Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
File: l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json)
Hash identifier: kkU+ftbLOSDPagCzJz+2TICHTARh+rKaic6hKZspZd0=
Subject key identifier: BA:90:01:C1:51:7B:B3:FB:2F:CF:00:45:F1:04:B9:D3:74:BE:CB:59
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Certificate issuer: /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial: 019510C773752864C8157ED90920B5944C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
Manifest number: 13FE
Signing time: Sun 16 Feb 2025 22:01:01 +0000
Manifest this update: Sun 16 Feb 2025 22:01:01 +0000
Manifest next update: Mon 17 Feb 2025 22:01:01 +0000
Files and hashes: 1: jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa (hash: Z+xoWww5SsoPK3NcXFL/FecEhSX4cgiZ8Poe3txV32s=)
2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: ITkcArjuue92qZPQaUPC/xeK/bMBUfH/swldr9naZVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:73:75:28:64:c8:15:7e:d9:09:20:b5:94:4c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Validity
Not Before: Feb 16 22:01:01 2025 GMT
Not After : Feb 17 22:01:01 2025 GMT
Subject: CN=ba9001c1517bb3fb2fcf0045f104b9d374becb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:a3:fb:37:af:77:95:79:91:47:ae:78:e8:
8c:bf:77:8c:37:c2:49:f6:fd:63:af:7f:cb:06:ea:
85:1c:0a:7e:76:22:3d:a7:6e:0a:f4:12:5e:a0:3e:
ba:f0:eb:ef:d0:c5:e5:28:6f:84:c0:97:3d:f7:ac:
22:af:85:e0:b6:c7:46:7c:85:4f:af:eb:50:40:63:
11:59:65:f5:f5:d5:99:d0:6f:4c:31:24:62:80:cb:
b6:fb:1c:23:24:35:1b:0a:53:d5:d8:b4:53:5e:ae:
7a:57:60:63:c1:00:e3:cf:80:28:92:b9:26:0e:d2:
90:f3:f3:59:61:8a:e1:b9:90:19:d9:13:b3:e4:ca:
38:69:56:ae:dc:7f:dc:53:7b:d8:99:79:31:79:de:
18:6d:34:c5:16:3e:79:28:d4:3e:1b:da:18:e2:fd:
32:2a:06:a2:1d:01:e9:a9:03:f0:87:fb:7a:37:22:
28:41:cf:bf:06:a3:ae:16:8e:76:ee:0c:c9:0f:a6:
f9:24:99:db:84:a1:e2:51:02:e0:7f:ab:93:c4:14:
4c:09:8a:4b:1e:33:b2:fb:b2:e2:f7:b9:15:54:47:
69:1f:d1:4c:14:b4:06:5b:f2:57:2e:e2:fb:6e:be:
dd:e1:a7:34:b3:8a:37:cd:72:6e:31:cf:9c:e3:f7:
8e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:90:01:C1:51:7B:B3:FB:2F:CF:00:45:F1:04:B9:D3:74:BE:CB:59
X509v3 Authority Key Identifier:
keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b0:dc:22:29:57:98:a6:c9:24:a7:08:69:35:d6:c1:05:03:
b9:d6:35:5f:da:b1:fc:73:a6:2e:66:96:33:83:f1:07:40:74:
b2:66:56:74:ec:26:26:11:af:a3:5f:1d:20:bf:a7:6e:f4:26:
53:37:85:05:de:a9:69:c0:c5:aa:bd:a4:de:d3:75:2c:57:61:
be:00:f4:63:21:2e:b1:2a:3b:14:8f:c9:c3:f8:ad:9b:35:de:
05:cf:67:33:61:f1:e5:53:13:b6:f8:91:45:03:10:77:5f:3d:
9d:60:c1:3e:f2:7c:5d:b8:db:63:00:02:c6:55:a1:3c:b5:18:
3c:d4:04:c5:15:58:fd:ff:eb:a7:8f:09:f7:88:bc:3e:a9:7d:
91:e7:31:62:02:fc:01:f3:60:cd:8d:2f:02:be:23:d4:a6:14:
85:c8:27:03:56:c1:22:1b:fd:ea:8f:45:a9:3c:44:23:52:b5:
62:a6:3a:f3:b5:e7:73:aa:fd:cd:c2:14:69:ee:f0:07:1d:d9:
e9:a3:d8:a1:e9:e0:c2:36:eb:0f:5a:8e:8f:0b:c0:66:cb:9c:
26:a1:c2:9f:f4:92:9b:a0:f8:17:59:64:d2:3d:04:ff:35:25:
93:de:3c:e2:e6:7f:80:47:e0:ab:99:d0:4b:ee:71:36:af:7e:
5c:2c:79:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:05 2025 by rpki-client