Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
File: RDSBQfxG3AGHCHy8hlVumkSe4ec.mft (raw, json)
Hash identifier: BXm4+2OavF42x5Hh4AWFuWQ8+QdyvjN5sKv8dP2UgjI=
Subject key identifier: 7B:EB:72:8D:97:97:F5:97:BB:86:4C:B4:DC:95:A9:30:EE:87:6F:14
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Certificate issuer: /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial: 0195124741988C18C6AAA2DC94DDA2835EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 05:00:14 +0000
Manifest this update: Mon 17 Feb 2025 05:00:14 +0000
Manifest next update: Tue 18 Feb 2025 05:00:14 +0000
Files and hashes: 1: HUIjR9WK2Lr5ogt7lVoiyA1Q06s.roa (hash: PMZpn3mSe7dzqUCZsgF/pY1r/L52E+g3ibBHFvHVhL0=)
2: RDSBQfxG3AGHCHy8hlVumkSe4ec.crl (hash: K5wl+8Tz4Z3TM1Xw5fvDOGDmmqBpv8B2149ZrvHJ9R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:41:98:8c:18:c6:aa:a2:dc:94:dd:a2:83:5e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Validity
Not Before: Feb 17 05:00:14 2025 GMT
Not After : Feb 18 05:00:14 2025 GMT
Subject: CN=7beb728d9797f597bb864cb4dc95a930ee876f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:ec:35:f2:3d:1f:03:2a:64:21:19:ac:bc:
ad:aa:05:fb:d4:cb:0e:14:ae:e7:02:49:79:6e:88:
81:d3:27:39:a8:e5:5d:73:5f:f6:c8:f1:cb:0b:41:
ad:1a:e4:d2:d2:c9:fd:c4:60:8f:e4:43:45:b6:1b:
6d:3e:c4:94:a0:65:58:2b:fa:75:a4:ff:1c:45:78:
cf:58:55:cc:d3:d5:a8:d2:45:57:26:50:56:e2:3e:
6e:c1:a5:a5:5a:a3:33:a5:12:58:d6:d8:bb:c2:36:
86:c0:e5:28:0f:30:49:9f:97:c4:be:13:13:00:4e:
07:ae:47:70:e0:a7:65:14:56:d0:fe:f7:1b:57:21:
bb:cc:aa:6b:14:7f:4d:e3:c4:60:fe:7d:5b:79:cf:
5d:5d:97:eb:05:6a:5e:0b:7d:88:5b:e3:74:ca:f3:
1a:23:06:0b:42:a4:19:5a:cb:ab:cd:dc:c5:0f:02:
81:71:27:dd:be:7a:d1:82:7a:f4:b2:1b:f3:c8:dd:
7e:6c:13:ff:5d:1d:ed:33:6a:45:57:44:b3:b7:ad:
58:1f:d9:14:f6:34:73:65:17:ce:03:8d:f0:1f:df:
f5:49:99:37:35:75:a3:bb:4a:24:78:90:cf:4b:03:
45:74:a9:d8:cb:87:a9:cb:2f:d5:5b:17:81:88:a9:
83:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EB:72:8D:97:97:F5:97:BB:86:4C:B4:DC:95:A9:30:EE:87:6F:14
X509v3 Authority Key Identifier:
keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:86:48:6d:03:07:d6:55:b2:ef:57:fd:32:6b:c3:d3:5d:e7:
ff:a3:ba:02:44:e6:2f:ef:10:9d:ea:74:78:97:f6:7d:d7:86:
1e:70:c2:59:6e:f7:86:05:ee:d5:70:09:fe:4a:f8:e5:10:eb:
49:cd:a3:77:05:d4:b3:30:e8:6d:c7:96:54:65:6c:11:c0:f8:
32:f8:90:9b:ae:10:69:4b:fa:0e:7c:5e:42:3a:a4:13:4a:ec:
ce:92:fd:02:a7:ee:86:c1:33:aa:c4:96:40:3b:62:12:4a:17:
63:d6:92:99:c4:93:21:f4:8e:0b:4d:5c:4d:68:23:a1:96:6c:
99:ae:47:c9:10:9d:ae:2c:fe:ed:66:6d:a6:17:11:b0:8d:13:
37:78:b6:7b:9e:b2:6d:82:83:e4:73:5c:01:62:2a:33:3f:5e:
c1:2e:45:53:ab:08:81:65:92:ed:78:73:8d:d7:24:fd:4e:bb:
1b:92:e7:bf:7a:fb:a4:17:40:6e:cd:90:30:ac:5c:a4:02:ae:
8a:ba:f5:74:70:49:fe:07:16:cb:8e:cc:bd:66:fe:b2:b7:66:
04:9f:c5:db:1c:af:5a:78:2b:bb:c3:c3:cc:35:a4:35:f5:71:
72:6f:ba:d0:41:ba:c5:0b:0e:20:3e:fe:b6:eb:50:2a:f8:64:
73:20:70:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:29 2025 by rpki-client