Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
File: suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json)
Hash identifier: vmWA4PtocInkYajIi+d3SeGVy5F1AYDvGCpoMLBf6O4=
Subject key identifier: 97:8B:FC:11:B8:72:06:81:5E:3B:1D:A5:A9:D3:11:A5:4D:05:2C:A2
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 0195127E37B228D54BEBB7CFD5E6BBE6443A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 06:00:16 +0000
Manifest this update: Mon 17 Feb 2025 06:00:16 +0000
Manifest next update: Tue 18 Feb 2025 06:00:16 +0000
Files and hashes: 1: 0JGiKje1faw9lacGbk5NhV2XAbU.roa (hash: Z5RBvg80RTlugYiMNKYpsKysKI83C+571C6SNSSEK3o=)
2: CzOVrXq8s2rQFDCGaFJZ_xM7OZ0.roa (hash: 5XAPorQnylekwHM79ynLgJVh80voKy6A8YYVF6d1gL0=)
3: I5_G-9s_oVaNxLhCKWswnvQ0TMM.roa (hash: ltQS9xzvLFRh2FTtqC5cdoW+novDvu7FCqL33TC4gbs=)
4: XRFx-I5iR8sOu4eWb4zxF9j51nY.roa (hash: jWOrWm0uqq8hwtJKnrOJeXRAnKAJtuuvhEDHE+aeWOM=)
5: aK0ZCA3UzihhLWePrq6nqCII3zs.roa (hash: J2psJ8fKHZMaQGgjR1FapfC469JthhL/LFCAFjcAv08=)
6: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: lPQ0/+hcfU3eF8f4E1ALko1mbzoT4gMlPTUS4+3pzT4=)
7: wz_TvTU1xF0eJ_9EwkVCuufFGFo.roa (hash: Vtdi4r4GuCz7NyZSMqwPceN5sJkZoRY3YKYSc4S4CjI=)
8: yDDPfOYkq9TvDo49z4rJ89YrUS8.roa (hash: h90+S4fhQ3iqdh42EvmGUJBw540N3+LmJjYWM7l7haw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:37:b2:28:d5:4b:eb:b7:cf:d5:e6:bb:e6:44:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Feb 17 06:00:16 2025 GMT
Not After : Feb 18 06:00:16 2025 GMT
Subject: CN=978bfc11b87206815e3b1da5a9d311a54d052ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:91:e1:45:4a:8e:c5:4c:ab:39:3c:20:46:
e2:c2:6d:87:9a:4d:4a:9c:10:7c:b3:d1:be:52:25:
b8:c2:db:8b:fb:a2:32:ee:ac:04:17:e1:fd:88:5f:
d6:69:92:ae:aa:4b:10:10:3c:f3:fc:4e:d4:e6:b8:
6c:47:1b:4e:15:08:a8:09:66:dd:bf:1e:d8:3b:7e:
8b:94:aa:1a:28:a1:46:56:12:1f:29:5e:ac:99:c2:
de:c8:69:92:7a:d0:a1:61:2f:40:bf:b8:57:bd:bc:
ce:90:b7:4a:f0:9f:b8:ee:92:34:96:21:b0:71:71:
20:a0:37:1a:de:7b:9f:12:d3:07:16:8b:91:22:85:
2d:b5:a8:77:e0:57:a6:f0:2c:9a:0f:c3:4a:b4:25:
9f:37:00:ae:d0:41:27:33:47:c4:1d:9f:37:1b:7f:
99:8e:da:9c:d0:e7:8d:45:61:3c:9d:b6:f1:c6:9d:
5f:b5:0d:b9:ea:02:dc:1a:3c:57:55:fa:c6:98:98:
c6:07:bc:f8:0a:be:91:3b:de:ec:72:4b:2a:04:5d:
ca:79:7d:d7:c1:54:7a:0d:20:93:14:69:4d:66:e3:
21:18:fb:cb:9f:3b:29:63:10:07:bf:1e:0a:b6:e1:
14:a9:b9:15:4f:ab:91:a5:51:e7:a9:68:e4:e3:13:
5c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8B:FC:11:B8:72:06:81:5E:3B:1D:A5:A9:D3:11:A5:4D:05:2C:A2
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:00:35:02:c7:d1:74:b3:23:57:80:26:01:a0:13:f9:73:f2:
37:08:34:d8:96:dc:73:83:d7:19:57:d0:fe:70:d4:65:e1:7a:
50:d5:b0:5c:2f:c2:eb:fe:b3:1b:c6:32:e2:c4:4d:df:08:5a:
dc:c8:0c:e4:8e:bc:d1:88:ec:3c:8f:d0:52:5d:ee:13:46:fb:
4f:ce:5b:2c:cc:de:68:cf:aa:c5:12:4f:d8:45:9d:2e:d5:13:
13:9a:e6:69:c7:21:d8:ca:42:f6:d6:a2:89:f4:32:60:77:22:
0a:18:45:0d:31:af:ad:8b:43:f4:16:14:84:d5:62:8e:d1:8d:
29:a7:73:bf:eb:ae:6b:7c:73:a6:82:46:82:51:8c:1a:4b:4b:
74:6b:67:f6:1a:7a:f3:67:c0:0d:d7:f4:6f:e3:9e:c7:82:52:
4b:b4:27:fd:d6:d7:da:1e:72:c0:e3:1e:55:8f:b6:a5:81:a7:
45:a1:1c:75:21:62:52:33:77:a6:09:c7:91:0e:f8:24:43:1a:
e4:75:27:df:03:9a:9a:84:4f:12:b5:4f:34:3a:78:3a:17:e0:
99:e9:39:41:8a:86:f4:6c:1b:61:f9:27:bc:7c:ad:f1:d3:7d:
76:47:c1:06:6e:ec:e1:d7:33:3b:d5:d0:05:59:8c:6f:75:43:
75:6f:37:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:18 2025 by rpki-client