Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
File: 9VW6bis9tVIdvHBipYwW3aG58i0.mft (raw, json)
Hash identifier: QUNWPG63xHUNz2arYs0NEBzP3luC9iIMmDv/UU2L/H8=
Subject key identifier: DF:46:55:67:89:E8:6F:72:DC:5B:61:15:C5:CD:90:2B:F1:39:94:56
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 0195116C066391A7549F04D60CD33223FCAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
Manifest number: 0217
Signing time: Mon 17 Feb 2025 01:00:47 +0000
Manifest this update: Mon 17 Feb 2025 01:00:47 +0000
Manifest next update: Tue 18 Feb 2025 01:00:47 +0000
Files and hashes: 1: 2n7OMl3jQfBIql5u4fGHwPSLtNw.roa (hash: 1rKFkHzCGzWhEvrCyPc6hzfuk0GlXlkcWKE6261l+UI=)
2: 9VW6bis9tVIdvHBipYwW3aG58i0.crl (hash: peuOO7PQ5rG6Ti9jGUvrbbEuG5KafasGAm1J3kdp+08=)
3: R9C9RHOYfHsQX3_4qdQpXgxkEVg.roa (hash: TG8phgVc45ubyKw+a5c8BVXvVbA9fhRO3sFvs8XmDD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:06:63:91:a7:54:9f:04:d6:0c:d3:32:23:fc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Feb 17 01:00:47 2025 GMT
Not After : Feb 18 01:00:47 2025 GMT
Subject: CN=df46556789e86f72dc5b6115c5cd902bf1399456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:73:55:94:d0:74:3e:5e:54:34:bc:47:8e:
90:4e:8f:cb:33:54:82:21:b2:94:0f:2b:e4:12:ec:
f2:03:6d:85:f0:02:31:53:9f:c5:86:a8:cd:46:3c:
6b:b7:a6:b8:c7:8d:d3:58:8b:ea:ad:74:a7:c3:d3:
7a:3b:c9:ab:de:ba:08:25:45:b8:63:8d:34:04:71:
42:02:5b:22:37:45:69:51:69:09:25:03:b1:a2:50:
44:ae:88:68:f4:98:c6:63:a6:63:b7:52:45:63:23:
53:3b:0c:d4:04:80:c5:ea:03:1d:1d:82:48:d8:5b:
ad:f7:37:59:b5:8f:91:b7:45:59:f2:2a:41:72:f3:
30:6c:83:03:11:cb:6c:8e:5d:43:e2:02:06:98:09:
1a:9e:62:cf:31:24:21:6f:05:fd:bb:58:35:6b:81:
e2:b4:e6:0d:55:fa:52:67:7b:76:32:c6:db:d9:b0:
e6:71:f8:59:e2:4c:0f:7e:a2:ca:59:f3:f8:f0:4c:
9a:fd:07:61:f7:e0:95:b8:45:92:2b:c5:a3:0f:52:
e4:85:e8:b7:56:b7:61:a9:48:37:d0:44:8d:6b:00:
eb:9d:35:ba:de:53:76:2d:bc:b9:40:75:84:e2:a3:
02:01:34:64:40:a4:cf:23:e0:f3:7d:b5:72:77:e5:
d5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:46:55:67:89:E8:6F:72:DC:5B:61:15:C5:CD:90:2B:F1:39:94:56
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:15:57:fe:cf:bb:2f:39:73:32:6b:46:51:bc:ae:37:79:c6:
fa:82:a3:e2:8d:a4:00:0d:43:c7:bc:4b:9b:5d:79:63:a8:ed:
88:e3:f4:54:03:37:98:ae:5b:73:9f:f3:e9:43:0e:41:09:01:
3f:3a:53:ce:6c:bd:d4:7f:49:cd:05:08:07:b5:3c:66:4c:30:
a3:76:46:3a:ce:79:58:17:05:bc:cb:8c:c0:16:a4:37:61:c3:
85:ce:2a:45:c0:e0:dd:1b:62:5e:33:66:c3:c6:ac:24:e9:2d:
39:12:38:ee:a3:de:e7:96:bf:99:4f:98:d2:95:f8:50:26:97:
8f:06:50:a6:be:e7:58:f4:97:ee:65:e1:e0:2c:d0:93:fe:67:
85:8a:af:d7:1f:6c:7e:7f:de:11:cd:0f:ec:27:38:bb:85:84:
01:d6:47:1c:30:ef:a8:2e:45:e2:b8:ce:91:9b:4f:1e:7d:67:
f2:e0:dd:c8:bb:1f:41:c2:02:60:16:35:00:5a:1c:37:ae:ab:
74:f2:e4:fe:7b:4b:b0:de:d6:97:0d:27:da:61:16:58:7f:f8:
b3:08:93:bc:0f:a0:44:d9:27:36:26:64:54:d9:cd:85:07:6c:
41:ff:fc:49:29:ac:db:c3:42:7f:33:23:e7:a9:4d:84:7a:4e:
67:a5:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:32 2025 by rpki-client