4:02:3d:91:f5:bc:28:17:e0:fa:c3:c2:b5:58:db:67:c8:5c:
bc:4f:ba:c5:e5:66:65:46:a0:69:41:16:6c:4c:b4:05:d0:69:
2d:f6:b2:a3:cd:9a:96:da:11:8b:21:1d:af:21:1e:a0:01:f8:
15:d8:b6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:40 2025 by rpki-client