Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: 0g5uQ8hgzIEhiwqv3Ke6z30K2QdnekwbXDTYRtj1NzM=
Subject key identifier: 5B:CE:16:03:3C:29:46:FC:28:29:88:9A:DB:DD:D3:C3:7E:14:35:EA
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 0195113510B53DEE64DABBD2F5CA8E8B6DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 0E1B
Signing time: Mon 17 Feb 2025 00:00:45 +0000
Manifest this update: Mon 17 Feb 2025 00:00:45 +0000
Manifest next update: Tue 18 Feb 2025 00:00:45 +0000
Files and hashes: 1: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: lT9rV6T2wAeVHRjdimKl0Iv2QJO12b5YR+YozL9KDVc=)
2: Mkl44sEh_I1NJhSRpZogcHN-KpQ.roa (hash: UFBdvkUQHMElnZ7pMex1cDJSyxO3mce2NK6vzaKBwPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:10:b5:3d:ee:64:da:bb:d2:f5:ca:8e:8b:6d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: Feb 17 00:00:45 2025 GMT
Not After : Feb 18 00:00:45 2025 GMT
Subject: CN=5bce16033c2946fc2829889adbddd3c37e1435ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:0d:ea:e2:61:5e:e4:e3:de:de:42:c4:f2:
fd:ad:e3:a6:91:d3:f8:b7:3b:26:d9:0a:d7:62:be:
a7:7f:ec:a6:38:a9:70:8b:84:9f:20:80:8d:a2:59:
81:5c:61:58:84:2b:cb:47:ed:9b:4d:a8:44:cc:be:
26:ce:41:00:0c:71:30:4a:d5:d4:cd:16:13:a2:27:
d7:a9:ff:a8:6c:db:90:45:50:07:38:2e:15:f9:09:
37:08:36:22:57:24:bb:8c:fb:ed:8c:f2:5b:0e:38:
4a:5e:f3:38:1a:58:b6:49:6d:6a:25:74:46:bb:78:
5d:14:e1:76:57:55:aa:f7:93:97:42:2b:17:45:6e:
b5:33:e9:4c:4b:b4:1f:01:4b:a3:fb:00:99:4e:32:
a8:c7:49:b7:6c:40:a8:9c:5b:a1:4f:ed:15:95:43:
eb:87:5e:6e:78:bc:d1:ea:46:30:e4:d1:c9:51:ef:
b0:98:f7:b1:d7:37:80:97:96:11:33:6f:60:58:84:
4c:48:e3:9c:4e:b4:d7:df:d9:88:24:81:33:be:c2:
61:74:3a:78:ab:5f:3e:c0:65:b5:0f:c6:a4:a5:b0:
10:49:83:bd:16:74:58:f6:1e:8c:db:cf:10:d9:68:
05:74:f9:1c:59:8c:6d:86:75:96:2c:8d:ea:e8:d0:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CE:16:03:3C:29:46:FC:28:29:88:9A:DB:DD:D3:C3:7E:14:35:EA
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a7:9d:82:2a:42:a5:bd:21:79:68:e6:86:91:b6:c2:9c:0b:
8c:6c:2c:7f:ab:91:3f:05:3b:5e:c8:51:28:51:4e:3f:ce:11:
2d:21:6d:bf:c2:ee:70:00:bd:4d:d5:e5:a2:26:3a:a3:df:21:
34:63:08:f7:bd:20:73:1a:5d:1b:27:39:bc:9d:55:45:16:a9:
8b:18:f4:ed:7a:c0:5b:8c:3a:df:fa:7c:5e:8c:ea:bc:59:a2:
fd:9c:04:d4:ba:15:ef:a8:d1:34:20:67:f7:67:ae:14:52:1a:
ef:b5:51:45:f5:a5:a9:5b:00:68:68:45:24:1e:dd:07:61:28:
db:3d:4d:98:4a:fc:b2:29:7d:6c:bd:52:9d:30:3f:7d:a8:63:
4d:ce:cb:9a:0a:97:7d:fc:4b:bd:9f:63:ed:c9:72:9a:cb:08:
ab:c8:f7:76:01:58:9c:27:9e:25:84:e4:36:b0:e2:4c:01:2e:
cd:42:45:d1:2b:49:57:ff:17:3f:9c:aa:2c:22:56:fc:34:7c:
59:c0:a3:13:52:8b:c5:d2:f2:ab:39:d2:00:48:ba:9c:c8:91:
46:f3:8a:b7:e0:35:21:d5:98:64:86:56:4e:31:16:d9:ed:6c:
29:a2:75:aa:a2:46:73:32:88:a1:38:26:57:e0:6e:9c:06:8d:
ac:2e:88:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:40 2025 by rpki-client