Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
File: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft (raw, json)
Hash identifier: sLOiVi6aDUQN2nyBQvrg4qKVTeqeeoYf2Rmje5wGoeQ=
Subject key identifier: 2C:31:BE:1C:98:14:4F:8B:13:FA:E3:5E:30:7A:D5:A7:81:5E:01:D0
Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Certificate serial: 019512104FD9983CEFB988B7A06899C23BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
Manifest number: 067C
Signing time: Mon 17 Feb 2025 04:00:13 +0000
Manifest this update: Mon 17 Feb 2025 04:00:13 +0000
Manifest next update: Tue 18 Feb 2025 04:00:13 +0000
Files and hashes: 1: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl (hash: g20Di4w1IVuJXJ9K0JHvG39wXEEfu6I/WFa4oOqQvg0=)
2: YRQ4Vg3A1i1QaO-e977IcW6KB9E.roa (hash: rc17/JwW2r6jYEgRn/1E0O8jtu0CDbAtQ0C5kFjlEwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:4f:d9:98:3c:ef:b9:88:b7:a0:68:99:c2:3b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Validity
Not Before: Feb 17 04:00:13 2025 GMT
Not After : Feb 18 04:00:13 2025 GMT
Subject: CN=2c31be1c98144f8b13fae35e307ad5a7815e01d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:eb:dd:ca:b9:a5:80:f8:fd:b1:83:18:5d:59:
90:81:82:d9:b8:57:b4:40:48:05:b5:1e:83:ad:22:
27:58:b9:70:5c:b8:87:19:d9:42:aa:ce:b2:1a:11:
43:83:93:b8:9e:4a:7b:91:b5:6f:35:9c:5f:39:76:
c5:fe:fc:ac:9a:76:b0:d6:31:35:82:7e:af:9d:75:
f2:41:f9:2f:5c:cf:ca:7a:aa:81:30:2e:2a:1c:47:
0d:22:fb:a9:cb:5a:7c:bb:be:f1:0f:8d:7e:0b:91:
12:59:d2:40:04:66:7e:80:f3:0d:90:a5:15:a3:e8:
e2:bc:81:4e:cb:13:92:d2:ea:40:85:df:d0:10:59:
e0:a1:ca:de:38:21:78:69:99:b0:9e:14:83:2d:46:
d5:43:31:fa:a0:5c:72:a2:fe:8f:01:9c:6d:10:d4:
a3:f5:7e:ad:1e:17:de:8c:1a:a7:82:01:fb:00:6c:
b0:8d:27:a5:64:a2:95:3c:3c:98:ca:21:f7:33:c0:
d0:90:c9:81:21:8f:a3:a1:e1:ff:21:5e:3e:aa:ee:
24:0c:d9:ec:9b:a1:bd:fe:a9:1a:5b:9d:a0:f6:a7:
c1:34:6d:2f:7b:ac:6b:4f:2a:6f:3b:6f:4c:a0:ba:
57:85:08:46:84:8f:f0:cc:e1:9c:7a:16:a1:31:e4:
9d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:31:BE:1C:98:14:4F:8B:13:FA:E3:5E:30:7A:D5:A7:81:5E:01:D0
X509v3 Authority Key Identifier:
keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:00:67:4b:a7:70:d7:a4:8c:f3:f7:c9:f9:1a:0e:f2:11:07:
1f:e5:df:b7:14:0b:b5:c2:ca:5f:05:85:49:01:b2:92:f1:53:
46:a6:04:58:b2:48:82:0c:7e:09:d7:a0:ba:2d:f4:2e:6a:cd:
76:8a:dc:f3:e3:a0:eb:c3:3f:82:01:dc:a2:76:35:4d:e9:ce:
78:6e:0b:94:54:0d:2a:75:82:c7:c3:83:f8:aa:8e:ce:ad:8f:
f8:f7:b9:d6:84:fb:72:4c:10:e0:8c:2d:36:b3:a2:cd:86:67:
61:44:e8:93:80:90:ae:50:d2:d8:ba:ea:60:11:a5:de:1b:c9:
ca:f7:ae:18:4a:e6:45:66:47:e7:76:16:62:d4:0f:6a:24:d2:
69:87:b4:06:da:74:6e:29:86:03:b4:e7:b9:0c:78:6b:bb:e3:
9a:e7:e4:e2:71:5f:1a:61:49:fc:1b:61:26:d0:01:95:08:ab:
5f:fd:b8:91:65:02:ad:c8:b3:6f:6b:22:09:50:00:41:7d:f3:
90:24:e4:66:e4:84:2e:3e:d3:03:62:d3:7f:d0:a6:e7:8b:81:
3b:38:0a:73:ba:b6:5e:cf:a1:a3:41:f1:f7:4e:9e:57:dd:fc:
b6:8d:e3:2b:6b:26:8a:70:bd:96:5b:09:c5:57:e1:5d:61:08:
40:64:6b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:01 2025 by rpki-client