Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
File: RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft (raw, json)
Hash identifier: exfpCD07YjPkhKPw3wcqVBr7GR+DsePCXupDtkBV1Ks=
Subject key identifier: 45:57:42:E1:DA:35:37:B2:0D:2F:1B:4D:69:CD:C6:05:D3:4B:7B:AD
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Certificate issuer: /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial: 0194C3BEA9E486A5A1D9F9B63DC6F5E0EBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
Manifest number: 1430
Signing time: Sat 01 Feb 2025 23:00:39 +0000
Manifest this update: Sat 01 Feb 2025 23:00:39 +0000
Manifest next update: Sun 02 Feb 2025 23:00:39 +0000
Files and hashes: 1: 1-WaRefIqk9cTwAge18iSThry2Bk.roa (hash: u2PbRYzxV5DP0Zvmm7MZK3eMuZerbQoMidmwaTRf9M0=)
2: RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl (hash: AoNYpN4KVd9AD1dX1Oy7g72OoWY095dbb2fvl4lR9v8=)
3: pPhTVlJLb86soqyySL-WWM5nGpo.roa (hash: soRRZ5HHiA/a5SCZK0C4OU2YSKWcycTGQ/q5n+2Dcw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:a9:e4:86:a5:a1:d9:f9:b6:3d:c6:f5:e0:eb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
Validity
Not Before: Feb 1 23:00:39 2025 GMT
Not After : Feb 2 23:00:39 2025 GMT
Subject: CN=455742e1da3537b20d2f1b4d69cdc605d34b7bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:6e:61:32:22:4b:7e:91:e9:5b:db:36:05:
72:0a:6e:da:26:b6:a8:81:e7:7b:1c:7f:4d:a9:77:
df:9d:c9:2f:7a:af:4b:bf:05:59:2d:e9:a7:60:56:
44:d1:86:9c:72:a0:41:f2:4e:0e:50:f4:4f:e7:98:
63:8a:86:93:12:12:83:12:84:a1:61:ee:14:82:77:
d7:11:f5:de:57:77:51:0f:a2:78:29:ba:d8:2e:2a:
7e:fc:2c:a6:18:cf:0a:7a:23:13:65:86:90:e9:af:
2f:97:25:bb:ff:a4:db:6a:ed:20:68:d1:4a:6d:ad:
2e:7b:75:e8:c7:cb:e2:f7:2c:a6:78:1d:8e:a1:22:
d0:d7:68:6d:cf:16:99:93:f4:16:86:1a:46:8c:4c:
b3:28:1a:0c:7f:79:c9:c3:71:46:0d:61:f5:b4:91:
69:47:b6:ea:32:b7:be:7d:b9:63:8e:5f:d6:b3:07:
49:f7:26:f9:ea:fa:26:88:8b:3b:67:90:3c:75:9d:
2e:0d:31:33:a3:11:87:e8:e5:5a:02:f0:23:7c:dc:
c6:92:ca:75:57:19:47:ab:18:06:0b:d8:46:bd:6d:
43:4c:89:88:55:55:1e:c4:03:91:55:61:5b:5d:66:
4f:7e:65:96:70:9b:a2:7c:50:f9:f3:69:4e:d9:e7:
8c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:57:42:E1:DA:35:37:B2:0D:2F:1B:4D:69:CD:C6:05:D3:4B:7B:AD
X509v3 Authority Key Identifier:
keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:41:c9:7b:9d:09:72:20:b5:5f:e2:ec:04:7b:18:f8:d5:fd:
c3:f8:50:1c:ee:06:9d:10:62:c3:06:cf:6c:f4:4f:46:ce:a1:
0f:02:71:fd:62:c9:dd:6c:e0:6f:73:2d:04:5c:1f:bb:08:17:
a7:d1:f6:c8:0f:0f:a0:ea:c1:14:fc:68:4e:3d:06:55:e2:91:
04:82:5d:b3:3b:35:bc:f0:84:02:c5:c9:84:00:e0:21:67:dd:
9b:07:19:59:e2:6a:0f:bb:22:fd:20:d9:55:a2:e9:f4:6a:5b:
2c:d1:04:3d:4b:14:c0:72:0f:33:7e:3e:4f:96:13:c2:86:fd:
79:f0:77:9e:0a:3b:c5:5f:a8:c7:7b:4a:7a:2b:eb:5d:99:a3:
40:42:2b:f3:36:01:f8:e4:d4:6e:12:61:a9:0f:17:de:17:82:
51:50:93:7e:de:3b:5a:47:66:ec:ad:6e:9d:e3:e7:0f:e7:f9:
af:53:ff:ba:bd:50:95:f6:31:78:75:50:71:06:ce:60:43:16:
0c:f9:19:f2:d6:85:d3:88:59:e9:9b:8a:da:af:2b:78:11:a7:
0a:d9:78:aa:1f:db:34:9d:a0:d0:6a:ee:64:7f:b2:f7:c4:17:
5f:31:30:48:9c:89:96:04:1d:14:6e:1d:e7:9d:db:6e:03:38:
6e:d5:37:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:06 2025 by rpki-client