Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
File: 1H2KqhDtz10IFAORU5l7-_TTW6k.mft (raw, json)
Hash identifier: NTueC2zE8/jCP+NCfKd2UGb5Gq2jtNPgXx9nEfpgGrw=
Subject key identifier: 91:15:AA:F3:6D:D6:38:BE:6C:68:E2:8C:35:AB:73:55:4D:93:8D:1C
Authority key identifier: D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
Certificate issuer: /CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Certificate serial: 0194C3F62C5F7D851A218BDD549CB8FCB3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
Manifest number: 43
Signing time: Sun 02 Feb 2025 00:01:17 +0000
Manifest this update: Sun 02 Feb 2025 00:01:17 +0000
Manifest next update: Mon 03 Feb 2025 00:01:17 +0000
Files and hashes: 1: 1H2KqhDtz10IFAORU5l7-_TTW6k.crl (hash: F/PuV2+N3ddusHUgz+3EW6rv8q7YLUjmK3V7xdhbH3w=)
2: oL3YqmLZNQTklrYCVBkqoxnVPVE.roa (hash: vNB411x6DGxlKgUop3xuDcnHI37Ap9OjrZ9OIS8r31M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:2c:5f:7d:85:1a:21:8b:dd:54:9c:b8:fc:b3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Validity
Not Before: Feb 2 00:01:17 2025 GMT
Not After : Feb 3 00:01:17 2025 GMT
Subject: CN=9115aaf36dd638be6c68e28c35ab73554d938d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8f:80:94:3b:5d:96:6f:53:f6:4d:e7:52:2b:
a2:f3:56:e7:4d:15:9c:b0:cf:77:2a:41:28:c1:c9:
dc:af:25:54:69:2b:91:97:e8:1a:93:4e:e3:1d:bb:
a1:22:3e:10:09:1d:63:17:ec:55:ac:ce:35:72:6b:
f9:25:55:d8:ba:4d:ca:90:b5:1a:c0:bf:0a:06:8e:
29:1a:f6:80:25:a5:ba:50:a6:9a:c5:62:5c:b5:32:
11:a9:9f:8e:7f:e3:41:06:aa:2c:79:58:7f:42:6e:
e6:4b:c0:35:08:02:16:f9:41:17:97:56:50:5e:1c:
54:e8:b5:3d:f0:f8:aa:e2:33:56:85:48:0f:3a:ab:
f4:4a:8d:c1:e9:3c:14:73:94:3a:1e:7e:c1:a4:08:
27:ad:20:76:7a:96:70:6d:fb:92:d4:47:88:50:12:
d8:16:57:c1:fa:b7:70:84:2e:6c:bd:a4:0d:9c:2f:
9f:fc:03:5d:ae:1e:2a:35:9e:b4:33:9f:cb:1a:c2:
9e:97:2c:dd:e3:0b:e9:41:0a:ab:55:f5:61:71:84:
f8:5d:72:f8:38:a7:c5:bc:d3:8f:0d:ee:54:f1:ae:
f4:07:da:c2:15:d8:77:e4:50:65:c9:31:2a:76:56:
51:d8:8d:28:d0:33:7a:13:57:91:c4:87:62:46:17:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:15:AA:F3:6D:D6:38:BE:6C:68:E2:8C:35:AB:73:55:4D:93:8D:1C
X509v3 Authority Key Identifier:
keyid:D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:a8:0b:fc:c7:59:c1:9c:94:2b:1b:cb:9d:0d:ed:98:7a:cc:
15:ae:89:1b:50:3e:cc:2e:55:99:d0:d2:0d:7e:cc:ef:50:e2:
ad:a3:d8:bd:95:33:22:46:aa:20:90:33:f5:8b:a8:89:e6:5f:
7e:70:34:b5:eb:5b:0e:72:27:19:4d:c9:d8:fe:50:3f:1e:d3:
67:c6:df:da:29:52:e6:ce:46:dc:6a:ab:10:de:63:c8:31:cd:
69:c3:2a:f9:c1:07:7e:3e:9f:8f:aa:32:2d:9f:85:ef:ba:4a:
e7:e0:44:ae:9d:1a:0e:32:93:9c:af:c1:d9:a2:b1:7d:bd:af:
82:58:3d:d6:fc:4c:a0:e8:c7:2e:64:bd:47:ad:b5:4b:d2:b4:
f4:a6:7f:e6:97:d0:d9:77:32:30:7c:64:a9:9a:2a:4c:69:63:
ad:4d:e7:9d:5e:9c:bf:40:44:e5:dd:95:b8:e7:ec:da:9f:0b:
03:8b:c9:28:54:93:eb:10:d1:7c:f6:2a:e6:16:b1:0f:14:20:
64:10:f5:ac:cf:54:77:68:99:7f:9b:81:d7:47:11:16:80:ed:
c3:c2:5e:de:47:e7:11:a2:a2:f5:1b:69:ca:ca:e2:c9:31:74:
0c:5f:36:ca:9d:85:44:27:53:67:70:00:4c:a5:02:53:04:c0:
65:2c:40:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:16 2025 by rpki-client