Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
File: T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json)
Hash identifier: gjWzuDUHM1OnaovjB41tJAr71EUc6jupa7upCT3kM5A=
Subject key identifier: 9E:D5:E6:FD:E4:7C:85:12:C1:45:2E:0B:85:FF:43:84:9F:9E:14:50
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Certificate issuer: /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial: 0194C463979C09418993FF989715052425B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
Manifest number: 0CC5
Signing time: Sun 02 Feb 2025 02:00:48 +0000
Manifest this update: Sun 02 Feb 2025 02:00:48 +0000
Manifest next update: Mon 03 Feb 2025 02:00:48 +0000
Files and hashes: 1: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: tpbyV8jVWCzzbGGnXvK7kAGIffxnKpXy4UKVCN4uHcA=)
2: c8I1j-_EdlLIZz3-7BnhuaavJno.roa (hash: CwCN8RoP1XffLa+Wr9AuQzfDKd1y2haHBaFngEMqfpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:97:9c:09:41:89:93:ff:98:97:15:05:24:25:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Validity
Not Before: Feb 2 02:00:48 2025 GMT
Not After : Feb 3 02:00:48 2025 GMT
Subject: CN=9ed5e6fde47c8512c1452e0b85ff43849f9e1450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:44:d2:91:bc:a6:0e:5d:fc:37:0d:82:09:48:
cb:e3:72:95:17:70:eb:cf:9e:59:fa:4f:2b:3e:c9:
3e:48:a4:76:cf:2c:e1:35:d3:79:61:f3:a2:ba:ba:
be:11:f1:0d:28:e9:c9:91:34:d9:81:dd:75:a0:47:
0e:39:6a:b1:b8:77:7a:35:ca:4e:38:a9:cd:71:8b:
41:12:21:f2:30:26:77:9a:a7:7c:3f:a1:b3:72:12:
2b:5a:e3:3c:99:67:4a:48:d6:a5:11:18:87:85:45:
71:32:eb:96:03:de:7a:98:da:25:c0:94:07:d7:3d:
ac:47:8b:04:f7:d3:18:3a:0f:b0:c8:ce:56:0d:ab:
cc:d2:2d:71:97:1d:ab:49:e9:ec:f0:18:1d:84:47:
76:53:a4:c1:63:eb:96:47:7e:5f:19:4f:e8:80:2f:
a0:80:bd:d4:2f:48:14:55:9a:f0:ca:d9:8b:af:89:
ac:8b:e9:d0:13:e1:51:fa:4b:dd:3b:5c:9d:52:fc:
28:cb:22:cc:b0:af:8f:9b:9c:82:85:40:8d:44:23:
52:7c:32:37:c1:57:55:fd:f1:1a:67:94:50:0d:42:
f4:94:7b:cb:38:81:14:c8:63:ba:40:dd:57:1f:0c:
7d:b2:46:5d:01:d0:95:b6:6b:95:1a:17:8c:bd:1c:
f5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D5:E6:FD:E4:7C:85:12:C1:45:2E:0B:85:FF:43:84:9F:9E:14:50
X509v3 Authority Key Identifier:
keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:77:fe:7f:ff:85:43:2a:90:9c:12:9e:09:03:60:e9:73:21:
e0:94:1a:fb:1e:5d:b9:b6:34:41:09:04:eb:26:aa:e1:56:67:
31:7a:80:8e:91:17:9b:ac:7f:f0:13:33:39:8b:60:6d:67:06:
67:44:be:ac:1e:d9:d4:88:45:fe:80:6e:1d:63:e7:b1:b3:9f:
f5:64:5c:66:fc:67:67:f7:08:34:f2:49:a6:b8:2f:29:88:09:
3c:37:52:60:df:5e:b3:14:f2:64:4d:cf:df:ec:3b:16:70:63:
02:c4:2b:a5:1b:28:54:40:d9:72:03:2a:90:68:b8:a2:12:51:
95:3e:a9:96:72:b9:c0:3b:a7:23:fd:ae:00:55:1d:17:5e:80:
8b:15:d7:55:a3:e2:01:7c:0f:8d:ec:78:2a:43:f5:c4:21:d4:
7e:f1:bd:fd:71:d8:a2:2f:69:88:b6:fa:c7:a8:69:c3:b5:1e:
e1:66:db:0c:16:a8:01:89:a2:7e:90:64:d3:9d:06:fb:fa:69:
aa:17:2c:59:32:90:4a:9f:e5:c5:3a:2d:0b:9c:16:ae:b1:98:
9c:2d:43:00:2a:3b:93:14:09:f4:6f:2f:a4:10:f8:78:5e:f0:
c7:b5:86:7f:21:00:02:2d:0e:96:24:29:0f:c4:65:af:53:99:
3f:99:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:03 2025 by rpki-client