Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: xbfDvPjh+iT1Dtl2ECrIL3Y+L4UeLBbNXevQCYQwxmA=
Subject key identifier: D8:CD:AE:DF:14:99:B4:B8:6F:7C:64:9E:8A:B6:03:A3:5A:BA:55:84
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 019510C81A4601F911F85079D017F471F882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 1458
Signing time: Sun 16 Feb 2025 22:01:44 +0000
Manifest this update: Sun 16 Feb 2025 22:01:44 +0000
Manifest next update: Mon 17 Feb 2025 22:01:44 +0000
Files and hashes: 1: I1KraudGgIPbGqrokKSi33-L_jY.roa (hash: L9033CVRp8ri3N0mtJw6UMfr2TqSPrf8oAPr6Y4O13o=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: HyXKOJHRYoWf1nIRZMAxerU3CDpbLnUmjjM1RmAwQH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c8:1a:46:01:f9:11:f8:50:79:d0:17:f4:71:f8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Feb 16 22:01:44 2025 GMT
Not After : Feb 17 22:01:44 2025 GMT
Subject: CN=d8cdaedf1499b4b86f7c649e8ab603a35aba5584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:ab:43:e1:e1:d9:52:b6:ac:42:cd:76:40:
3f:81:a9:f1:33:2d:f3:9c:98:38:34:0f:64:c5:ac:
45:ca:12:a6:c8:21:88:5e:9c:aa:db:ad:e8:93:69:
31:4c:2d:df:0b:56:90:28:57:a9:40:02:f7:13:60:
14:a1:ed:7b:b6:8a:8a:57:25:89:7a:86:42:8a:cc:
fc:0c:db:16:1f:a1:c7:dc:49:85:ad:c7:75:f2:e6:
d9:6d:9a:ed:2c:e8:1d:ad:a6:c4:79:9f:c5:32:b9:
75:cb:e1:31:47:c2:41:52:96:55:82:3a:28:6c:f4:
96:a1:f8:8e:1f:e0:93:95:48:44:a2:8a:a6:db:43:
60:2e:5f:09:91:0b:d1:22:cb:c6:37:11:d8:e8:b7:
fb:bc:d1:cb:2f:d1:c6:03:44:c0:ea:29:fd:95:cd:
bc:43:8f:94:45:68:d9:50:20:3c:19:87:5c:90:34:
97:13:1c:88:34:62:e4:3d:8e:b9:a7:64:45:1e:47:
e6:e8:d5:f3:50:6c:3a:75:b7:4f:cc:04:b4:e5:5d:
db:58:f3:20:10:15:3c:1d:bb:e8:86:90:3a:ac:df:
b9:7f:cc:03:ec:06:4a:b1:6b:e3:72:b7:25:33:92:
c0:8a:00:1c:63:f7:aa:53:ed:06:2e:07:d8:a3:34:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CD:AE:DF:14:99:B4:B8:6F:7C:64:9E:8A:B6:03:A3:5A:BA:55:84
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:79:36:67:3c:95:a9:d8:76:bf:fc:30:4d:ab:04:ff:b9:8f:
72:8c:27:d9:78:f0:d4:a9:fa:ab:75:4d:20:c0:d6:d3:31:35:
c5:14:fc:c5:36:12:41:1b:c9:77:ac:e1:f0:34:34:98:cf:fe:
f1:dc:02:4b:54:50:d3:13:a6:f4:06:74:2d:81:08:3c:84:4b:
10:20:3c:9f:41:2b:fc:b8:b6:33:cf:31:3f:90:47:1b:3e:ad:
57:cf:62:0b:2d:45:57:9d:75:38:51:07:01:a4:cc:ea:04:4c:
19:28:2c:91:3f:23:52:d5:77:e4:b5:03:7d:8d:fb:5f:62:ce:
c1:f7:46:c5:59:91:36:57:9f:6d:59:b4:dd:ef:f8:ba:7a:3b:
05:ef:51:c9:8b:94:35:ed:4d:a8:19:08:0f:e4:9e:e9:18:a8:
9b:8e:ad:96:51:ee:ec:05:28:f0:f1:3f:d9:c1:56:f0:5b:1c:
93:d6:b7:19:2e:0d:af:67:97:b7:19:ae:01:c3:84:62:69:e9:
c3:14:44:16:71:50:17:06:90:7c:af:9f:7b:e5:94:79:4e:e7:
d3:c0:ea:07:d1:79:38:e3:14:df:d1:10:c0:13:53:fc:0d:75:
4f:38:42:f1:ec:96:cc:48:f2:44:05:d3:bb:d3:06:f4:58:c6:
e8:b5:43:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:40 2025 by rpki-client