Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
File: SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json)
Hash identifier: cl7rgr9kzc+1NSlFhS2hv94WDUQx2DNL8CpxL83cu2Q=
Subject key identifier: 7C:49:1C:B5:85:15:8A:D7:AF:83:3A:8D:2F:C3:EC:90:B7:C7:83:EE
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial: 0194C387DBE79FF524C31831A8E56BE656D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
Manifest number: 0D03
Signing time: Sat 01 Feb 2025 22:00:48 +0000
Manifest this update: Sat 01 Feb 2025 22:00:48 +0000
Manifest next update: Sun 02 Feb 2025 22:00:48 +0000
Files and hashes: 1: Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa (hash: MQQ4lqV14DgsP9PSgDv3Sm3nFuHvBvMEPlVur5pwdsw=)
2: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: iMbCbfALsnCVa5DzvXcLLn9k6ACnF0ew5C5AzoRcRnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:db:e7:9f:f5:24:c3:18:31:a8:e5:6b:e6:56:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
Validity
Not Before: Feb 1 22:00:48 2025 GMT
Not After : Feb 2 22:00:48 2025 GMT
Subject: CN=7c491cb585158ad7af833a8d2fc3ec90b7c783ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:a4:11:1a:6e:c8:7f:68:8f:ba:d2:3c:8e:
ff:82:70:00:b9:36:22:ed:b4:26:3d:bb:dd:df:9c:
fd:42:7b:67:47:e7:ae:e8:01:07:81:ac:ca:4c:c5:
16:bc:15:10:0b:94:5f:8c:a8:94:71:90:bf:8f:a6:
a9:32:ce:ff:66:56:d0:73:9b:36:65:c8:95:1a:64:
3f:4a:8d:02:0a:2c:29:bd:6e:e3:15:8d:84:76:81:
2f:ee:91:78:35:8d:59:1a:b6:b9:38:69:70:60:27:
de:99:b2:49:c0:7c:e2:63:83:3e:f1:e0:c3:bd:1c:
15:e4:f6:fe:86:35:1a:62:d4:44:40:d6:e6:d4:e4:
6c:ef:b7:37:be:c2:10:3a:19:89:ff:25:72:bc:4a:
07:a3:98:1a:5f:3a:16:e9:1a:5f:d7:c6:f6:48:2a:
f9:1a:60:28:07:db:6b:d7:8b:be:47:b4:60:9c:ff:
cb:1e:33:bd:9e:67:f5:07:bf:45:be:02:41:5f:18:
31:9b:9a:f9:9d:bb:07:e9:5e:6e:b6:5b:2b:de:e3:
67:97:ea:71:f7:45:0c:96:3b:82:e1:ea:aa:28:22:
ff:c7:ec:7e:00:e6:66:44:ce:40:fa:10:4a:a8:d4:
1a:e3:20:71:35:d5:40:ad:5d:32:8d:72:22:39:d9:
2e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:49:1C:B5:85:15:8A:D7:AF:83:3A:8D:2F:C3:EC:90:B7:C7:83:EE
X509v3 Authority Key Identifier:
keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2c:ca:71:64:2f:e6:b4:a3:a4:69:fa:49:e5:8e:fa:41:ed:
a8:10:e4:16:c8:14:c3:0c:4a:d6:f6:1e:ec:81:94:c5:12:c6:
57:02:6d:6c:81:1a:aa:23:a4:d2:5e:00:02:4d:b6:dc:7d:ca:
3e:75:02:87:86:22:35:65:cc:89:3e:8b:09:61:35:28:32:c1:
67:51:af:60:4c:3f:58:42:2b:ed:81:a1:c8:24:86:f4:f8:e0:
6e:42:97:f1:bd:91:50:ed:8a:c0:6a:dc:f7:72:27:73:6d:ff:
99:70:68:98:ee:1d:9c:75:0a:35:02:71:87:83:17:b4:cb:7a:
b9:c2:5b:45:ea:59:e5:03:58:ea:45:a5:6c:b9:b3:fc:cf:f2:
48:c5:47:4d:66:2b:fa:e2:04:d0:ef:db:fe:da:f7:ce:1e:63:
3f:4c:64:5a:40:8e:2c:5a:48:a4:a6:4b:18:75:3f:a4:61:15:
07:40:7d:c6:9e:7f:e9:7b:18:f7:3c:fa:4e:e5:d2:2f:ae:74:
7d:25:18:f4:53:50:f9:fa:b9:3f:cb:32:31:59:56:22:19:bd:
b1:ca:71:45:02:6b:fa:c0:b1:15:65:c7:b1:5b:d0:82:6e:57:
42:ad:7d:39:d6:c0:4a:05:ee:28:52:4f:85:ba:08:ad:78:3a:
f9:d7:a8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:10 2025 by rpki-client