Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
File: hX9MEi5PjGAfIcXIaHFtRgidheE.mft (raw, json)
Hash identifier: JA3E5E3J3HdR1nSF8yP3egk1lzS6k56kOOjCbSNfYO0=
Subject key identifier: 62:CE:F4:14:E9:A0:19:2D:CB:23:45:48:3A:46:5E:08:83:C6:F3:AF
Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
Certificate issuer: /CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Certificate serial: 019511D9C641B71E0A6FE3E4F3F97404FF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
Manifest number: 091E
Signing time: Mon 17 Feb 2025 03:00:39 +0000
Manifest this update: Mon 17 Feb 2025 03:00:39 +0000
Manifest next update: Tue 18 Feb 2025 03:00:39 +0000
Files and hashes: 1: hX9MEi5PjGAfIcXIaHFtRgidheE.crl (hash: WydfOr5USk6ZFkpWYbWg/nK1ML09BRdTsdSdEYmOe40=)
2: wypxlBc1J8Bpx8wsCukzLkT7CzM.roa (hash: VSR04yRc8P3tg6W5nBtOO4BrNXPIDW2s4T0F9VJBzcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:c6:41:b7:1e:0a:6f:e3:e4:f3:f9:74:04:ff:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Validity
Not Before: Feb 17 03:00:39 2025 GMT
Not After : Feb 18 03:00:39 2025 GMT
Subject: CN=62cef414e9a0192dcb2345483a465e0883c6f3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:3c:ba:64:9d:40:c2:ec:69:98:a6:1c:fd:
c6:e3:75:47:19:99:82:15:df:1c:ea:b5:58:14:91:
40:23:40:3b:ce:fe:af:6c:b0:3e:53:1f:e8:55:a4:
75:fe:2e:39:00:c6:26:63:8e:12:af:f6:29:18:89:
dd:52:e7:53:d9:27:56:5d:df:14:c5:a0:a2:2d:87:
9f:41:cb:ad:fa:a2:2f:2a:87:c7:80:b3:8f:ea:45:
ac:b1:74:3f:30:95:63:ac:a8:7e:18:33:9a:2c:89:
c9:55:6f:c2:36:e5:f1:f6:c0:4f:ae:47:41:b4:11:
5f:3c:8d:67:d5:68:6c:fe:49:7c:29:9a:16:96:90:
52:68:2e:b4:e1:21:57:3e:96:21:81:66:83:f0:a8:
80:57:30:e9:e7:00:66:85:7d:f4:44:a4:ca:60:f8:
4e:ae:8d:3c:53:5f:c3:ee:a1:79:79:50:eb:ed:2a:
7a:bd:81:f0:42:7a:0a:91:fe:9e:6c:f4:c0:14:49:
b2:68:20:8a:4f:b4:b4:9e:c0:ec:0b:d7:d2:0c:f2:
a1:d4:51:b2:80:76:a7:28:e1:80:13:83:1d:9d:b3:
c2:13:34:2c:f6:c3:a5:34:03:e9:9a:4c:42:c8:91:
c6:d3:01:5f:6d:6f:ad:9b:27:4e:6a:91:36:c5:b7:
ad:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CE:F4:14:E9:A0:19:2D:CB:23:45:48:3A:46:5E:08:83:C6:F3:AF
X509v3 Authority Key Identifier:
keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cb:44:40:3a:87:25:32:6b:9f:04:a5:99:c5:e7:0b:15:b4:
91:9a:2a:55:73:b2:0f:a7:a7:74:90:3b:96:14:f1:b0:34:e5:
21:1a:aa:46:9d:2e:a3:26:2e:ff:b0:07:37:54:b3:1a:dd:12:
18:40:43:f9:f0:d9:23:af:f8:30:b4:bd:27:d8:e5:4a:61:b9:
87:a7:43:42:20:b0:08:0d:20:08:20:a1:e3:0f:68:bb:5e:97:
fc:c7:52:ea:d6:38:da:3d:04:77:c5:5f:6f:27:88:d7:d9:8e:
08:a1:10:f0:35:b9:2a:14:b5:85:55:ef:a8:ce:8f:b5:fc:cf:
0d:2e:e6:40:22:99:73:d2:d9:1e:0b:dc:52:db:b1:8f:93:f6:
1e:de:c6:30:01:05:f2:76:bd:d7:72:1a:d9:a9:0d:65:b4:7d:
84:f4:3a:c8:63:54:1d:7b:af:09:c9:54:59:9b:74:8c:54:98:
4c:4f:07:cd:68:f3:33:78:46:0e:07:7d:73:13:62:05:f1:81:
52:a6:f9:ac:5f:68:86:63:fe:cc:47:0a:ab:7d:97:d5:4d:46:
68:7b:81:c0:2b:cc:2e:90:e9:fe:45:c2:53:26:a9:f2:f8:ae:
a4:67:85:5e:40:a8:10:be:47:71:64:3d:b3:1f:57:04:8a:24:
e6:08:ed:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:40 2025 by rpki-client