Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: blM1C2qjkTS/itDbMZ5foNBVeT9Q7a2TlmWs/0UO6SM=
Subject key identifier: 74:6A:5B:25:B4:CC:B4:23:07:6C:27:D5:F9:09:F8:67:B9:7F:F1:5C
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 019510FDF0A6DF8B496F418141D6A0B9799C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 088E
Signing time: Sun 16 Feb 2025 23:00:32 +0000
Manifest this update: Sun 16 Feb 2025 23:00:32 +0000
Manifest next update: Mon 17 Feb 2025 23:00:32 +0000
Files and hashes: 1: A0vsL2z_xaeExEMFhErE3dgWYuI.roa (hash: GFluxTgPqxFYWQe8ASr2AzVuLwmCDibJdLSINZzoxsw=)
2: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: Ls/dIpMcn1ie9bRN9Uopp0W88PsVAQerIbAIOmUYsZk=)
3: i86Qnss2Hx--RBAsZcussull0WM.roa (hash: ZSa0NJzxbSdhBzuGRMo0rW/M52VwcaybfD76Q9/vKd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:f0:a6:df:8b:49:6f:41:81:41:d6:a0:b9:79:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Feb 16 23:00:32 2025 GMT
Not After : Feb 17 23:00:32 2025 GMT
Subject: CN=746a5b25b4ccb423076c27d5f909f867b97ff15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:6d:62:c4:9b:1e:a6:70:0b:33:ee:91:fd:
15:26:e8:9f:29:d3:41:3a:0f:9f:1b:0b:ac:36:ab:
cd:76:74:32:76:d6:75:82:c1:49:a9:dc:96:4a:b8:
70:5b:72:3d:48:37:54:88:2d:85:5c:2d:4a:b9:ae:
ba:8a:33:92:dd:dd:17:4b:d0:f4:29:1c:95:1d:f7:
75:d6:54:ba:cd:a2:37:8c:8a:1d:e6:69:15:5a:20:
1a:f5:1e:4b:ad:e5:a0:ee:f0:c7:89:12:a4:2d:bb:
58:90:83:71:a5:22:b3:99:2d:cb:31:64:c9:a2:6f:
79:32:4b:a2:8c:78:e8:e2:89:db:04:d8:fa:67:58:
32:ae:35:91:7b:75:fc:25:bd:41:38:f7:df:af:d3:
33:29:17:38:a8:89:a2:45:83:5d:5e:a7:56:55:7a:
2e:11:b9:20:32:b7:12:2d:da:41:56:4c:43:7c:54:
4c:9e:42:00:0b:f5:70:69:30:75:e0:b6:0b:d0:40:
e7:c3:a1:24:46:4b:f8:bb:15:3c:ca:80:db:ab:79:
ed:a1:d9:80:68:fb:cb:98:13:ba:0a:9e:b8:80:22:
76:eb:ea:3b:90:2c:a9:bc:3a:d0:f5:a9:31:09:c7:
0e:e8:c6:d6:45:cf:75:41:0e:83:39:da:84:9b:3c:
9d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6A:5B:25:B4:CC:B4:23:07:6C:27:D5:F9:09:F8:67:B9:7F:F1:5C
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:22:78:70:53:c7:e9:b3:d4:38:0a:fc:a3:d0:68:0e:30:86:
aa:71:cf:e8:8d:51:7d:50:c0:26:d1:d5:69:b6:f3:1e:8f:a6:
f5:6a:77:c5:6d:31:29:bb:ea:49:a5:70:82:9b:88:fd:56:ca:
54:b2:af:d0:47:14:1f:7f:7f:a9:5c:32:58:89:19:89:d2:13:
ef:dd:f9:a0:a5:3c:8c:f9:19:3c:2a:02:f9:61:26:a6:ff:79:
d8:6f:4a:d2:9a:6f:6b:41:a0:c4:57:e8:fe:86:c7:53:6d:dc:
42:70:6a:23:33:e6:84:9d:a6:3c:54:70:ca:3e:96:52:59:96:
0a:87:57:f2:81:d7:21:5e:ea:60:23:82:d5:d3:53:e1:c4:30:
d7:cd:1f:af:39:90:fb:e4:e5:83:2f:28:20:91:ba:32:9a:b2:
5b:a1:eb:b8:00:3d:9d:d2:8c:ca:5b:1f:fb:af:63:2d:e1:6f:
d8:4f:91:e8:bd:9d:18:9f:a5:b8:b0:53:6e:d5:20:e5:3d:b1:
50:6d:77:db:07:0f:92:2b:96:40:07:4e:2d:e4:27:ea:51:9a:
e8:4e:6c:5b:fc:85:2b:c1:c9:b7:58:9b:8f:e0:7b:78:ab:a1:
91:37:ee:0f:3c:1d:59:93:25:5c:71:07:83:0f:ba:f4:1e:d9:
b8:81:a3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:06 2025 by rpki-client