Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: /IR0+/d9DpwNjx3N6UJXNBPuc3BvYcwwmaNTnT2WF4k=
Subject key identifier: DC:D1:9C:46:32:14:E6:AF:86:FA:04:12:84:DE:11:36:47:98:15:76
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 019510C6FBBDB15C06AF72102754EB92BDB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 145A
Signing time: Sun 16 Feb 2025 22:00:30 +0000
Manifest this update: Sun 16 Feb 2025 22:00:30 +0000
Manifest next update: Mon 17 Feb 2025 22:00:30 +0000
Files and hashes: 1: 90NkAjkP5P3wZwJqnXSO9AQDG_M.roa (hash: eK7yCOQkJI1NI1OGTayx19wjsA64ORHdInhLei4bvc8=)
2: eXxQ74lf_D70ri2LePLnjdcMkBc.roa (hash: n78D7QenzcNLmShQTibMqzzt2qmVHcGGjBzWjuUDoBA=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: H7UUL2wiGEGJWQJwDPzFr8eiiHi8f/oorZQuM5rpVi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:fb:bd:b1:5c:06:af:72:10:27:54:eb:92:bd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Feb 16 22:00:30 2025 GMT
Not After : Feb 17 22:00:30 2025 GMT
Subject: CN=dcd19c463214e6af86fa041284de113647981576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:e5:b2:8f:d4:04:69:16:15:6a:de:7a:3b:
70:53:cb:88:05:74:8b:2b:88:85:f8:d7:2f:1b:f9:
59:5c:ac:42:03:8c:7c:e9:18:85:9e:9c:c2:23:9b:
d5:10:15:ed:a2:b3:2d:80:aa:d0:09:d2:cd:69:ef:
22:e9:7e:ca:c9:21:d7:93:00:08:d0:73:96:77:0b:
7e:11:4f:8e:9e:cb:5f:22:9d:6e:c6:c0:d6:eb:2c:
31:5c:d6:a9:79:05:82:41:12:a6:d5:75:05:9f:58:
b3:e7:f0:54:8c:de:bc:b9:dd:7d:fd:1a:33:db:99:
c8:bb:2e:30:e6:d1:9e:8d:33:53:7c:15:07:0d:cc:
11:ea:b7:58:81:c9:c8:54:6b:ec:c3:5d:f0:a3:ed:
b2:d0:ea:f6:1b:2b:4e:6a:cb:a2:ae:cd:1e:25:fb:
bb:b8:48:d8:92:f3:d7:5d:08:ca:74:b4:9b:50:4e:
ed:9b:ec:a5:27:9c:4d:21:27:06:18:f7:33:8f:30:
67:71:36:06:68:54:67:26:ae:1a:53:15:a3:dc:3f:
13:2c:54:5b:01:81:8a:c2:e2:c7:51:f7:8d:83:c5:
73:1f:33:c4:49:ea:24:a0:c1:64:8a:f4:6f:37:e9:
d9:40:2e:ea:45:2f:88:b3:ce:01:67:ad:e8:52:59:
ab:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D1:9C:46:32:14:E6:AF:86:FA:04:12:84:DE:11:36:47:98:15:76
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9a:fb:51:fc:e9:9d:ff:a4:80:6b:59:6b:d5:1e:6b:14:75:
f3:59:1e:2e:2a:d4:38:75:66:01:54:c2:ee:26:9c:91:54:79:
80:e6:de:b5:20:96:12:27:66:da:66:36:0c:da:76:54:09:bc:
fe:e6:09:10:bc:c5:9d:fc:e6:75:72:48:67:c1:fb:e7:39:b3:
a2:3b:e0:44:7c:f4:09:21:6c:a7:c4:b8:c7:76:25:76:d4:3c:
dc:3c:24:95:de:4d:4c:ee:0a:88:c1:1e:4c:b2:25:2e:6b:fb:
93:0d:ff:c4:f6:e1:05:69:a4:aa:4b:cb:4d:bc:6a:0c:0d:ca:
62:34:80:37:1e:03:e3:f5:f5:eb:3f:03:7f:b5:6a:13:1f:4f:
91:2a:9f:cf:a5:53:c4:62:5c:2d:10:d2:6f:db:e3:43:da:fe:
c3:c4:ac:4d:48:bc:d7:fd:ec:fa:83:d1:a1:1c:48:cd:fd:75:
3f:40:30:58:9e:dd:fe:25:1c:76:3b:71:40:96:5f:de:ed:f0:
27:d7:f5:00:e3:35:4b:8d:59:ff:af:18:fb:b3:e0:33:87:0a:
b6:e7:4f:63:8b:14:a9:7e:84:c2:d3:7a:1a:7e:73:a9:47:8b:
da:bd:1c:9e:8a:0e:7b:1d:e0:b7:f9:f8:07:1a:52:a2:b7:9d:
27:70:98:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:15 2025 by rpki-client