Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
File: azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json)
Hash identifier: vDxqD1UX7UhYXgIEZu27RZm42c5yT90QdmAT+qJsRok=
Subject key identifier: 51:58:90:D3:B1:4A:98:3F:A2:DC:DC:05:D4:3D:42:9F:FB:65:3B:9C
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Certificate issuer: /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial: 019510C755512DB79E9375EB1517299EDA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
Manifest number: 145C
Signing time: Sun 16 Feb 2025 22:00:53 +0000
Manifest this update: Sun 16 Feb 2025 22:00:53 +0000
Manifest next update: Mon 17 Feb 2025 22:00:53 +0000
Files and hashes: 1: SWKxeLe_GGuPotQH4HKhFwr-_-A.roa (hash: nzRbtMsfHtfSOMu7Pb2PpTkqYw2TVYbIXEMhQXP/4G0=)
2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: zOj2QlRCxw9dxp0Jz1t0d1xDVjMLQ+zdN55fnhX8Jos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:55:51:2d:b7:9e:93:75:eb:15:17:29:9e:da:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
Validity
Not Before: Feb 16 22:00:53 2025 GMT
Not After : Feb 17 22:00:53 2025 GMT
Subject: CN=515890d3b14a983fa2dcdc05d43d429ffb653b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:14:6f:60:61:2d:00:50:6b:88:09:c0:21:
84:55:f4:94:9a:41:bc:7d:6e:98:c2:45:30:55:7c:
a1:e4:c3:26:17:f6:a1:c4:98:e8:e3:8d:ec:25:9b:
a0:b7:c1:95:cd:52:f1:84:81:37:c0:02:09:03:dd:
a2:ac:20:74:46:7c:66:21:20:c4:0c:d7:21:fd:e3:
e7:60:ec:d3:37:d1:5a:3e:10:ff:08:6d:af:18:3a:
16:5c:25:bc:05:86:9f:8e:5b:38:39:6f:1b:b4:ab:
84:a8:d0:9e:0a:a4:30:15:64:07:7d:2a:af:be:d2:
b8:0b:2d:8f:35:cc:35:b3:fd:5e:ae:f0:6c:61:db:
cb:a7:c4:f7:40:2f:fb:c5:23:06:b1:6b:5e:d7:8c:
eb:19:6e:9c:2e:2a:11:b8:16:10:de:2b:5a:20:24:
f6:d5:b5:e9:f6:ee:c9:59:cf:cf:c5:86:64:fe:62:
fc:47:8c:df:6c:3c:85:28:60:eb:e7:4f:a1:19:4d:
90:9e:09:8a:98:5c:63:ce:eb:1e:68:3e:b1:4b:d3:
2b:7c:25:8c:4b:48:ed:62:a7:e7:c5:b7:cc:06:66:
2e:27:7d:38:18:be:73:fa:fc:2f:3f:1d:23:d3:d7:
b2:1e:03:15:42:c0:87:15:8a:9b:dd:6e:5d:83:3d:
96:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:58:90:D3:B1:4A:98:3F:A2:DC:DC:05:D4:3D:42:9F:FB:65:3B:9C
X509v3 Authority Key Identifier:
keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:89:dd:55:4c:4b:6d:aa:31:45:46:04:ab:1a:97:4d:e4:d3:
92:bd:3d:5c:78:ea:a5:c6:d9:33:fc:d5:68:d3:f8:08:8b:f3:
ba:60:d6:38:db:78:80:4b:dd:66:ac:68:e1:17:de:9d:5d:13:
39:30:82:9d:4b:fd:88:28:cc:6e:8a:68:55:d5:31:43:69:e0:
a7:19:12:27:39:c6:1d:e9:3e:bb:d3:2d:bd:8e:df:78:e7:15:
a8:0a:d3:6a:f3:a2:63:c2:2c:bc:bc:82:c1:d2:84:3a:42:0e:
11:b4:46:ee:b1:b5:2a:3d:e4:ea:27:5f:da:77:03:a6:fb:06:
ea:64:4c:89:b4:a6:58:e7:6d:ae:46:b0:16:a6:a0:1e:4b:c9:
48:04:e2:ca:bd:e5:91:ec:bb:f1:84:9d:d6:71:7c:86:d0:1c:
b4:30:eb:e6:4d:01:92:66:09:da:6a:6c:c1:11:45:64:6d:f6:
72:6d:52:df:f3:1e:5a:73:13:88:ba:07:0a:bb:bc:53:e4:29:
a8:2c:35:bc:e0:bf:b6:76:1d:20:6e:eb:27:77:c9:c4:81:42:
52:b3:4c:ad:c8:86:a9:b6:4d:63:a6:e6:6c:b2:ec:7c:81:3a:
69:f2:16:df:6e:e6:68:7c:f0:4a:a5:46:f8:e5:6e:cb:54:17:
16:8f:0a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:43 2025 by rpki-client