Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: aWzT+IkD099L0CRHmC7Q+Xa570Gwm7QiGX4didnn0x4=
Subject key identifier: D3:7C:10:ED:50:BA:A9:83:E9:1E:86:AF:D7:69:28:9D:9A:DD:50:1D
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 0195116BBB75D2CF61929614C8591E046C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 01:00:27 +0000
Manifest this update: Mon 17 Feb 2025 01:00:27 +0000
Manifest next update: Tue 18 Feb 2025 01:00:27 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: Ha9lBfKVyMmcqsNFmr8Cd0jPm9NJne2vedCBYiec+AA=)
2: fudoZ6TJp9dp16Pww5r5a49f_qw.roa (hash: WSDqUxIZJlZyyACmY/UreISdxVZNSP6rtPlIwpgLS+I=)
3: glbAf6IutJeA1wA9zcIVkw-1mp0.roa (hash: ESJ6dYFBwvP8YpbvVt0/saN/BWXL7V+r0E/HCTFScAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:bb:75:d2:cf:61:92:96:14:c8:59:1e:04:6c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Feb 17 01:00:27 2025 GMT
Not After : Feb 18 01:00:27 2025 GMT
Subject: CN=d37c10ed50baa983e91e86afd769289d9add501d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:8d:f3:3b:4a:33:6d:cb:ea:cc:31:43:da:
95:fa:ce:d2:97:19:92:6b:c5:cd:c8:fc:69:5e:7e:
03:d2:02:c8:d1:d1:ba:ed:c4:61:69:58:f4:97:26:
4a:81:d7:6c:8b:3d:90:5c:e2:6a:8b:ba:dd:5b:95:
f2:be:73:71:81:6a:4d:b6:d5:e6:cc:a2:aa:fc:79:
34:21:46:61:a0:8b:a0:9b:67:20:73:d0:bd:37:8c:
27:14:f4:fd:73:cc:28:f6:d2:64:81:7c:74:37:1f:
8d:7f:b0:fb:73:a8:06:83:eb:5f:37:11:d3:6e:af:
a9:c9:61:b4:ed:d4:41:94:60:64:1e:37:ea:e2:d5:
8c:b0:67:68:5e:73:72:4a:5d:f1:0f:41:09:58:1b:
bb:d8:7b:22:db:7c:58:10:f9:3f:1e:ec:ed:28:1b:
70:05:c3:32:d3:c4:69:cc:a2:c1:b8:20:41:2c:d3:
5d:a0:ca:3a:e9:cc:17:8f:8b:67:ab:c1:e4:c3:54:
0f:e9:4c:97:ba:8e:6c:b6:7c:96:9b:8b:57:c7:dd:
35:83:7b:54:8c:19:d1:db:22:dc:f4:9c:d9:74:60:
f7:c9:30:27:1c:53:de:75:7f:de:57:2c:d0:bc:1f:
65:80:d8:a0:a7:8c:03:dc:a3:7d:29:08:07:8c:bf:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7C:10:ED:50:BA:A9:83:E9:1E:86:AF:D7:69:28:9D:9A:DD:50:1D
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:34:11:4c:96:47:71:24:42:28:d9:aa:65:cf:e3:8b:b7:39:
21:03:13:49:de:8f:ed:00:a5:34:e6:bb:ed:f4:48:83:72:57:
a1:9a:1f:b7:6f:50:cd:ae:b6:8e:7a:08:33:0e:4e:89:97:16:
0a:73:6b:04:3b:c3:df:31:e1:d2:ee:7d:69:29:64:27:34:a6:
f7:d9:76:50:9a:1c:43:5d:d8:07:5d:24:ac:af:08:18:3d:78:
40:5e:17:d0:e9:fd:03:bb:1f:12:58:2b:20:b1:ec:61:05:3b:
5e:ce:ed:be:77:d5:db:a6:85:5d:16:67:5c:e9:49:8b:65:57:
a0:bb:3a:8c:d2:28:89:e8:e8:6c:9c:ba:81:e3:ea:5b:96:b8:
95:f1:bc:eb:59:ab:26:3c:55:3d:1e:20:10:28:12:2f:d4:b6:
c9:c0:d2:19:db:69:9d:5c:17:4f:03:1b:a8:9e:78:6e:ea:e6:
e5:38:54:ae:8e:cb:3a:41:d5:55:a5:be:67:6c:23:95:e1:a2:
ee:a5:cf:ae:7b:94:ff:33:80:16:0e:87:c1:ae:6c:66:ec:80:
33:7b:0d:66:3f:72:28:7e:3d:46:2d:18:7c:18:9b:11:08:7f:
89:08:67:26:ca:93:84:91:c4:5b:6e:8a:33:5a:db:2b:93:ba:
a3:08:b5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:44 2025 by rpki-client