Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
File: ImTYqhh4-dwUJNL9reQDnhINWxE.mft (raw, json)
Hash identifier: EbVi1JhoC7/fK+cMy/hsmbsMK4FXjx00JKhWMoK2S1c=
Subject key identifier: 17:8A:42:34:F1:6F:CD:B4:76:73:2A:7A:AC:51:76:26:5D:21:5C:C3
Authority key identifier: 22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
Certificate issuer: /CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Certificate serial: 0194C49A415397261B3671D729E1C00A2EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
Manifest number: 0B
Signing time: Sun 02 Feb 2025 03:00:31 +0000
Manifest this update: Sun 02 Feb 2025 03:00:31 +0000
Manifest next update: Mon 03 Feb 2025 03:00:31 +0000
Files and hashes: 1: FqDrfbDtI4Hs58fMgjUv81Cu_7g.roa (hash: EJb3Kv4NZ5uykz2bapaHUVNVx3Yhwe8+JKhWBXNnXgc=)
2: ImTYqhh4-dwUJNL9reQDnhINWxE.crl (hash: rnnf3qKios8WxM1PFZfYgnuDFXpshsoqzaNmc6edemY=)
3: ik9pAs-oXBS0l0utPLQdJhXZ5X0.roa (hash: LmKUQUveU3bNm/doGhpBXkqduAWf1pf1v3+L9U63Su8=)
4: uc150UpyVmM0lf0Kf7nSAGa2PLU.roa (hash: z6Z1141CZgjCa4I7tNTWjh0/Dh9WixbtG/HNloenv6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:41:53:97:26:1b:36:71:d7:29:e1:c0:0a:2e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Validity
Not Before: Feb 2 03:00:31 2025 GMT
Not After : Feb 3 03:00:31 2025 GMT
Subject: CN=178a4234f16fcdb476732a7aac5176265d215cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:0e:ad:a5:fb:69:6f:29:09:2f:1c:0a:0a:
b3:d4:a3:03:c3:48:87:bf:3d:f6:42:4f:b3:8d:73:
5d:59:8e:a8:04:fd:df:06:7b:32:57:12:19:f0:83:
23:38:cd:39:ae:f4:1f:c4:3f:0c:17:52:68:19:26:
8a:e5:c0:a2:11:ec:ef:00:22:6f:f3:4e:1a:c1:c2:
0f:a0:58:3a:46:c0:96:1e:ff:8e:f3:d8:e0:dc:ef:
20:3b:c4:4d:a8:83:a0:9d:8f:7c:27:a7:e0:02:c3:
26:13:49:7a:40:00:5d:6f:e4:ef:0a:3c:e8:59:f0:
15:04:8c:1e:43:3e:21:3c:83:10:23:e9:f7:ad:73:
4e:f8:03:45:fb:17:8d:b9:b2:45:30:e3:2b:d3:f1:
30:95:ab:9d:3d:b9:b7:52:20:57:48:23:7b:00:54:
fd:1c:41:b9:b4:3a:17:52:a8:e3:10:83:de:e0:44:
0c:ef:4b:55:45:89:c1:f9:a2:db:0f:f9:ec:fe:5c:
a9:d1:3d:27:68:16:bb:ef:33:13:e1:30:bb:61:a3:
8e:ff:a2:6e:2e:da:df:4f:ef:c8:08:23:6c:fe:cc:
45:c6:00:4f:84:b0:8d:db:1c:52:cd:fc:15:2b:ca:
b7:53:94:a2:f1:c3:d7:48:c4:c3:fd:c3:92:1e:49:
06:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8A:42:34:F1:6F:CD:B4:76:73:2A:7A:AC:51:76:26:5D:21:5C:C3
X509v3 Authority Key Identifier:
keyid:22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2b:c0:11:9a:6e:e7:fb:43:9f:3e:88:47:91:d0:d7:d3:9b:
c1:e5:7d:c9:9c:d9:37:49:cb:c6:8d:17:44:79:60:94:2b:c6:
99:a7:70:c9:c6:6f:fb:b1:76:37:08:3f:7b:de:d7:b4:d4:f6:
90:c1:50:be:30:3e:de:74:7f:b1:06:bf:d3:0b:aa:d3:a1:10:
ef:14:16:99:16:98:dc:b3:1f:ce:54:2f:9d:dc:28:46:de:33:
c1:58:0c:85:9e:20:26:be:ed:87:78:ef:6c:19:be:b7:8a:f7:
6b:ad:72:46:08:5e:6b:d2:7e:ec:64:db:00:b6:8e:1f:7e:2e:
da:58:cb:66:fc:db:45:a6:9d:77:f4:5e:09:35:5a:26:1e:4e:
27:68:ec:b7:2c:8c:14:1f:8b:9a:a2:96:48:54:e7:95:6e:c3:
e7:77:02:3d:be:75:cd:50:7d:ff:88:e0:19:db:1c:9e:3c:33:
b3:5a:d9:bb:ca:ea:2a:8a:89:70:e8:6a:47:7e:f0:6f:83:26:
a7:60:6b:f5:ab:a2:e2:a9:10:fa:13:83:61:46:e0:05:4a:29:
8a:fd:4c:dd:7c:16:2e:69:12:54:96:e1:0c:70:f0:27:a1:e2:
88:62:d2:a0:2c:9e:65:33:20:e4:d1:34:36:30:08:cf:bd:9f:
e5:32:95:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:59 2025 by rpki-client