Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
File: unZwbT4IgT24sndmKK-EZRjibdI.mft (raw, json)
Hash identifier: OFLEkoiIXUsUOoPF/IQHrtv4qyxB1Vo5nvHaG3Oghss=
Subject key identifier: 54:8F:38:30:F0:2F:22:87:1D:3D:EE:57:11:1A:78:B5:CB:65:49:41
Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
Certificate issuer: /CN=ba76706d3e08813db8b2776628af846518e26dd2
Certificate serial: 019511355CFD552EF15B4770FB057969743A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 00:01:04 +0000
Manifest this update: Mon 17 Feb 2025 00:01:04 +0000
Manifest next update: Tue 18 Feb 2025 00:01:04 +0000
Files and hashes: 1: Do_ZNFPYd7X2-W1xZGRW00-SNss.roa (hash: Ol8hC9+K4SVNjxQKvkLbRCYT37tEnqOL0zEZ/PI9ysk=)
2: unZwbT4IgT24sndmKK-EZRjibdI.crl (hash: 9QUBLBGvgz4G5oO8vfT/cc3UOgAPsgIy1BIrGBPwIFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:5c:fd:55:2e:f1:5b:47:70:fb:05:79:69:74:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2
Validity
Not Before: Feb 17 00:01:04 2025 GMT
Not After : Feb 18 00:01:04 2025 GMT
Subject: CN=548f3830f02f22871d3dee57111a78b5cb654941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:29:d4:93:4e:03:2e:ae:f7:e3:6f:8a:51:9d:
58:07:27:31:8b:b7:3e:72:70:1f:ac:05:f6:61:21:
cd:e6:5b:18:16:99:cb:cc:19:9b:e4:4a:8b:d9:47:
b8:0d:70:da:2b:8d:28:ba:41:c0:18:07:1d:e6:ba:
0c:c1:39:6a:6c:aa:03:4f:95:87:cd:6f:ad:7d:61:
4b:ae:97:fe:d7:06:76:7e:74:e0:42:81:ad:d9:c3:
35:72:91:27:ac:70:a6:42:21:c7:6c:03:1a:33:43:
72:5f:57:bd:28:a5:d5:26:47:f9:e0:80:04:8a:bf:
71:3f:91:cf:4a:26:25:62:cb:06:a2:36:e9:05:e2:
25:20:65:36:9b:09:bb:f8:33:90:e2:83:75:61:fb:
71:e8:5d:3e:7a:53:c8:44:bd:7c:69:4a:6d:ac:69:
14:0d:ed:4c:f1:e5:dc:93:a0:d5:2a:27:8e:4c:54:
16:99:eb:2a:97:a3:b7:4c:b9:5c:2e:71:55:9c:67:
14:e9:0a:6d:9e:e3:f1:3f:f4:34:41:3a:01:93:8e:
d9:22:51:e3:06:b5:08:7a:92:39:17:59:c8:39:46:
0a:fb:7a:0c:de:8f:fd:65:82:30:56:4d:20:67:c1:
be:ef:47:76:fa:24:2e:e3:fe:d8:98:ae:c4:f3:5a:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8F:38:30:F0:2F:22:87:1D:3D:EE:57:11:1A:78:B5:CB:65:49:41
X509v3 Authority Key Identifier:
keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6b:dd:cf:88:9e:4a:0f:9c:f3:a9:5b:a1:85:77:48:b2:61:
30:c6:b8:a7:b7:4d:e6:f0:61:20:1c:5d:3a:bd:71:80:65:ca:
b9:ba:9f:2d:f1:0c:28:7b:b4:9b:87:26:b3:e0:64:c4:2d:21:
14:e0:7c:ae:33:40:d0:20:2b:33:09:38:c8:cc:17:7d:6b:91:
4e:cc:6b:cd:e0:43:38:94:d0:6d:cd:18:bd:9f:ba:68:3b:83:
b7:6e:c1:08:70:b8:59:ec:78:0c:4f:13:8b:d8:71:32:a5:af:
98:60:b4:8a:8f:14:c1:fd:fd:ad:07:4f:20:71:8c:70:3b:54:
a9:82:a8:fb:fa:db:55:de:74:eb:44:24:1f:b4:ad:52:8c:5b:
b2:7c:75:bb:aa:bc:72:91:3f:ed:b1:a1:28:e3:7a:d4:57:4d:
91:7f:68:63:f6:a5:81:c4:84:c1:08:61:03:5d:dc:08:7a:f3:
c8:97:6c:ca:8a:af:af:ee:35:d1:60:f9:8f:4b:fa:7e:50:5b:
85:a9:7f:89:54:9a:ec:67:3e:8c:f7:06:3c:8b:39:22:01:e4:
7f:da:14:25:7b:6a:c8:83:00:92:8e:f6:66:71:59:e6:88:d5:
c0:57:62:02:99:47:a1:f1:7a:e2:7e:2b:24:56:eb:e4:8b:02:
6d:9d:9f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:19 2025 by rpki-client