Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
File: fSroDN5c12nI8UTmwmYRO_rt7D4.mft (raw, json)
Hash identifier: YRwiI3BG4di3ufbq9iQai+jjhXQ8giemMgZDsgNjosc=
Subject key identifier: DA:1D:9E:D6:B9:4A:C2:7D:6D:51:1F:51:84:98:D8:3C:AF:51:35:8A
Authority key identifier: 7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E
Certificate issuer: /CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
Certificate serial: 0194C3BEB1752FD696EE5155F7D3E4DCC0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
Manifest number: 1430
Signing time: Sat 01 Feb 2025 23:00:41 +0000
Manifest this update: Sat 01 Feb 2025 23:00:41 +0000
Manifest next update: Sun 02 Feb 2025 23:00:41 +0000
Files and hashes: 1: fSroDN5c12nI8UTmwmYRO_rt7D4.crl (hash: KjpcVGtz8JZAOWlCLIrjM9lgQh/U4IvIHLw45fkGHRU=)
2: sxNlViRMFBeyCKHK1V0sQojloaU.roa (hash: B7neqRuXw3EzuRHFQ3Xdq+BC5xmWvSgD18hq8QHGols=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:b1:75:2f:d6:96:ee:51:55:f7:d3:e4:dc:c0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
Validity
Not Before: Feb 1 23:00:41 2025 GMT
Not After : Feb 2 23:00:41 2025 GMT
Subject: CN=da1d9ed6b94ac27d6d511f518498d83caf51358a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:e1:bb:a2:57:ac:5b:c5:00:a5:7b:fa:46:
ef:1a:c1:f3:4f:c3:60:30:bf:be:84:da:f8:6a:fd:
28:d0:4d:99:63:48:8f:b9:81:60:2d:b4:5d:40:3f:
42:76:17:36:11:e4:54:e0:bd:f4:f7:85:07:f0:21:
fe:f4:39:00:22:8e:ac:e2:65:81:d6:11:f7:6f:e3:
7a:2b:f9:34:5d:87:eb:de:05:0b:98:9b:ec:cc:fa:
93:d7:e5:9b:92:34:99:76:04:71:c3:fa:32:f5:64:
89:49:b8:e6:4a:76:d6:8f:15:ee:7e:95:5b:de:96:
14:17:15:65:71:44:33:5f:80:94:b5:e3:78:60:d6:
fe:4e:9b:32:dd:71:9f:51:61:99:70:e5:7c:cc:a5:
1c:75:f1:af:6e:a0:87:9d:11:43:e5:9b:2a:c0:02:
d5:58:15:06:da:e2:26:99:46:1c:7c:5e:0e:1d:5a:
04:06:cc:65:93:79:9a:bc:27:21:b5:23:36:17:7d:
1f:ea:f1:73:86:81:23:40:f1:b9:2f:a0:7e:5b:c9:
07:8e:be:67:72:a3:bb:16:bf:b9:0e:c1:dc:45:ed:
88:f7:bc:00:ff:55:20:7e:29:f0:72:55:2d:ac:c9:
6c:2f:f1:c4:39:73:ef:d5:64:19:22:4a:48:2b:ba:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1D:9E:D6:B9:4A:C2:7D:6D:51:1F:51:84:98:D8:3C:AF:51:35:8A
X509v3 Authority Key Identifier:
keyid:7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:93:bc:1d:ac:cc:33:c7:bb:15:8d:6b:50:2e:b7:86:b5:57:
27:c6:5f:a5:33:21:49:22:a2:d6:9e:49:81:65:64:dc:db:fc:
6a:a8:d5:75:0b:85:ad:b1:da:26:cb:84:05:38:f6:d4:fb:c1:
ff:0a:85:35:a8:3d:d9:72:e8:e8:af:19:fe:2f:93:39:bc:00:
d6:11:93:49:2b:cf:b9:3f:52:d7:3c:c3:3c:34:44:bc:fe:3b:
93:75:38:99:7c:65:99:ff:3d:81:67:48:9d:bc:21:eb:23:8d:
f0:e7:a1:7d:16:5b:6e:10:81:e7:ce:17:b9:d1:84:a4:8c:09:
32:53:98:a4:d3:b2:29:3e:96:5a:17:d2:e2:10:9f:16:a5:d8:
71:d0:e7:0b:99:76:77:e2:d2:fb:aa:db:e2:3b:79:aa:e6:5c:
b9:1f:db:9c:3e:4b:94:e1:9a:40:04:ad:33:bb:55:95:40:02:
4e:46:72:00:26:c8:25:9c:1c:5a:34:3e:9b:27:16:71:de:6b:
d2:68:7e:1c:9c:e6:a0:33:80:15:6e:05:db:09:d4:64:a8:78:
aa:42:3c:e6:ca:1d:d2:b4:1a:69:17:23:fe:9a:2c:20:07:b4:
6b:dd:75:57:84:38:48:57:42:85:d1:c2:b0:f9:06:cb:4a:9d:
ed:5d:bc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:02 2025 by rpki-client