Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json)
Hash identifier: 1hoaq+lk/VAdDkm7j952dd5+rDnZbtucKIKGpIq1wwY=
Subject key identifier: 1A:2B:9F:C1:BF:AD:3F:0B:AA:50:C1:1A:B9:F7:F5:9A:1B:6C:6B:CC
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 0195116C35F088EA754C117D028E34A5252F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
Manifest number: 03FC
Signing time: Mon 17 Feb 2025 01:00:59 +0000
Manifest this update: Mon 17 Feb 2025 01:00:59 +0000
Manifest next update: Tue 18 Feb 2025 01:00:59 +0000
Files and hashes: 1: V-Zw-R39fa3vjmQTK3pi-ruJAOM.roa (hash: svw00iQ8XqkVPen4oB7uX29LsRKx9ZNkxy68U1tQQ8A=)
2: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: +DxUlqi/wz0xCQzrnxJmmCtiK9C0KTcQyeWEJTLqsi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:35:f0:88:ea:75:4c:11:7d:02:8e:34:a5:25:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Feb 17 01:00:59 2025 GMT
Not After : Feb 18 01:00:59 2025 GMT
Subject: CN=1a2b9fc1bfad3f0baa50c11ab9f7f59a1b6c6bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:5b:62:e2:70:07:53:a7:a9:f4:50:db:8b:
38:f4:1e:6f:c7:4c:54:01:54:01:48:5e:2a:50:36:
f3:3c:7c:fd:a3:c5:21:7a:5c:85:f4:a3:16:7b:d1:
2d:85:ed:56:86:a9:ca:25:b9:44:17:e7:d7:ff:d2:
2a:83:49:14:dc:a6:e6:1d:0f:c8:08:a2:9e:ac:00:
2b:2b:c6:72:16:96:04:6a:82:8b:e7:ee:dc:3a:6b:
5a:a0:b7:ea:27:29:44:b4:db:be:3b:73:51:5b:f2:
c0:f3:b1:e6:70:48:50:67:14:13:03:3a:9f:75:9b:
bb:89:e2:a2:6e:ee:39:44:70:da:f4:8b:7e:34:8c:
27:39:82:84:9a:50:c5:20:71:44:42:86:21:ac:b3:
8b:9e:1a:fd:52:6a:4d:5f:8e:13:93:53:af:6f:20:
3e:d2:71:f7:7f:e6:da:d8:a2:90:fb:38:50:17:e3:
66:da:f2:4a:11:cc:c6:58:4d:90:60:0e:85:89:14:
6e:84:00:c0:b5:45:47:82:c3:ce:10:6f:b9:45:b4:
4e:2f:9e:82:aa:d9:7f:fe:28:22:bd:00:3a:d7:12:
b1:8c:55:66:b8:9c:c3:4d:e4:51:e3:90:2d:41:09:
bb:81:01:e1:da:af:bc:1b:b6:75:57:99:a2:49:65:
f8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2B:9F:C1:BF:AD:3F:0B:AA:50:C1:1A:B9:F7:F5:9A:1B:6C:6B:CC
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ce:93:34:20:e9:c9:bd:ff:b9:0f:32:a2:3b:1d:e3:ea:35:
b8:1c:ad:e6:86:8a:a4:10:3d:37:65:60:e2:b1:ea:c4:3c:7b:
e8:57:dd:23:64:e3:95:83:b8:c6:44:72:00:db:ea:22:80:1e:
73:0d:ad:fc:3b:00:55:d0:4a:e4:c4:6a:ad:fa:af:75:5c:05:
17:44:ad:65:89:6d:bd:22:1d:de:ca:66:b3:15:c9:98:6b:e2:
aa:9d:d7:52:d4:51:54:7c:13:91:51:90:c0:cd:18:16:1c:b7:
01:35:68:6d:d3:33:58:0e:f0:98:38:15:ae:87:c3:14:50:24:
4c:b3:a6:83:14:31:d6:6b:af:5c:b0:97:21:a5:3d:a4:31:ba:
60:2a:8e:c0:31:b5:7b:d0:83:96:e9:91:2d:2b:99:a0:d7:0c:
77:b2:eb:07:95:87:67:cd:98:ca:6d:f9:ee:11:cf:04:24:56:
5c:6c:c5:52:cc:b2:f9:16:2c:16:6a:9b:1d:af:33:35:07:43:
e3:21:fb:f6:39:91:4e:b1:eb:c5:e0:4d:36:b1:c3:c2:c5:31:
a5:ea:3a:52:56:91:53:25:90:e7:a3:2d:85:17:98:fa:a4:35:
31:f3:f2:1b:b0:95:89:69:78:ef:92:ec:19:7e:0b:b2:e5:aa:
f2:b8:89:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:54 2025 by rpki-client