Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier: pH9RjQy8R0NCNmATf5Sl5grIt6/NEcTnW+02PQnm5Mk=
Subject key identifier: 51:7F:74:3C:7C:7F:C5:66:ED:1E:21:03:16:E6:AB:F9:13:BB:EB:9E
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 0195116C08417E4FA598E419E1D7EA283332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number: 01CC
Signing time: Mon 17 Feb 2025 01:00:47 +0000
Manifest this update: Mon 17 Feb 2025 01:00:47 +0000
Manifest next update: Tue 18 Feb 2025 01:00:47 +0000
Files and hashes: 1: 5_sbpD9bl2e-9ZUzwa0dx1fekbE.roa (hash: zgbevUmIAJrzV5Ei+G6fiiOaUat2c7OgWp0BEvn+Gtk=)
2: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: x/CGtQRD0GqVE0nO0ar3rCbtmi5rWoCL0Wx2A47kA6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:08:41:7e:4f:a5:98:e4:19:e1:d7:ea:28:33:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: Feb 17 01:00:47 2025 GMT
Not After : Feb 18 01:00:47 2025 GMT
Subject: CN=517f743c7c7fc566ed1e210316e6abf913bbeb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:01:68:2f:2d:42:db:eb:8c:16:98:7b:6c:
16:57:3c:ca:e2:5b:8d:1b:1c:ed:9f:15:d9:10:09:
96:68:5f:6a:01:18:6e:13:2e:65:c8:5c:50:29:88:
bd:b7:25:6d:f1:4b:bb:df:03:9b:8d:f0:89:8f:cc:
00:47:eb:97:0f:f5:eb:3a:79:84:2d:8f:c2:c6:10:
d8:59:0a:2f:f0:73:01:96:ef:50:48:37:5e:f2:1b:
2d:dd:fe:fd:fd:3e:55:43:05:d3:7c:e5:2b:e9:4a:
c2:cb:eb:22:0b:6d:22:f8:ac:7f:a8:5a:03:9f:46:
cc:5d:3e:07:c4:05:d3:46:c3:7a:3b:dd:9f:09:64:
aa:e7:8a:b9:07:82:b1:1d:5a:6e:7c:97:3f:be:d7:
41:f8:24:a4:51:11:6b:2e:51:83:c7:14:3a:97:b1:
d8:ff:12:30:9a:49:d5:4b:1a:dc:99:08:94:dc:fe:
c4:47:12:2c:dd:bb:7a:89:27:d0:71:20:bd:41:30:
4e:c4:8b:1e:80:48:d8:07:db:b7:f1:29:86:2c:7f:
25:7d:c3:3c:43:b1:1e:b0:aa:96:bd:52:d1:81:1f:
ee:1c:f7:25:1e:81:5e:3b:c2:9f:ec:0d:79:6b:a8:
b6:e2:04:69:5c:6e:4f:1f:cf:73:30:82:4c:e4:06:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7F:74:3C:7C:7F:C5:66:ED:1E:21:03:16:E6:AB:F9:13:BB:EB:9E
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ce:f6:9d:c1:6d:5b:bd:f5:23:f5:f9:d3:cf:cf:be:6d:4d:
40:ae:de:f1:7f:43:7f:e3:5b:6d:ae:aa:e0:74:96:4c:71:48:
ba:4d:ab:31:6e:83:25:d1:fd:7d:5f:a0:92:ef:9d:ae:99:27:
a5:86:da:45:99:aa:7f:8b:a5:c2:18:7f:36:82:5d:45:b2:44:
02:a1:35:3a:14:4a:df:41:b0:f3:8d:a3:e5:32:1f:63:4f:71:
1d:7e:09:57:ff:c3:08:f2:9d:68:93:80:03:ab:c5:b2:98:82:
99:dc:9e:32:3c:21:4d:cb:bb:08:3c:84:71:48:3f:52:c0:2d:
39:67:3c:b6:2f:76:9f:1b:6e:30:98:42:18:c3:34:c8:be:24:
24:7c:a8:82:68:e9:4e:13:44:d9:c1:d7:83:1f:9b:70:54:56:
c0:45:3b:ac:d8:d6:cd:3b:cf:ec:b2:3a:ff:6f:52:6b:09:76:
80:09:9d:a8:64:3b:b4:4a:3b:75:82:64:db:32:d8:23:9a:bc:
2e:5c:b8:74:6c:c0:9d:7b:ca:06:5a:0a:3f:de:71:3a:54:17:
9d:4b:26:f4:8c:e4:97:99:4d:f1:f0:0b:a8:77:8e:09:d5:91:
0b:a9:ff:66:6c:2a:85:77:06:57:43:22:b8:48:67:76:20:51:
97:3d:ad:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:16 2025 by rpki-client