Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
File: snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json)
Hash identifier: H3H95kb3otXwPTsqzSiubE0rQIGMRZAHrG5WJdutEuE=
Subject key identifier: 3C:BE:D8:C4:04:EE:C6:EE:3C:C9:43:5F:06:25:01:EB:AA:CC:19:06
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial: 0194C3F5D18D1EEA5AA34B5454D3DACBE3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
Manifest number: 0C61
Signing time: Sun 02 Feb 2025 00:00:54 +0000
Manifest this update: Sun 02 Feb 2025 00:00:54 +0000
Manifest next update: Mon 03 Feb 2025 00:00:54 +0000
Files and hashes: 1: HRiBqkMm3jYdrvB2_suIlLpeJLU.roa (hash: thuo/2wKh04k5fV07y+BJSuu+CRS6TthbxD3yT9m+AM=)
2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: 8+ApYNYyahE4nS2GafTjlMVH62OhnP5A6RlvlH+zrbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:d1:8d:1e:ea:5a:a3:4b:54:54:d3:da:cb:e3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
Validity
Not Before: Feb 2 00:00:54 2025 GMT
Not After : Feb 3 00:00:54 2025 GMT
Subject: CN=3cbed8c404eec6ee3cc9435f062501ebaacc1906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a5:ef:08:c2:89:46:41:e4:e1:3c:e3:a0:66:
c9:24:78:80:d2:e0:24:eb:22:10:bf:92:04:e6:2a:
9b:26:38:80:b3:0a:5b:c0:97:21:8c:0d:db:bf:49:
67:e5:5c:cc:70:91:de:36:1f:8b:6a:1c:b1:b7:bd:
6d:d3:11:c9:15:23:58:59:46:f3:3a:c4:bf:2f:ae:
3d:ef:92:9b:db:59:eb:b9:27:ca:3e:40:c2:32:16:
da:44:d3:2b:49:a1:1e:4c:81:c1:3f:af:d1:06:2c:
f2:b0:d6:e2:f6:ec:b3:66:39:0f:7f:b1:b2:c0:ba:
03:c2:bf:3a:36:db:21:bf:97:07:8e:db:34:23:d7:
db:71:f5:ed:6f:da:d1:b3:6c:70:d0:91:2c:69:f7:
79:91:3d:db:3e:ab:e4:18:a5:c5:d5:9d:0d:27:1a:
48:e4:1e:80:3b:e0:4c:01:66:46:d8:fe:5c:4f:91:
fc:4a:b1:cc:c7:f5:77:4d:f8:c7:af:42:db:be:5a:
f2:03:53:dd:02:37:2f:74:bb:9c:06:20:d3:99:ca:
0d:e1:5f:64:f8:60:70:35:38:fa:38:f5:d4:7a:e6:
60:68:b4:ad:9f:60:1b:04:ff:ef:d2:89:0f:03:2d:
76:6f:d4:67:6f:89:e6:c2:46:f7:d6:f7:bf:86:9c:
e0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BE:D8:C4:04:EE:C6:EE:3C:C9:43:5F:06:25:01:EB:AA:CC:19:06
X509v3 Authority Key Identifier:
keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e8:41:06:5d:4b:77:82:b0:39:68:7e:71:b1:d2:28:2a:2c:
19:01:1b:9c:f6:a2:9f:9b:2a:17:fb:bf:5b:e8:3d:58:df:77:
64:5a:1a:77:c5:9e:79:03:8e:ef:2f:be:f9:a1:60:e6:2c:05:
9d:3f:5d:e2:24:a6:32:d2:87:44:c4:3d:cc:c4:9c:30:40:06:
a1:24:ce:47:6d:8b:80:79:fc:e7:3a:cd:ac:27:37:7c:84:d1:
8b:f1:d3:d9:8b:1f:2d:8c:79:6a:49:75:6c:e6:da:2d:68:c9:
87:d9:3b:d6:86:33:c0:19:9f:3a:7a:df:cd:57:60:cc:7c:26:
5a:08:3d:60:d1:a5:26:fc:a0:b0:85:1b:72:0f:35:66:67:d1:
b3:5a:6d:bd:10:7a:8f:3d:e2:da:02:bf:60:f8:3b:6a:bd:e7:
a8:2e:6c:22:22:71:d2:b1:9a:ab:8a:c4:60:49:62:dc:23:f1:
7f:fe:b4:f0:c2:ab:85:16:b5:d1:f2:8b:e5:63:52:74:68:82:
d5:b4:bb:6e:b5:89:fc:a4:64:3d:94:25:fd:52:ad:11:b1:28:
95:bb:91:1a:8a:85:a9:ad:98:8a:6f:18:80:13:72:80:49:17:
22:2e:8e:0d:6f:39:9a:ab:00:38:74:26:43:b0:58:79:13:33:
33:45:d6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:53:00 2025 by rpki-client