Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
File: mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft (raw, json)
Hash identifier: d/5desqvU10sZNbLLuZSSQyyRZUSSNW14tyyI6+8wAc=
Subject key identifier: 8D:DA:1B:9C:D7:3F:8B:00:D8:04:36:15:C0:73:16:90:37:40:6E:0A
Authority key identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
Certificate issuer: /CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Certificate serial: 0194C38825ABED59B8E6158365F5FC9E3991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
Manifest number: 8F
Signing time: Sat 01 Feb 2025 22:01:07 +0000
Manifest this update: Sat 01 Feb 2025 22:01:07 +0000
Manifest next update: Sun 02 Feb 2025 22:01:07 +0000
Files and hashes: 1: BX8TzVbCvSIW38h_vPu5ASmAFTU.roa (hash: 9fbeu4ndfIatRqGo7OJ1vRbIh5amuFXDGED1/l+TEsY=)
2: jq_1ppFWb5g9HX-Mw-WYljosNes.roa (hash: lwyW5RQhcptTES0umbfYTj6Bk0XX6clHFX008ryFUIs=)
3: mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl (hash: h2RJUlrC5bl/bHYlhI8SMJO3cq9eqzCym1DNeaUDqYg=)
4: oz7JKl-4NZzBhNGzabLNqFsOhAA.roa (hash: ZfAKA4bqtPr1c9bg/21Eh2BpRLDxFurecYRLK6HJ27c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:25:ab:ed:59:b8:e6:15:83:65:f5:fc:9e:39:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Validity
Not Before: Feb 1 22:01:07 2025 GMT
Not After : Feb 2 22:01:07 2025 GMT
Subject: CN=8dda1b9cd73f8b00d8043615c073169037406e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:b0:67:c1:1e:9e:b8:68:1b:57:ea:49:bf:
b6:85:e1:e8:6f:90:e3:bf:5b:d7:ee:e0:aa:c5:e5:
db:36:73:1b:d7:dd:86:ad:e7:26:2c:69:6d:04:ac:
81:cc:e6:5f:e4:09:1f:01:90:b4:01:de:ed:26:29:
29:b2:17:56:db:15:12:2f:3b:1c:1e:70:84:a4:99:
1d:23:0f:c2:a6:f0:19:f6:5f:9f:a1:ad:d2:71:41:
26:5c:15:a5:84:65:fb:a8:47:6b:c1:ff:72:0a:0f:
69:8a:0a:78:ca:3d:30:28:74:4d:cb:65:e5:a2:bd:
4e:74:ba:95:56:cd:4f:78:dd:05:8c:d5:5f:0c:0e:
dc:e2:f2:de:cc:dd:60:14:43:5e:6d:b8:82:d2:2d:
eb:40:ec:26:59:5d:3f:67:70:a9:fb:fe:61:67:30:
ef:44:30:65:8d:d6:87:f6:3f:ed:63:e8:3d:bf:66:
22:95:a6:88:9a:fd:1e:aa:ac:0c:6b:3b:f4:71:b0:
e6:8c:d4:36:19:95:6c:f8:20:20:f3:60:87:7a:fa:
69:18:e6:3d:16:1b:1d:df:5f:e8:b7:a6:80:39:2d:
07:80:c7:7a:65:20:eb:00:3c:b7:1a:d6:82:a7:6a:
9f:53:90:b5:9e:dc:51:cf:62:58:2b:e7:6e:44:99:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DA:1B:9C:D7:3F:8B:00:D8:04:36:15:C0:73:16:90:37:40:6E:0A
X509v3 Authority Key Identifier:
keyid:99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3e:22:61:ba:b4:99:cf:87:24:8a:08:b5:30:4c:91:56:f6:
1f:58:7e:37:c8:31:e1:88:f5:76:73:80:dd:9c:96:dc:29:ae:
9a:ab:f2:c9:b9:d1:82:4d:f2:b8:86:d6:ab:33:48:52:5a:5b:
b3:bc:86:e9:80:9f:9b:2d:df:bd:05:1c:3f:af:3e:a6:5d:29:
f3:d3:cc:12:bd:39:b8:c6:dd:8c:f5:2f:02:59:ab:68:a8:94:
eb:32:0b:16:92:20:80:b0:97:3f:89:78:8f:ec:eb:0b:4c:22:
f6:1b:44:26:65:16:ea:4d:40:77:6a:a6:71:e7:34:2f:fa:b3:
0d:0d:a7:18:45:81:83:be:50:4b:cf:b5:3b:7d:e1:a7:c6:10:
d8:24:a9:63:fd:7b:82:4f:e4:d4:f4:94:02:e0:b0:4d:72:33:
d5:3e:01:de:70:9e:30:4f:4f:bc:e1:b0:5d:b0:9a:dc:15:f6:
ce:68:c5:bb:62:c4:03:a3:d8:37:ac:c8:05:26:4a:0c:bf:3d:
5c:c2:bf:70:77:c6:fe:4c:76:52:04:02:e8:ff:3c:9e:6d:36:
4c:b8:99:c8:e4:43:75:2a:97:b6:6d:46:3b:c4:84:00:05:28:
1c:72:c4:53:c2:8e:e4:74:3e:6f:a8:da:dc:c9:45:8c:22:df:
be:e9:f9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:17 2025 by rpki-client