Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
File: cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft (raw, json)
Hash identifier: yv/+iijEZ5lndSUyZF9Ou7GWmAz5r2wirzGhdKNzMeI=
Subject key identifier: C1:56:E0:5F:14:30:97:D5:F4:65:B5:19:93:69:E7:39:01:14:4C:90
Authority key identifier: 71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
Certificate issuer: /CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Certificate serial: 019511A2D5D696117406952062C03D2406DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
Manifest number: 059A
Signing time: Mon 17 Feb 2025 02:00:39 +0000
Manifest this update: Mon 17 Feb 2025 02:00:39 +0000
Manifest next update: Tue 18 Feb 2025 02:00:39 +0000
Files and hashes: 1: cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl (hash: NpzuC+0xnKqzqzbJguDhRvxWbOySgpLlnUP/kMyk+do=)
2: nA6xks4oQE9N25Xp7uQGkNyo-7Y.roa (hash: F+E2ylwyKz3DO5lKloF7/MKQO4W4GhOJOnJmcBpu/7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:d5:d6:96:11:74:06:95:20:62:c0:3d:24:06:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Validity
Not Before: Feb 17 02:00:39 2025 GMT
Not After : Feb 18 02:00:39 2025 GMT
Subject: CN=c156e05f143097d5f465b5199369e73901144c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:c9:7c:57:c8:03:56:f3:7b:40:8c:d1:e0:
f0:20:6d:13:e6:b9:0d:ee:37:6d:a1:49:e2:64:fe:
3b:29:13:ba:4c:9b:bc:e6:bd:59:94:74:5d:26:20:
c5:e8:64:c7:83:d8:6e:16:73:0c:07:61:b2:f4:b2:
68:d3:dd:ce:01:82:9c:32:47:25:18:24:b9:fe:ed:
7e:93:c3:3e:a2:b1:63:70:86:1d:25:35:f5:1a:cc:
9c:4d:24:fd:01:76:85:e0:bd:2e:af:92:ce:a5:e7:
fa:14:b6:00:0c:0e:32:64:0e:90:3f:72:39:1d:35:
77:1d:31:e6:b5:45:6a:a2:9c:b9:20:73:74:da:54:
4c:9d:ff:04:27:3e:3b:18:a2:76:9e:30:38:08:f3:
21:66:df:94:73:75:6e:4c:0d:c8:8f:e5:c5:63:40:
12:72:09:d9:ed:69:43:a8:84:c4:9b:3a:59:46:21:
be:e5:94:51:cd:2c:ca:7b:8f:d2:8c:e3:fa:92:48:
83:52:a4:4e:28:33:26:b7:18:76:50:15:46:a3:c8:
9d:da:26:0c:25:6f:ea:c1:28:f4:29:c5:58:ee:74:
77:77:79:5f:7b:51:86:74:1f:9d:8f:d7:a1:b6:33:
cb:be:54:e4:46:88:8c:6a:ee:38:56:09:e0:51:9e:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:56:E0:5F:14:30:97:D5:F4:65:B5:19:93:69:E7:39:01:14:4C:90
X509v3 Authority Key Identifier:
keyid:71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7d:c2:b3:e6:10:69:d9:f4:df:43:c6:fb:b5:df:2a:ba:16:
eb:66:d3:54:1c:2c:aa:4a:71:f7:35:23:20:35:74:33:de:9c:
78:ab:90:b1:3f:c8:e9:f6:8d:2a:b6:40:37:ec:53:d2:3e:4b:
04:a0:99:bd:ba:48:41:fc:79:f0:bd:5a:29:d2:b7:6f:99:23:
cb:1b:1a:71:6f:12:c8:04:88:fc:89:b1:80:05:fe:95:d3:06:
65:cf:fa:c6:fc:7d:12:da:47:c1:1e:5b:e6:a2:c4:c3:d6:78:
8f:c2:e7:43:f0:d8:0e:c8:7a:2a:c4:f9:a9:5b:66:12:10:ba:
15:aa:0b:cc:58:c2:a5:d8:18:3b:38:33:0c:68:6f:8b:38:4d:
38:49:17:c7:aa:83:7e:02:ba:58:6c:b0:05:2a:71:e9:5c:ce:
70:c8:2e:8d:f0:cd:27:c0:52:7e:6f:18:73:58:c5:cf:66:16:
c8:4b:3a:35:ce:48:7d:59:94:4d:76:68:b9:c7:af:17:3c:f7:
f7:1e:f0:70:b2:db:2f:13:c9:2b:a3:6f:de:a9:9e:a4:25:fe:
80:94:b0:48:67:52:1f:fd:72:aa:1a:d8:83:f9:7e:85:4b:fd:
0b:ac:45:90:35:fc:b3:d9:48:76:0e:20:f1:3b:a4:95:5a:f5:
43:9f:d6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:15 2025 by rpki-client