Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: E4K+bQfyeafkASJgMinmUQl/2KGWp36QnhQGFQ+f/4c=
Subject key identifier: 16:4B:51:BA:E9:79:06:E6:65:33:5A:B6:E8:03:22:BD:4C:1A:9E:3B
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 019511D99692EB0C9DBA2CD2AA9697AC2E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 031F
Signing time: Mon 17 Feb 2025 03:00:27 +0000
Manifest this update: Mon 17 Feb 2025 03:00:27 +0000
Manifest next update: Tue 18 Feb 2025 03:00:27 +0000
Files and hashes: 1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=)
2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: ixp0dw3Gm9+8Y2l/cGcwrvnhA7Jbwvn5X2dG0+oRIRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:96:92:eb:0c:9d:ba:2c:d2:aa:96:97:ac:2e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Feb 17 03:00:27 2025 GMT
Not After : Feb 18 03:00:27 2025 GMT
Subject: CN=164b51bae97906e665335ab6e80322bd4c1a9e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:a8:54:8e:c1:a3:ef:62:26:cf:ee:a4:81:
51:97:90:97:e7:43:36:07:39:50:19:7e:9f:14:62:
2b:53:b4:e3:a8:5f:b9:43:ce:83:26:0b:ac:a7:21:
e7:9f:08:c5:ab:69:31:e5:4d:9d:18:9b:23:94:cb:
71:a6:1d:bf:e7:fb:57:81:f0:b2:18:8c:c4:89:23:
e5:89:9b:a2:0d:61:24:a8:88:c7:62:d9:3f:51:92:
6f:ed:29:06:86:76:71:91:73:d0:4d:f3:0f:4f:ef:
c4:a4:49:11:37:29:60:84:eb:35:e8:49:2e:ad:53:
9f:57:3e:23:a8:81:78:ae:6b:b0:0d:8b:4f:34:1b:
fc:21:50:2c:f8:dd:f2:95:4d:3a:72:4e:20:39:fd:
f9:de:88:cc:f4:ec:07:db:2a:12:6e:f3:7e:9f:31:
b5:0e:7b:69:95:70:5b:08:c1:2a:d6:cf:06:31:4f:
c5:02:52:14:e0:1a:6c:67:2c:d9:b6:e4:9a:f7:98:
ff:f1:f7:af:85:a7:a2:0e:56:0b:a9:0c:2e:01:ad:
c5:41:c2:21:bd:40:7f:90:ff:e5:86:92:ec:0c:6a:
57:a0:9c:24:14:9c:68:5d:46:0b:da:94:5e:b3:d8:
1c:c1:74:fe:0e:d1:44:3a:75:a9:88:6c:f1:32:47:
3a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4B:51:BA:E9:79:06:E6:65:33:5A:B6:E8:03:22:BD:4C:1A:9E:3B
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6b:00:d2:e4:bc:1f:aa:1f:c6:ca:93:69:8c:59:96:7c:60:
69:67:24:d2:01:38:e6:3b:77:d6:04:f7:1f:b7:9c:fe:d3:35:
9a:58:ae:61:d3:2a:2e:55:d9:01:c5:98:e7:45:bf:be:5c:db:
3e:7e:93:56:b5:d0:f5:13:ff:e0:73:7e:ae:0a:0b:7a:07:70:
4f:72:a1:e4:79:07:bb:e1:8e:6d:a1:1d:53:8a:b9:41:b7:96:
f3:c8:31:36:64:c3:24:0b:41:f0:00:78:d9:a8:4b:ff:56:57:
44:83:71:73:df:96:86:d5:27:e1:ab:a6:fb:09:ac:6c:02:d1:
f9:c0:21:a9:8f:a7:e2:3c:8d:15:0b:79:1f:10:58:6c:e5:20:
01:9a:c8:30:e0:8b:21:bb:ed:1c:62:7e:03:e5:b2:ed:c1:8d:
08:4c:6d:3e:0b:33:32:69:5f:8f:6f:93:78:47:f4:7b:cb:a2:
f3:3a:b9:f4:1b:6c:86:9a:34:5f:1a:08:40:92:fb:ba:18:4e:
76:96:e6:99:3b:8b:2a:f7:18:ca:0e:4a:71:20:c4:5c:a6:00:
35:c1:bb:62:5d:09:f3:b4:9a:e5:7e:8b:0c:9d:91:35:ad:2f:
a1:11:8d:05:d4:8e:c5:49:61:7a:6b:ab:8d:02:db:e6:85:0f:
27:28:44:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:25 2025 by rpki-client