Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier: DXn7jDLamQu2Z1Z/QZ6SgmvP40bJzsX3mBQ9k6ikJoc=
Subject key identifier: 2C:F9:F8:FD:3A:7A:6C:8C:11:8B:81:06:0D:21:22:7E:8C:00:7F:E9
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 0195127E39C2D4A4EF68F0D2012E97A622E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 06:00:16 +0000
Manifest this update: Mon 17 Feb 2025 06:00:16 +0000
Manifest next update: Tue 18 Feb 2025 06:00:16 +0000
Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: nai7yfzG9kia8ixkOUoKc5b2vqYzU5ErymjOFvS+OVI=)
2: H3v3Ir1uutigtDSCgvKQTveRQl0.roa (hash: 4A8WQpggwPpKrs7preaxNPkzpvVHS+MZyP8Wyyn6QVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:39:c2:d4:a4:ef:68:f0:d2:01:2e:97:a6:22:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Feb 17 06:00:16 2025 GMT
Not After : Feb 18 06:00:16 2025 GMT
Subject: CN=2cf9f8fd3a7a6c8c118b81060d21227e8c007fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:42:74:ec:99:39:47:e7:46:16:24:db:02:93:
41:2e:fc:4d:4b:17:21:2e:f8:df:47:97:ad:62:f4:
0c:f7:e6:48:9f:1a:f1:db:7d:d2:ec:62:b7:4f:67:
4a:c1:f3:9d:b4:c4:1f:d0:57:00:90:7e:19:36:3f:
23:1c:7b:4a:0c:57:10:54:c9:15:dc:f0:57:a5:c8:
cc:a1:02:1f:5f:90:17:59:cc:b9:da:e1:35:f8:d7:
04:ba:0a:4d:8b:b9:2d:68:28:8b:0e:a0:48:9e:6c:
06:17:af:08:0a:ac:81:95:99:b7:76:cd:f4:56:36:
17:af:a3:f5:0d:90:84:c8:ab:66:5b:8c:9f:d5:f2:
bf:dd:c0:c5:88:ec:00:83:7a:61:58:5e:0a:74:54:
28:5a:e2:d7:ce:4f:7a:d7:7e:aa:0d:c4:28:a2:18:
2b:86:18:d0:8a:fa:55:88:91:51:d4:a6:f3:a1:55:
11:68:2a:a3:8b:9d:9f:4f:4e:5f:36:46:c0:12:b2:
0d:c4:95:89:31:1f:28:bb:b2:cc:61:80:fd:5c:60:
57:1c:21:2b:12:d4:3e:c9:90:ee:11:b7:e1:2f:75:
c0:d7:61:72:47:d8:8c:ff:96:6c:1b:81:cb:03:91:
81:a7:7c:2b:cd:4e:7d:8e:49:8a:5d:89:d8:e7:53:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F9:F8:FD:3A:7A:6C:8C:11:8B:81:06:0D:21:22:7E:8C:00:7F:E9
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:52:d2:02:08:a1:fb:24:44:94:14:58:59:b3:c9:66:ae:13:
bf:00:f1:8c:72:32:95:a0:bc:37:60:9d:ec:f4:50:34:bf:ed:
ef:81:a8:fa:77:9f:a1:b6:80:a0:1e:68:92:6a:e6:ca:d5:31:
62:9e:ee:10:a0:d8:e7:6b:84:16:23:6f:60:64:f5:41:ff:ca:
95:d8:59:df:a8:7d:4d:65:f8:61:c7:03:a0:4c:98:1f:4d:ac:
4f:dc:ef:c6:a2:84:07:df:89:e4:d8:0e:7f:f4:60:93:ee:23:
d3:b2:98:3e:57:b9:7c:b2:4d:96:e2:04:d2:b9:db:cd:ff:ee:
29:d6:d3:c9:18:52:87:69:57:1f:64:15:1e:b7:46:fe:a1:83:
ab:c5:1a:e0:b8:56:ff:ea:3e:9e:7d:a6:97:38:f6:a0:18:35:
37:84:01:b6:54:63:e0:71:02:d9:f1:43:13:88:9a:2d:69:5f:
b8:65:96:ac:2e:d5:fa:f8:27:b2:07:70:98:d0:4e:20:02:aa:
d9:ac:9d:01:b5:ab:7e:62:57:65:e3:13:89:46:89:98:84:84:
e1:06:37:52:ae:d7:46:db:a6:72:fd:30:9a:dd:55:ea:40:61:
8a:0d:45:e4:94:7f:59:8b:96:71:45:02:47:82:69:cd:0d:d4:
f9:d0:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:02 2025 by rpki-client