Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
File: sQeA3za1uUL2YOQDov5ginXk5X0.mft (raw, json)
Hash identifier: hig6SzGYFGyUQ7RFPCVvITHeCcnUPrusT2pi9dRtTIg=
Subject key identifier: 99:48:A5:40:EF:75:C9:6C:1E:4F:7C:ED:5C:0B:0E:E6:0B:CD:58:6D
Authority key identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
Certificate issuer: /CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Certificate serial: 0194C4632D8791045F7947A8D5EB3FF981C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
Manifest number: 13C0
Signing time: Sun 02 Feb 2025 02:00:21 +0000
Manifest this update: Sun 02 Feb 2025 02:00:21 +0000
Manifest next update: Mon 03 Feb 2025 02:00:21 +0000
Files and hashes: 1: dc2u-8bkbufd4cw_d9F3xDaopuc.roa (hash: Umyl5IxYyTMcYEGSrVHWEMRSVhNtzrLiUEYgvIObXig=)
2: sQeA3za1uUL2YOQDov5ginXk5X0.crl (hash: XHckMcb+yGgYLfRfaCmr3aF8VgUu8jLuX899VXbcGcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:2d:87:91:04:5f:79:47:a8:d5:eb:3f:f9:81:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Validity
Not Before: Feb 2 02:00:21 2025 GMT
Not After : Feb 3 02:00:21 2025 GMT
Subject: CN=9948a540ef75c96c1e4f7ced5c0b0ee60bcd586d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:24:73:1f:59:18:65:a8:2b:87:30:b5:80:
ed:09:70:56:be:a6:5f:30:e7:c7:8f:22:62:bc:5d:
2b:bc:f7:b1:b3:d8:7b:53:53:1c:f5:4d:f1:28:6f:
01:c1:02:de:5f:38:02:bb:50:57:a1:d6:dd:94:79:
fe:25:0b:de:85:5c:20:3b:4b:45:e8:70:15:aa:e7:
93:67:2f:f0:cf:5a:d2:96:8e:c3:c5:18:2a:dc:8d:
d1:59:a4:8d:03:66:f2:37:31:7e:f2:94:f7:1f:dd:
6c:ee:11:0b:5e:3d:ca:4a:6c:a1:7e:7c:8d:b4:d4:
0f:13:1f:26:b3:5f:b4:34:68:0a:2d:4a:47:41:18:
63:1f:0f:75:d6:30:86:99:71:a1:05:e2:f3:7b:57:
02:b3:66:d2:e3:df:67:27:96:db:d3:3c:78:66:f7:
aa:8a:80:6f:b5:e2:0e:ab:5e:3d:58:fb:ea:e6:4a:
c9:0b:75:b1:a0:6c:50:18:60:30:e6:21:75:36:74:
e0:96:1c:25:f6:c7:a9:14:48:3c:6a:58:9d:13:e7:
94:63:8b:61:b2:90:46:c4:cd:84:69:14:53:96:ec:
25:e7:eb:40:de:fe:75:18:b6:c3:ef:05:8a:1a:ae:
ad:95:f9:94:15:27:e3:a8:4d:dc:7b:8f:99:cb:64:
5e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:48:A5:40:EF:75:C9:6C:1E:4F:7C:ED:5C:0B:0E:E6:0B:CD:58:6D
X509v3 Authority Key Identifier:
keyid:B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1c:42:af:c5:0a:6a:cd:6f:1a:d9:5b:c9:da:d3:16:d4:b6:
67:49:14:c4:95:30:80:cd:b9:43:ed:62:55:0b:35:2f:32:f9:
8f:bd:0f:c8:e6:6d:0a:b4:1b:82:ca:fe:50:14:06:97:19:37:
6d:2f:25:7d:d1:3c:cd:7b:dd:79:7c:fe:00:8a:09:b5:6a:2c:
d5:96:13:57:83:7b:01:b4:59:ea:01:2e:ec:74:d8:62:23:63:
c0:87:66:1e:16:c6:17:47:7b:7b:a4:4e:de:a9:ec:6c:86:04:
fe:31:58:85:7a:ac:e9:0c:27:c6:87:f2:72:08:3f:1e:7b:49:
ac:b1:f3:03:72:04:61:c6:4d:44:de:a4:c8:f4:ae:20:43:49:
fa:2a:51:c1:26:64:33:bd:c4:4d:93:0d:ac:96:5a:70:71:ce:
06:31:59:43:e5:7a:1d:af:06:b0:04:d8:98:58:b5:0a:3d:8f:
5b:32:0d:6a:23:2a:89:a8:60:23:28:fe:09:ab:4d:28:f4:03:
00:ec:b2:99:0d:c3:ad:c4:9f:27:64:17:9d:29:39:89:21:a6:
f7:d4:6b:cc:26:1d:1d:b4:67:77:32:a0:db:df:dd:75:c6:e0:
d8:3e:6d:40:ba:2e:d5:e4:c0:26:cd:88:f4:20:f5:88:cf:26:
5f:56:db:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:16 2025 by rpki-client