Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
File: SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json)
Hash identifier: g2LgOtA7PqcUuB7b1+rlYS0HDysO3GAotIM1Of60EH4=
Subject key identifier: 91:F1:39:69:67:BB:A4:01:C3:51:0A:A6:10:0E:7A:48:4E:FD:01:EC
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial: 0194C42C8E9478576228A775F7B2CA4C3D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
Manifest number: 0E29
Signing time: Sun 02 Feb 2025 01:00:41 +0000
Manifest this update: Sun 02 Feb 2025 01:00:41 +0000
Manifest next update: Mon 03 Feb 2025 01:00:41 +0000
Files and hashes: 1: 0giOT2-cspinjb0AYnQ0xR7oe3s.roa (hash: JsKfvRyfvFNiFnymkkC31pksnK2WhZYhTKOkR+nS9d4=)
2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: uIMakeiVVUKDK0CjNPj0hhwQFC5hOxr4TLaE0eE5cdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:8e:94:78:57:62:28:a7:75:f7:b2:ca:4c:3d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Validity
Not Before: Feb 2 01:00:41 2025 GMT
Not After : Feb 3 01:00:41 2025 GMT
Subject: CN=91f1396967bba401c3510aa6100e7a484efd01ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:2f:44:67:db:16:b0:86:21:5a:7f:25:9f:
c0:76:e6:50:ca:88:7b:e0:f8:95:1e:f3:9d:b4:bb:
5d:33:a9:cc:75:2a:5c:e6:d6:0e:0e:b3:30:b4:30:
28:eb:38:46:34:aa:32:d3:ec:64:3c:93:89:39:6c:
9d:8a:96:a2:81:1b:30:14:5f:07:c6:11:4e:31:9c:
df:b3:6f:12:ea:70:1c:7b:56:0a:c3:c2:a8:ee:8c:
e0:b1:d6:e8:67:59:5e:c5:40:55:f0:f5:c5:a2:1e:
9d:80:9e:59:c4:94:3c:99:f1:1a:b6:fb:7f:49:66:
25:aa:8f:77:36:7b:4f:c8:cc:0f:45:f3:9c:d0:e7:
88:92:37:36:74:bf:d9:16:b5:f2:d6:a8:41:1d:2c:
ab:36:d9:d8:9f:b2:68:a4:fe:a5:d1:53:30:7c:4b:
38:6c:7c:75:83:5d:95:5c:26:29:8e:cf:82:8a:2d:
43:5f:34:7a:b5:0e:41:4a:f5:be:64:b9:0f:ca:48:
11:00:98:29:a0:82:c0:d0:e5:b3:61:7a:fd:88:24:
fd:94:ec:46:eb:6c:15:04:9f:f5:8e:80:06:e5:a8:
1b:7e:b4:ec:2e:8f:9c:91:0d:e7:42:b0:a8:e6:b1:
d2:88:1f:6b:ea:c9:76:ae:ca:11:8e:5c:e7:7a:9b:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F1:39:69:67:BB:A4:01:C3:51:0A:A6:10:0E:7A:48:4E:FD:01:EC
X509v3 Authority Key Identifier:
keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:64:22:fd:2c:82:93:37:9d:fe:b4:b8:d1:0b:8e:12:70:ff:
61:32:bb:be:51:41:38:8c:1e:27:9b:df:5f:d7:6a:a9:3d:cd:
bb:c1:bd:99:1c:42:a5:bd:e2:31:00:d1:7c:2f:fd:d5:6a:2b:
53:c9:2c:e4:67:7f:65:8b:b8:88:8d:59:d7:20:91:09:d5:67:
b6:84:58:59:c9:fa:d4:4c:1b:e4:49:e7:0e:11:1b:ef:f3:2e:
7b:f9:a4:52:53:a7:9a:2d:02:e5:19:a2:c6:0b:c2:5b:d6:57:
34:f7:be:aa:24:78:17:23:79:9e:d5:21:93:96:8f:bf:69:2d:
4f:c7:5a:b8:b9:6f:7f:89:06:e4:82:1c:5a:7b:38:3a:d2:a5:
f9:b4:26:ce:c7:ad:9f:c0:84:b5:30:03:96:9f:a8:c9:86:92:
b9:c8:98:86:65:f1:a8:84:96:b2:88:2d:97:63:0e:64:23:b1:
16:03:4d:1c:c9:52:c2:4d:94:8a:ef:f4:47:83:05:84:07:f1:
cd:90:2e:f4:b9:86:5b:b3:46:a4:1a:e6:0c:4a:60:cf:5f:6c:
01:c9:18:b8:72:de:ae:30:8c:d3:9d:72:c5:4f:04:f0:df:62:
78:be:8d:b5:46:d2:a4:f6:44:0c:53:3b:dc:bc:7d:d6:ef:fe:
89:57:54:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:35 2025 by rpki-client