Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: odPMIn+LWEFANiVBtwrhPzpTYjx9UdNuslxBpxc4K9g=
Subject key identifier: 70:65:3F:39:95:95:B2:98:45:2A:C9:4C:0E:14:7D:69:D6:1B:13:B6
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 019511351575449871FB11B31EF7AC3DD4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 00:00:46 +0000
Manifest this update: Mon 17 Feb 2025 00:00:46 +0000
Manifest next update: Tue 18 Feb 2025 00:00:46 +0000
Files and hashes: 1: 5IXXShSjVO7kS96xQpiSIMcLu-s.roa (hash: E67HmQuHQzZNq0YpnE5MfAwnl2TJ0rHXn4iIRjzaf4g=)
2: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: 3qcXfRLIx/vIm2gah/Ui+GZvCE2UElRlA8IOG/2qwvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:15:75:44:98:71:fb:11:b3:1e:f7:ac:3d:d4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: Feb 17 00:00:46 2025 GMT
Not After : Feb 18 00:00:46 2025 GMT
Subject: CN=70653f399595b298452ac94c0e147d69d61b13b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:17:8f:64:2d:47:2b:24:29:72:97:e4:7f:
37:b2:51:4d:9a:24:01:8a:7b:03:45:6f:17:59:d0:
08:35:1c:a6:f2:01:c1:62:e6:03:65:1d:29:d0:56:
8e:fc:1d:18:c4:d1:f9:b4:ac:37:8b:52:3c:62:a3:
e4:38:4a:a9:c5:0b:68:3d:99:43:d2:a9:2b:04:1f:
52:45:f2:7a:3b:10:36:6c:25:fe:f5:c3:83:76:bc:
d3:c0:73:76:4c:8f:e1:a1:48:c8:b3:85:c6:72:c8:
58:cc:7d:a6:a3:e1:32:b3:40:a8:80:78:3c:54:f0:
a5:87:75:f6:93:3e:a4:cc:6e:af:f0:8b:dc:be:d8:
4d:ea:62:24:a0:13:50:d7:27:71:bf:f1:c7:c3:ce:
75:5f:1f:61:84:c3:d1:5c:2f:f1:cc:05:cd:d9:03:
ee:3d:c8:b8:11:de:00:df:ac:80:2e:4a:d2:4d:08:
f2:c5:72:26:e4:8b:3d:82:06:d8:02:38:d3:4d:02:
4d:34:cb:e6:5c:cc:d2:5c:a4:6d:4e:51:b6:2c:d3:
1b:d0:82:d3:3f:1f:79:c8:39:0e:c1:79:21:29:0e:
58:1a:af:bb:02:63:19:90:e4:06:b4:95:5e:09:40:
0b:8a:85:39:b6:69:bd:ef:e6:d4:8f:16:fb:7c:46:
86:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:65:3F:39:95:95:B2:98:45:2A:C9:4C:0E:14:7D:69:D6:1B:13:B6
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e6:31:66:e9:18:da:2c:7f:dd:58:d4:ca:10:3d:3d:48:7f:
2f:32:8a:11:f4:cd:55:af:0c:22:fe:00:25:f9:b6:da:30:d9:
71:78:b1:30:41:63:3e:a7:a3:0c:56:fa:5f:62:16:d8:4b:da:
c6:57:57:be:b4:3a:56:d7:1b:f1:bd:53:c7:9f:42:64:36:41:
b4:b5:cd:65:65:0f:d1:30:09:0c:e6:e6:1e:f5:78:79:b3:ec:
44:07:df:cf:77:e0:2d:32:ed:36:c7:d0:f0:51:f6:20:b6:9a:
a5:9a:7d:8d:17:64:51:f1:03:77:0a:7a:1f:bc:39:52:e0:88:
1b:12:50:a9:70:4e:b5:11:7f:77:aa:d6:df:9b:51:cd:c9:c4:
99:0b:36:ea:98:79:2b:ef:29:c8:f2:7d:2f:77:39:11:22:19:
c7:0d:7a:46:1a:d6:9e:3e:79:8a:df:41:72:ca:4c:4a:8d:4f:
c7:10:8b:7b:6b:a1:d8:0c:82:e6:75:91:fa:f0:32:e0:c9:9b:
ad:21:c7:f8:c3:30:e1:ea:d8:e3:ce:78:94:bd:c7:79:f4:e7:
2a:e0:22:62:7c:f6:13:63:99:5c:55:5c:49:10:6e:a5:27:20:
9d:1d:17:33:50:4a:69:cf:54:ce:87:ae:48:e9:99:f6:07:6d:
45:fd:ea:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:49 2025 by rpki-client