Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: Zk+Z02e8M7ZJRwGzQmzu6S4q+fPRJfyp/NzxfbXxxOc=
Subject key identifier: D0:4D:4D:7C:68:5B:E9:F8:42:74:2A:BC:7D:50:58:EA:23:89:F9:5F
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 0194C507D9D4DF26BE2608310273095B8E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 0884
Signing time: Sun 02 Feb 2025 05:00:13 +0000
Manifest this update: Sun 02 Feb 2025 05:00:13 +0000
Manifest next update: Mon 03 Feb 2025 05:00:13 +0000
Files and hashes: 1: 8Ztwq8Ff-jJd_sBf28s8lvQ9SqU.roa (hash: QWa/HtnKYiYQsWevU25s3knaSRBSQ+SLuyEHZRqaj0Q=)
2: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: ALRVZeI3S63JREAbPZAbF89l0P/ycmmJgoVb5RapnTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:d9:d4:df:26:be:26:08:31:02:73:09:5b:8e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Feb 2 05:00:13 2025 GMT
Not After : Feb 3 05:00:13 2025 GMT
Subject: CN=d04d4d7c685be9f842742abc7d5058ea2389f95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:b8:b7:cf:71:c2:71:5d:75:9c:ac:8a:dd:
1a:03:08:b3:ce:de:d6:56:dc:e5:15:9e:cd:74:90:
55:e3:c9:1a:e6:a3:a2:60:f0:c6:3e:c8:f1:ad:56:
35:41:90:07:50:a7:6d:e4:3f:d9:a6:e3:dc:ae:c3:
a0:e0:bd:f3:77:05:7b:17:c2:80:7b:31:8e:12:c6:
12:58:de:f2:d0:e5:fe:bb:82:33:96:a6:e1:0d:4a:
c4:6c:58:7c:dd:c7:6a:f9:bd:09:10:8a:bb:05:de:
7b:a9:a5:e2:13:87:21:fb:e4:b1:71:bf:0d:cb:e3:
e2:75:ac:d3:00:c3:11:46:b0:ac:e3:16:03:91:2c:
cc:ab:f1:b4:25:5d:6a:78:f5:31:08:05:1d:61:54:
a2:0b:34:e8:1d:1a:79:de:d0:40:fd:fd:c3:2f:3f:
6f:1a:c1:df:31:8b:cf:83:bf:81:2d:42:0f:fd:7c:
f0:a6:6d:c5:2f:78:8d:25:7e:69:17:11:0b:42:28:
36:bb:0c:e8:03:66:cd:73:f5:e1:f2:54:e6:72:ad:
4e:4a:fb:d0:d1:82:42:6d:5c:2c:7c:21:c6:ab:29:
3b:82:f6:cb:6f:ec:ef:f6:04:2d:86:61:25:86:5a:
12:23:66:e3:58:6a:20:7d:75:48:d3:b4:25:09:af:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4D:4D:7C:68:5B:E9:F8:42:74:2A:BC:7D:50:58:EA:23:89:F9:5F
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c0:f5:63:7d:e7:c8:73:f3:2e:97:f5:89:a8:db:99:f9:ff:
da:16:03:91:f9:55:fb:01:87:d7:d9:5e:20:31:c4:5c:02:e0:
2d:11:4a:4a:cd:6a:19:3c:7e:b8:1b:fd:ec:92:eb:fd:87:1d:
71:b1:85:66:59:76:b9:c4:2b:40:45:b4:1b:9f:e9:59:3f:81:
aa:87:a7:7a:ca:f5:8f:cb:2a:88:1f:c6:6c:1e:1f:42:59:8f:
ba:c7:ec:ed:5d:d7:76:97:27:cc:b1:59:d0:d0:40:40:23:cc:
23:13:35:a1:92:11:90:72:1a:d2:95:ee:5d:d7:89:2f:17:6f:
c8:48:51:f1:ae:89:a2:51:55:a1:06:20:6e:44:78:e0:e7:e3:
7f:29:9b:b0:a6:c1:51:2e:44:bc:71:f8:54:25:e0:de:00:09:
64:7d:f9:3a:bb:f0:a8:aa:37:31:2c:8d:af:66:a4:eb:f4:7a:
0f:a3:01:25:3f:96:10:47:37:dd:a9:13:a0:1a:91:7f:c4:15:
e3:56:31:a8:f2:d3:71:ac:15:a0:be:72:89:96:35:e4:cf:48:
d9:11:15:80:8a:e3:35:1d:a7:01:17:09:66:62:e6:36:ae:4c:
29:cd:45:08:93:06:7d:ba:9d:48:4b:ec:cd:db:d5:12:5a:4c:
e4:99:8e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:27 2025 by rpki-client