Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: urg2BDUfA+EHUcVMrE/DH2SS1ttAWGSLkvUcXD8oYRU=
Subject key identifier: FD:24:FC:CC:86:F9:64:3B:72:65:F0:0C:40:AB:39:03:28:BF:93:5D
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 019510FE0EE9903A8032393F7EEFE852C157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 11A5
Signing time: Sun 16 Feb 2025 23:00:40 +0000
Manifest this update: Sun 16 Feb 2025 23:00:40 +0000
Manifest next update: Mon 17 Feb 2025 23:00:40 +0000
Files and hashes: 1: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: X/11O1MlezGGhmMT2e4qwYxj1VuqbvIwenmPP2JFi58=)
2: kZhmU11AcLMU9j0H5R4zLY4tMkU.roa (hash: 4zjf1YfmBA/3a2ksRPti6rOa+1AdjV5zlhfDUSPHUS4=)
3: macgBtbCg5Mxhslrz0OHJiQKlew.roa (hash: GBS8E51Gp7YKQrT0Z2MAz5xnX4MGpebSlxO7yoAgVFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:0e:e9:90:3a:80:32:39:3f:7e:ef:e8:52:c1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Feb 16 23:00:40 2025 GMT
Not After : Feb 17 23:00:40 2025 GMT
Subject: CN=fd24fccc86f9643b7265f00c40ab390328bf935d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:46:7c:71:8f:25:c9:c4:06:af:7e:f3:f4:
da:c3:54:76:b1:b9:fe:38:e2:27:66:21:93:e9:2b:
99:cd:42:6d:8d:e8:9c:5a:74:e3:57:f9:61:e8:8b:
e7:66:85:a4:21:b3:6a:4b:9a:70:27:66:82:4e:bb:
ff:80:2b:63:54:75:a4:3e:c3:ec:ce:76:7b:07:d8:
24:2e:7d:e2:6d:47:1b:e6:a0:2b:3c:b9:ec:f1:c2:
fe:a8:68:30:6b:5b:e3:85:fa:65:73:f7:42:09:26:
46:30:f2:bd:31:d1:10:c1:1c:c4:c1:8f:9a:c8:cc:
8c:ef:20:5d:f2:85:21:0c:b7:9e:07:bd:df:91:7e:
b4:8c:a1:9b:76:a9:af:bc:95:12:fd:b9:b3:a6:e4:
7a:f6:d5:e4:e9:b4:da:bf:d4:80:00:44:d2:23:db:
00:b7:4f:cd:4e:13:0b:fa:0e:5e:77:23:df:f4:57:
8c:87:1a:a1:27:dd:ee:69:63:77:86:7c:e7:23:ca:
fe:8c:94:06:08:8f:ba:19:6d:cd:90:11:7f:b9:33:
d5:e3:10:a5:42:17:d4:18:65:63:37:fc:38:e9:29:
1f:3c:89:e2:a8:6e:41:4d:10:23:c6:57:1d:11:af:
7c:58:1a:a3:fe:4e:c2:60:54:e1:80:ec:21:98:16:
96:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:24:FC:CC:86:F9:64:3B:72:65:F0:0C:40:AB:39:03:28:BF:93:5D
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bd:d4:b1:fa:b7:3e:6d:f6:0e:96:7e:79:ca:d7:d0:62:f8:
00:23:89:30:81:55:8d:ad:d3:24:fb:d6:cd:b3:17:a3:a8:fe:
1d:b9:45:4a:53:a2:bf:ba:fd:81:12:77:f4:0b:39:74:59:20:
06:f2:2f:20:25:95:cb:97:97:22:d4:b0:cc:0e:6d:9b:1d:a1:
96:15:27:72:88:05:ef:7c:77:38:53:96:33:08:3c:a1:67:3f:
52:61:7a:f7:54:c8:68:56:38:2e:ac:a2:2f:48:77:08:50:4d:
4e:7f:ff:3b:a3:fd:92:12:c6:36:0e:92:69:06:f4:c5:cb:95:
3b:e1:30:5a:1c:ee:f4:8a:3b:3b:82:c0:f5:2f:ea:89:2a:c0:
3b:f9:f7:a5:53:6e:fe:ce:88:a9:bb:f6:cc:78:d2:f6:05:60:
89:08:c3:ea:f8:09:63:ff:f6:b5:b7:aa:15:00:14:28:0c:ce:
b7:71:7c:55:62:c0:4a:f9:b8:97:ce:67:99:a9:ef:d6:d6:fa:
6f:ad:49:6f:d2:08:84:e6:d5:82:66:5c:25:7c:af:95:c6:a4:
9f:72:ba:86:e9:35:57:63:66:83:85:b3:94:ea:d6:53:a7:da:
01:f1:94:dd:eb:ef:cd:08:11:6f:14:dd:54:9a:98:37:b7:eb:
aa:5f:24:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:04 2025 by rpki-client