Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json)
Hash identifier: ZftPb8vOqGKmK3ae140eab4SJh3xvUZVs7CWTX3U/u0=
Subject key identifier: 93:98:4A:36:23:93:93:1B:C5:C6:59:0B:EB:17:28:B5:35:42:24:28
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 0194C4D1536736FD4DFCB80531040F4A51A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
Manifest number: AC
Signing time: Sun 02 Feb 2025 04:00:40 +0000
Manifest this update: Sun 02 Feb 2025 04:00:40 +0000
Manifest next update: Mon 03 Feb 2025 04:00:40 +0000
Files and hashes: 1: VmXkaG5WzI9Vz_7xcXFAL06DAoc.roa (hash: uKPs/SrJH/MnTw4fYsxVa8cqGkMc8R9CKa5VOSutc0U=)
2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: pDIAyLh6aPNJbxdcwbAQfe5586CC2rr2PzCn2SocrxM=)
3: t42bTlVzekO4_zka2dM08NYoS0o.roa (hash: k4lNjjF23Ae3Sbhg3LYDkwgC4ol0mKxgVNJCg94oeiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:53:67:36:fd:4d:fc:b8:05:31:04:0f:4a:51:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Feb 2 04:00:40 2025 GMT
Not After : Feb 3 04:00:40 2025 GMT
Subject: CN=93984a362393931bc5c6590beb1728b535422428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2d:27:e0:df:42:dc:0b:bd:70:e2:da:e8:d5:
1e:24:b6:a3:a6:04:e7:14:b2:16:d7:89:cf:0c:0b:
ec:fb:3b:13:96:2f:6b:b5:ef:b9:2f:0a:31:ec:98:
09:a5:c1:9d:9b:09:10:9d:62:3f:7d:a7:45:cd:b4:
44:14:b1:c8:2f:34:5f:11:ad:ab:bb:71:d7:7f:e5:
0b:d3:11:0e:b3:94:8a:21:01:58:65:46:57:d1:8b:
74:be:e5:ec:f3:dd:dd:b6:ae:e4:12:dc:8a:c3:c7:
b3:85:05:de:41:1a:85:2f:b2:0a:ac:84:e8:67:87:
b9:b8:46:ae:e4:b8:dd:64:a7:5c:c1:81:6f:57:f3:
90:e5:db:13:1e:48:34:55:e1:74:0c:9b:8c:7e:88:
a5:0b:fe:e0:bf:df:22:c6:3a:28:fd:c3:7e:25:5f:
31:17:47:d4:c3:54:0c:98:25:cc:79:71:c4:93:15:
79:2c:9d:4f:f6:a7:52:00:16:13:38:81:54:62:48:
5d:de:44:7c:15:31:11:1c:d3:1a:62:55:3e:b8:ae:
21:df:26:7d:25:a6:cf:33:87:04:b4:df:2a:2f:d1:
8a:f6:9d:b7:b9:f5:db:03:48:50:d9:81:1a:07:bd:
9b:a3:d0:16:1f:0a:c5:0a:10:05:91:11:45:43:9b:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:98:4A:36:23:93:93:1B:C5:C6:59:0B:EB:17:28:B5:35:42:24:28
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:59:38:6b:a7:44:03:00:0e:77:47:7f:f9:ab:4b:a7:10:0e:
ec:5f:ed:1c:e4:86:99:eb:6a:4e:aa:0a:01:9e:86:33:c8:cf:
91:91:ba:6f:f7:17:66:82:3e:30:51:6a:fc:00:13:e8:0d:89:
fa:92:9a:85:47:3c:21:36:54:19:ed:9a:22:53:74:69:40:d7:
c2:09:c1:53:8d:80:d0:18:5d:56:20:31:d8:6f:7b:45:bd:3f:
53:41:c7:a9:91:d2:fd:50:bc:a3:80:6f:33:e2:03:9b:d9:4b:
e5:b4:f4:5d:92:29:a1:56:70:2c:ab:72:c3:8b:a4:ec:b4:09:
00:8e:d0:9f:dd:e4:0f:5b:e0:d5:1d:36:be:2c:21:97:bc:78:
aa:f1:aa:42:c8:e3:0f:78:4f:4a:d4:2f:c2:cc:f8:8f:c6:b9:
64:e5:44:02:f5:f8:1d:ef:8f:e7:cf:1c:ff:27:36:9f:73:d1:
17:a5:9b:79:6f:09:1d:48:f6:b8:54:3b:79:91:f5:d5:6b:fd:
cf:03:e7:1b:10:00:27:22:6f:61:03:55:c1:5b:90:04:29:c6:
f9:af:18:11:c8:e5:29:7c:1f:44:da:2b:96:1f:e3:6a:a5:06:
a2:b5:65:a3:4f:5e:dd:6b:64:9a:b9:da:e1:2d:d5:5a:0a:c6:
76:03:af:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:06:35 2025 by rpki-client