Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
File: mx8SO1ukvBt3k7np-htD2sSaZgo.mft (raw, json)
Hash identifier: IHAlno8uVfpTAnVH7kdlTrYe5Gqyu31pMDZ+goWniFI=
Subject key identifier: AE:62:FD:C5:E9:E9:33:D3:EB:58:2F:C6:92:34:F7:28:90:9B:61:6F
Authority key identifier: 9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
Certificate issuer: /CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Certificate serial: 019511D9865E5AF5FEE676AC6EBA2AD36B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
Manifest number: 0D80
Signing time: Mon 17 Feb 2025 03:00:23 +0000
Manifest this update: Mon 17 Feb 2025 03:00:23 +0000
Manifest next update: Tue 18 Feb 2025 03:00:23 +0000
Files and hashes: 1: fnSZn4bkLF5kZ3b1OPm6ARvkoQM.roa (hash: N/iSveQaUWb1ReObfQZCITPh3u+LQRq5t3sKbajN6Pg=)
2: mx8SO1ukvBt3k7np-htD2sSaZgo.crl (hash: 5iSbTI3H13VzoXZkC0C3SQLBFHtELu7Q0DGCES23wDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:86:5e:5a:f5:fe:e6:76:ac:6e:ba:2a:d3:6b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Validity
Not Before: Feb 17 03:00:23 2025 GMT
Not After : Feb 18 03:00:23 2025 GMT
Subject: CN=ae62fdc5e9e933d3eb582fc69234f728909b616f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:78:8d:2b:53:19:41:d4:89:27:df:07:2b:
13:4e:90:52:f7:3d:07:8f:fa:76:00:0d:02:90:66:
8b:e4:15:c3:68:92:63:cd:cc:fa:7b:f1:30:61:52:
61:ac:71:18:72:6e:26:89:7a:14:97:29:13:43:92:
15:a5:08:94:2f:76:92:da:dc:6d:5d:3c:85:f0:96:
f0:6d:45:55:61:b1:44:cc:ad:61:97:4d:b7:4b:a3:
4d:15:cd:57:b8:be:5b:23:f8:07:8c:04:60:2f:b5:
92:31:83:92:7b:2d:99:c4:be:c4:29:0b:b8:4a:52:
e6:68:32:eb:67:bd:e9:ca:13:9a:54:cb:cf:a0:0f:
be:85:77:24:8d:11:0d:5b:6b:89:ae:c8:60:ff:3e:
c0:e2:32:f3:ff:26:2c:e2:02:e3:00:61:6e:82:33:
c2:92:a8:92:e6:7f:e6:6c:06:68:6e:7f:6c:aa:f9:
d5:34:17:cb:2d:1a:0a:e4:d4:78:51:84:77:74:dc:
af:ca:9f:2a:cc:e0:ef:ff:ab:c5:e1:a8:3f:9c:b2:
75:ce:cd:82:8c:c4:cb:9a:a5:81:13:ab:ad:08:3c:
a6:11:e3:6c:cf:87:2f:45:6b:5e:45:dd:5b:ba:3a:
b8:7f:b7:6f:d8:c2:8c:b3:34:84:a8:6a:29:d1:99:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:62:FD:C5:E9:E9:33:D3:EB:58:2F:C6:92:34:F7:28:90:9B:61:6F
X509v3 Authority Key Identifier:
keyid:9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ed:21:ad:9e:53:c6:41:e9:4f:94:04:4b:e8:22:e5:d8:b4:
7c:1c:1a:b8:01:b9:02:9b:77:22:bc:cf:c2:6a:8a:ad:70:a3:
a3:f0:15:2c:45:8e:85:0e:35:2b:c4:f5:85:51:d3:db:6d:16:
e8:c7:53:10:0a:92:52:32:02:e9:99:c7:98:64:48:12:22:7e:
1e:75:a3:4e:63:5b:fc:09:c1:f8:d8:2f:2d:e7:b9:d2:24:d8:
a1:81:d6:45:8a:dd:ab:63:5b:c3:3e:f5:7e:d7:3c:75:2f:85:
3e:f3:d4:6b:a9:d4:d5:37:9e:51:67:4e:2b:35:36:ad:dc:b6:
09:7e:27:cb:94:08:cb:9f:42:cf:ad:d1:64:87:d0:b6:80:5c:
98:bf:58:c6:01:9d:cd:67:d9:65:78:83:78:4f:27:bd:58:32:
13:f3:ed:d7:55:53:d9:fd:75:5f:e8:1b:aa:5b:92:4b:2a:a9:
3e:47:52:7b:3a:8d:0b:6b:4f:90:aa:44:c6:1a:c0:9e:2d:c9:
61:96:28:e2:f9:b4:47:c2:f7:20:77:3f:ce:fe:d5:c1:59:c4:
38:a7:a1:e9:3b:52:b2:bb:50:f3:db:2b:9c:9a:3a:5f:39:88:
02:9c:37:00:9d:05:ab:1d:88:53:fd:8d:ea:34:bc:ad:78:a2:
ad:20:c9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:03 2025 by rpki-client