Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json)
Hash identifier: DV2Rs+Zxt01ejZ1BEw0W12NPngW7TMKv8CjhME6DrDo=
Subject key identifier: 71:87:59:9E:BC:19:2A:1B:49:08:A3:23:1C:4B:C4:F5:06:52:96:7B
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 019512108BBD246D0384FCE58CB4504F099D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
Manifest number: 0864
Signing time: Mon 17 Feb 2025 04:00:28 +0000
Manifest this update: Mon 17 Feb 2025 04:00:28 +0000
Manifest next update: Tue 18 Feb 2025 04:00:28 +0000
Files and hashes: 1: 63RWpTzYaUMklcl62HBy6xUd3L4.roa (hash: Un1n3GmyQj6VVqYhoRSHcYh85a7qnY1jg5MCSUwKUTc=)
2: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: 4qlw/wtCpr2mOHJVCffxFx57zQ6RwRzN9LP4EC+BuHg=)
3: XoKGaT2Y4cimov2MwIZbMUFcNik.roa (hash: nUamhX6MnewzR6j8dYV1oqge5T4xxq+U39rAZAcBMTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:8b:bd:24:6d:03:84:fc:e5:8c:b4:50:4f:09:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: Feb 17 04:00:28 2025 GMT
Not After : Feb 18 04:00:28 2025 GMT
Subject: CN=7187599ebc192a1b4908a3231c4bc4f50652967b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:f1:ca:7a:83:b0:73:52:5f:18:c0:f7:d2:
9d:42:bc:e9:de:ec:93:6f:74:f9:3d:17:0a:a8:15:
a4:58:d3:b0:15:b1:48:2d:dc:ce:a1:4e:30:f5:80:
85:99:e9:5c:83:3f:f7:98:34:89:ab:ea:d2:f0:99:
89:0d:f7:e9:21:98:0b:67:6b:cf:02:d8:90:65:b3:
ff:d3:e1:c2:74:2b:85:f7:3a:dc:04:e9:2f:05:b2:
26:be:e8:e6:8b:55:d9:94:f8:4a:15:23:52:ea:1d:
d9:a9:62:ae:71:04:bd:a2:19:5b:ca:77:7a:1c:f0:
5a:27:fb:e8:f5:d2:f1:e4:6b:2e:66:dc:33:52:48:
6b:e8:22:00:11:31:c8:50:ff:88:5d:92:0b:ff:44:
12:1c:73:9c:ab:7b:85:40:1b:f1:1a:3f:0d:08:67:
cd:f9:31:fa:3b:38:9f:31:7f:1d:1e:4a:97:e7:28:
8b:90:87:1c:f2:b4:9a:f4:a6:90:36:7c:a0:54:56:
8b:40:3f:89:04:27:5e:ff:90:7c:21:ab:b5:84:c1:
68:09:94:e9:46:96:45:a5:32:db:f8:63:b6:4d:1d:
76:13:06:70:2f:3b:34:9a:0a:ae:77:06:48:b6:2b:
9e:e2:ae:1c:56:ad:55:00:4a:3c:f3:28:06:84:0c:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:87:59:9E:BC:19:2A:1B:49:08:A3:23:1C:4B:C4:F5:06:52:96:7B
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0f:f1:84:53:13:9b:2d:5a:9e:ca:3b:e8:7c:4e:66:93:e6:
05:d5:a0:d2:e3:70:3d:27:2f:42:49:25:ed:72:d6:a2:ae:12:
df:86:e7:ed:ab:fd:a5:aa:68:4a:da:b8:49:14:1c:8e:15:dc:
5c:8d:5c:79:6a:4f:6b:c6:99:fd:90:48:e3:aa:c5:85:9c:6d:
48:5c:ae:fd:7c:97:fe:b8:49:5f:f2:c7:1b:9f:70:86:80:d4:
f0:d7:b3:58:3a:87:f1:bc:13:38:fd:28:99:f2:76:e9:4f:1e:
db:9d:5b:1f:02:31:0d:c4:d7:87:06:f2:6e:88:d9:a5:ea:03:
95:c0:8b:1b:1e:c4:cb:cf:21:5b:6f:58:e6:b3:61:26:0e:15:
8f:3c:b5:c8:63:fa:cd:0a:d6:69:27:22:2b:a9:46:22:bd:ad:
b5:7e:de:54:f4:97:5b:35:5d:a2:81:4c:8b:75:c3:7c:21:a2:
96:14:28:98:0d:57:dc:f7:18:00:a8:35:5d:dc:db:5b:06:86:
b6:3b:f4:cf:6a:24:8e:d5:78:ec:28:e1:1c:44:35:84:f6:fa:
c3:12:a8:19:9f:76:95:7e:9f:c6:65:16:03:96:5d:89:b6:5a:
44:a9:49:de:fb:3e:4b:25:84:12:66:6d:1a:8f:66:4b:bf:cb:
50:29:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:00 2025 by rpki-client