Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
File: rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json)
Hash identifier: WYAUtmOQC01a+fX8iPb7Q7aslO23wbcnqP/dh/fFhso=
Subject key identifier: D8:96:7C:88:72:02:7E:50:C5:F0:AD:25:0F:E3:B0:E6:7F:C8:6A:0D
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial: 01951210A1E5E8AF4C2E6A2E714D530121ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 04:00:34 +0000
Manifest this update: Mon 17 Feb 2025 04:00:34 +0000
Manifest next update: Tue 18 Feb 2025 04:00:34 +0000
Files and hashes: 1: IIHgOk-xRJwcMprOK7ZIwgTTTpI.roa (hash: vBVT2xA4TcumNVJjeZx7iYNAEhMSXyDbZI0yMb5mVq8=)
2: P05t-254IWXoRfvJ8I88nflXaUg.roa (hash: 2/CzHNUF/1AeD5pdSyLVqCJoUWPrU+YxMAzaIv8CwTI=)
3: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: dem50hwf2ZtMTnkrye9YbwI9yw8/aPdeLeYm4V+c+Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:a1:e5:e8:af:4c:2e:6a:2e:71:4d:53:01:21:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Validity
Not Before: Feb 17 04:00:34 2025 GMT
Not After : Feb 18 04:00:34 2025 GMT
Subject: CN=d8967c8872027e50c5f0ad250fe3b0e67fc86a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:49:05:d2:35:8d:1c:8d:ac:9b:45:0d:e0:
78:22:cb:a3:c7:e6:2a:55:0a:f2:fb:71:93:a9:af:
28:c6:7b:33:d1:f8:9c:ef:30:46:a7:e1:11:7d:56:
4a:ac:6a:dd:81:f1:9a:81:cd:99:e3:a4:1a:e9:52:
35:ce:02:b1:f1:e1:e7:ff:a8:b9:53:69:4b:b4:cc:
3b:ad:d9:e5:51:e4:a2:a6:4c:2b:47:98:0d:e1:d1:
2a:e5:28:8b:93:78:61:07:40:81:8c:2e:99:2e:e9:
93:68:00:32:cf:89:b8:df:c4:50:75:22:33:6a:70:
e1:bd:92:88:bc:fe:62:80:a5:44:7d:71:95:5d:38:
02:bb:5d:cb:ad:c0:48:1e:c8:f3:10:f6:fe:b1:93:
92:cf:84:a9:8d:f4:f6:e1:5d:85:d0:bf:c5:8f:0a:
36:90:e6:55:44:ba:bd:a7:17:7d:3c:04:59:74:4d:
e3:d7:25:52:27:d1:a9:0f:35:e1:67:77:9d:4b:5d:
cb:f5:cc:92:de:a3:fb:fb:54:95:0f:d3:7a:94:80:
cc:31:27:f1:84:de:60:c5:c7:7b:bd:c5:15:4c:27:
bb:3c:bd:af:53:ca:03:04:11:d3:c3:aa:91:97:92:
56:ee:28:ad:26:45:7b:7e:2e:fd:bb:50:8d:c5:1c:
50:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:96:7C:88:72:02:7E:50:C5:F0:AD:25:0F:E3:B0:E6:7F:C8:6A:0D
X509v3 Authority Key Identifier:
keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a5:4e:2f:a8:68:cd:46:1e:40:9c:9b:cc:fd:ee:92:bd:f9:
92:80:10:9b:84:86:e9:0f:ce:53:b5:ef:e7:02:10:bc:e1:5f:
d4:fc:6e:9c:35:e4:4c:a4:3b:37:78:46:ef:82:12:5a:c2:e8:
f4:fb:6a:bd:34:46:7d:05:56:dd:49:dc:18:b6:dd:1e:3b:5d:
15:96:b3:75:3a:99:e8:b5:a8:2e:bc:ed:17:92:5d:cf:98:20:
db:46:3e:90:fe:3e:ba:42:3e:27:f4:5e:3a:8b:44:6e:00:2f:
bb:0c:ff:2a:d6:93:b8:36:e1:6f:8b:06:05:7a:95:ff:13:60:
fd:c6:29:30:33:06:cd:50:db:96:d7:d5:0b:15:31:16:57:66:
8f:68:42:25:28:e0:78:c6:e6:74:18:c7:16:c5:2b:87:ce:1a:
c6:5e:28:8d:ef:5e:a4:46:e4:53:3d:76:b4:a7:5a:fd:9c:82:
0b:e6:5e:64:ba:97:6e:f9:50:30:e6:43:d5:81:d3:28:ac:4b:
2b:5f:43:6a:36:29:63:d5:28:7b:71:28:da:a1:40:76:78:cc:
4a:1b:bf:7c:1e:bd:01:b2:fa:1a:c9:92:aa:96:e2:da:87:6a:
ae:4c:bc:b2:ba:2d:7e:fc:8f:bc:39:6f:a2:99:a7:4a:0a:63:
1c:a5:91:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:40 2025 by rpki-client