Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
File: rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft (raw, json)
Hash identifier: BNNqHYANx/f+xPoYjWVs5teUXjkAzI1SVGFHEDrOBAA=
Subject key identifier: 19:36:55:88:37:1C:03:55:E2:46:C1:B1:43:03:37:E5:61:52:DC:2F
Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
Certificate issuer: /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Certificate serial: 0194C49A2826452915527F022C01A7FB331C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
Manifest number: 1025
Signing time: Sun 02 Feb 2025 03:00:24 +0000
Manifest this update: Sun 02 Feb 2025 03:00:24 +0000
Manifest next update: Mon 03 Feb 2025 03:00:24 +0000
Files and hashes: 1: 0_n0dJGdGPC54n6Su3XhjRpEGaE.roa (hash: ecsdCD7tgZtKRsUvKu336lhnysfVM1v2m6QNHH0P3gg=)
2: rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl (hash: y9gl6fABG8RmqXCbJdKLxU5qWLZ0TyA7jQBNMSRutpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:28:26:45:29:15:52:7f:02:2c:01:a7:fb:33:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Validity
Not Before: Feb 2 03:00:24 2025 GMT
Not After : Feb 3 03:00:24 2025 GMT
Subject: CN=19365588371c0355e246c1b1430337e56152dc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:23:07:9d:ed:98:7b:0c:17:94:25:a9:84:
c1:52:88:a5:c3:02:12:1e:3d:c3:1c:83:40:9d:e3:
04:4b:64:b6:56:f7:66:e1:d7:44:d9:bb:6d:ba:35:
6e:9f:ab:e8:ba:2b:98:48:d5:c0:53:27:07:cb:43:
2d:c7:fc:7e:f6:2c:81:a3:60:43:2b:08:cb:44:59:
3b:a5:2d:8c:b8:0e:91:51:d0:75:fc:8d:7c:32:ab:
63:68:2d:02:d3:3e:d0:f2:5b:d0:e6:5b:77:f9:20:
9c:85:6d:9d:98:db:a2:53:4b:8c:03:6c:1b:84:67:
ef:7f:db:e8:80:57:ef:31:99:69:12:a1:b9:3b:d8:
16:c3:cc:ef:21:f2:59:df:18:ac:59:ed:d1:50:a3:
03:89:c2:75:87:b5:67:98:11:92:c4:0d:e1:99:78:
1b:53:d9:6c:24:dc:a6:3f:1c:ca:ef:2c:a6:0d:80:
40:e1:f3:9d:22:94:7a:af:8a:73:bd:14:f8:c2:72:
71:5c:e8:e0:17:55:3a:7d:86:aa:10:37:ea:2c:40:
f3:89:e9:f4:2f:af:41:e3:bd:63:8c:e9:0d:f5:d3:
ac:49:b8:24:37:c8:74:06:ac:b9:a1:9c:9c:0e:bf:
13:95:1c:d9:16:b8:78:0c:d0:87:7d:92:30:c0:0b:
80:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:36:55:88:37:1C:03:55:E2:46:C1:B1:43:03:37:E5:61:52:DC:2F
X509v3 Authority Key Identifier:
keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a4:d5:f0:92:d9:ac:ed:70:fe:2d:14:63:2f:67:4e:fa:d8:
44:8d:71:77:41:69:06:4d:70:69:c0:cc:df:07:7a:79:81:fc:
f7:5e:5f:1b:de:50:a4:6e:68:46:bf:8e:eb:1a:6b:3d:59:97:
28:c9:02:13:31:0c:af:ef:67:fd:53:e4:ec:33:05:d5:d6:0d:
aa:0e:f2:03:e7:7d:c0:57:10:34:91:81:8b:b6:8b:91:9c:03:
27:22:82:72:d7:ba:5d:38:17:de:80:2e:49:fe:91:9c:80:04:
b0:17:e3:db:64:77:08:89:36:b4:28:44:64:c5:2a:52:46:8a:
8d:de:14:a3:ea:56:bb:70:bf:00:7c:f9:c0:ea:dc:d4:ce:87:
b2:c6:f6:ba:dd:e8:42:9a:f6:9c:95:01:4c:cc:db:7a:0f:9b:
5b:0d:7e:42:ab:80:10:9d:2d:e6:bd:6c:94:67:28:08:d1:f9:
46:88:63:0f:d3:20:25:24:9c:6d:8f:e9:37:f1:85:a6:5a:5c:
10:25:0d:03:d1:02:dd:0c:4f:e8:56:f5:ff:0c:36:f2:99:5a:
ca:6e:79:cc:fb:80:6c:66:47:e9:ff:3a:c7:ae:a1:5a:62:d4:
cc:ea:61:fa:b6:cc:e8:0b:36:02:9a:78:39:2a:cc:d9:85:c5:
07:6c:58:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:55 2025 by rpki-client