Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
File: pDCUIgOqL405Co2uULhamEUE_Zw.mft (raw, json)
Hash identifier: 2tlZEVKF+segXB/PZUTocEihki8lu1AGy2GgC5+KJQk=
Subject key identifier: 01:95:6D:34:75:16:7A:02:84:E8:26:F4:62:B6:A1:19:2B:9E:1A:F4
Authority key identifier: A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
Certificate issuer: /CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Certificate serial: 01951210BC98C0C9ED7FC69E909DC885B448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
Manifest number: 0E52
Signing time: Mon 17 Feb 2025 04:00:41 +0000
Manifest this update: Mon 17 Feb 2025 04:00:41 +0000
Manifest next update: Tue 18 Feb 2025 04:00:41 +0000
Files and hashes: 1: mxHqegiIzk-5yKnAa0W9InQ8xh8.roa (hash: 1T8S7F5C1unZ11xq+jwLnSOyvWawPuJqcLvoyNmvP44=)
2: pDCUIgOqL405Co2uULhamEUE_Zw.crl (hash: CSHuDM9+TM2WxKJYagb77tIJbAjOThZZiGy2eR7QrS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:bc:98:c0:c9:ed:7f:c6:9e:90:9d:c8:85:b4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Validity
Not Before: Feb 17 04:00:41 2025 GMT
Not After : Feb 18 04:00:41 2025 GMT
Subject: CN=01956d3475167a0284e826f462b6a1192b9e1af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:33:ec:8c:68:0d:63:77:be:da:af:23:cb:
1c:54:ed:ef:69:d1:1b:d3:1c:8b:ae:2f:2e:41:b2:
c3:12:10:a9:57:81:79:c6:e2:1a:4c:11:23:40:54:
38:3e:5c:83:8d:f7:f5:17:85:92:28:02:de:f0:e2:
ee:33:ca:4e:65:12:c8:79:49:a7:e5:eb:1e:1d:61:
dd:68:42:b6:52:9f:ff:c2:bd:09:da:17:a2:73:6f:
13:7a:3a:c1:b5:fe:b5:4a:f8:34:c8:12:8e:89:54:
29:fc:dc:63:3c:51:5b:0c:78:f7:64:03:f0:1b:73:
d7:9a:bd:60:e6:a8:bd:07:e5:02:01:be:72:70:8f:
8d:e8:e5:8e:3b:dd:60:94:25:d7:33:d3:16:82:d4:
fb:88:e0:95:18:70:54:45:4d:e1:46:a1:42:08:81:
2b:aa:ab:21:22:5b:2f:4f:86:65:5a:b1:70:e0:05:
b1:eb:1d:bf:4a:1c:3e:1c:00:62:24:43:76:c8:f2:
df:8f:e9:14:0e:03:b0:3b:c0:e0:c9:70:ae:53:c6:
4f:1f:9d:df:c1:e7:0a:41:e8:ce:1d:54:0a:dd:66:
a9:97:b7:cd:77:8a:93:72:75:56:21:4b:b2:28:cb:
c5:82:41:87:9a:29:72:4e:00:f3:b7:cb:18:e1:2b:
cc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:95:6D:34:75:16:7A:02:84:E8:26:F4:62:B6:A1:19:2B:9E:1A:F4
X509v3 Authority Key Identifier:
keyid:A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:12:73:9a:a2:b9:5c:6a:5b:4f:a7:4f:40:7e:06:02:c2:98:
da:99:c6:83:69:4f:9e:2f:f1:03:ca:a4:14:09:84:e3:92:02:
1d:c9:b3:52:26:41:09:04:ed:09:89:d0:5c:3f:66:cf:2b:ab:
e4:2f:cd:92:06:3b:a4:a6:63:2f:d9:c6:15:e6:60:a7:bf:bc:
c7:3e:62:19:6d:13:b0:b3:bb:06:0f:3d:a7:f9:0c:c9:df:4e:
ce:2b:95:84:a8:7a:9b:3f:bf:c7:1b:e6:d4:31:c8:d8:7e:bd:
ce:8f:e0:d4:02:18:07:87:f3:ba:ba:ff:a6:62:a0:f0:26:ed:
fe:e8:dd:68:0c:50:76:00:62:75:a4:31:0f:60:7b:14:70:a1:
a3:39:9f:c5:60:ad:78:12:de:ed:97:60:70:4f:5d:b6:b8:20:
e2:11:8f:8c:77:38:89:46:f2:1c:a8:14:74:23:aa:fe:d7:29:
f2:9e:65:8c:66:fc:66:3d:d4:11:2e:02:2f:5f:29:a3:48:5a:
d6:44:9e:3d:3c:f4:c7:9b:ad:d7:3b:2d:46:f0:75:9e:6e:b8:
ea:05:60:17:a2:fe:f5:81:b6:7e:6c:5e:6a:02:c5:f2:05:5b:
99:b9:21:ab:9e:f8:fa:3b:46:ce:d6:a2:7e:cd:97:e2:e0:5c:
0c:dc:9d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:12 2025 by rpki-client