Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
File: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft (raw, json)
Hash identifier: lQvbUtwBIHZy257cVnHoH/dcG4U0Ldtj52gpUlkGDp0=
Subject key identifier: 43:98:67:26:E4:90:BE:CA:4D:31:49:9E:B5:F8:FC:91:06:15:32:75
Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
Certificate issuer: /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Certificate serial: 01951210A27C3649778104E1C78898324DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
Manifest number: 11EE
Signing time: Mon 17 Feb 2025 04:00:34 +0000
Manifest this update: Mon 17 Feb 2025 04:00:34 +0000
Manifest next update: Tue 18 Feb 2025 04:00:34 +0000
Files and hashes: 1: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl (hash: 9Vcq60a9/sq94CVmydAhye2sHQKbmSqUfDxjnwOYqMI=)
2: xIoC-WGecmJt_bZ5x_Wrj2HyW44.roa (hash: LepzO7LDnuKCKfB445emcRk0FeJMq3z/X+qXQkTIak8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:a2:7c:36:49:77:81:04:e1:c7:88:98:32:4d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Validity
Not Before: Feb 17 04:00:34 2025 GMT
Not After : Feb 18 04:00:34 2025 GMT
Subject: CN=43986726e490beca4d31499eb5f8fc9106153275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:ce:6c:f3:a7:52:3f:10:21:8e:c3:f0:02:
1c:15:e7:d9:c5:9d:8d:d8:98:06:08:c4:bb:41:13:
b1:27:40:99:fd:d2:4c:7b:06:0a:96:c1:ec:92:f0:
2b:fd:28:40:80:3d:1a:16:dc:9d:50:d9:60:84:07:
dd:e6:83:dc:ff:6f:12:f9:46:44:6f:f4:09:5a:5d:
0c:e6:83:a4:21:43:a4:0a:41:88:2c:e5:b8:38:a9:
42:f2:03:d6:46:02:96:92:f6:5f:3e:e9:5e:45:24:
a1:26:b7:9b:12:df:0e:75:f3:46:c5:fa:0b:43:b6:
1c:88:05:85:0e:2f:b1:10:89:42:78:85:84:20:22:
03:ec:ec:f7:cb:51:a0:73:84:75:51:aa:50:65:0c:
49:93:35:23:87:23:dc:ab:d5:4b:1d:37:66:a4:18:
ee:4d:b0:82:8f:0b:26:0c:f8:e9:4f:0f:7c:a0:b3:
97:53:87:dd:f7:f1:64:18:c4:19:91:74:80:c5:ad:
91:11:01:45:f6:ee:2e:54:9d:ac:1f:f5:e5:fa:87:
95:24:b1:97:d2:58:98:91:18:05:ac:08:5d:8f:e1:
9b:52:c6:2f:92:97:65:ab:8c:69:8b:fe:0f:a2:fe:
25:94:4b:5f:23:9f:94:68:9a:83:38:ee:32:97:e6:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:98:67:26:E4:90:BE:CA:4D:31:49:9E:B5:F8:FC:91:06:15:32:75
X509v3 Authority Key Identifier:
keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ea:60:8f:82:69:a3:3a:6a:45:9a:23:c5:60:b5:4a:ae:b9:
01:51:34:5b:ff:39:64:e7:73:8c:a4:44:e1:5c:5c:65:8c:a4:
31:6e:c5:a0:ce:5d:c9:1d:fa:cc:0a:41:d6:a4:90:46:29:bc:
f9:89:0e:9b:af:c2:1a:fd:04:d9:f3:a2:f0:23:0b:31:03:05:
de:39:72:8c:e2:88:a1:98:1a:9c:11:7e:b4:2f:83:3c:0c:c7:
92:e8:ff:ff:0e:be:55:e9:45:4a:70:8f:9c:2e:9f:e6:f6:58:
4f:f7:e9:06:a1:ff:42:69:50:9d:d6:10:23:a2:ef:ff:89:95:
8c:77:24:f8:1b:88:e8:12:5a:de:9d:00:e1:a1:3d:55:06:4a:
a2:fc:67:5d:5a:f2:43:65:29:4e:9b:8f:58:ca:70:da:8d:f7:
95:c4:93:88:19:e5:f8:39:6f:d3:c8:2f:88:eb:b5:bb:3a:2a:
15:72:fa:9c:7c:e5:63:b1:e1:61:b7:fa:75:59:13:a4:a9:c9:
1e:c2:9d:e8:cf:5b:9b:51:4b:69:6b:59:c7:8f:7e:17:f5:55:
a4:1a:71:af:8e:26:ed:fc:22:9b:73:02:cc:63:d3:45:8f:96:
5c:df:85:e4:d4:64:e5:94:ae:61:05:8f:dd:d7:5f:18:0b:7c:
e1:0f:55:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:45 2025 by rpki-client