Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
File: 2Vvf164gaHHjgmf0V3hiERhk2C8.mft (raw, json)
Hash identifier: RawxocwzChIfJqu3xK9/5ebJIBPuH7nGadW1uvnYxfs=
Subject key identifier: DD:F3:F9:D1:91:31:D1:63:C0:96:7F:A1:0B:85:44:39:18:B7:8A:38
Authority key identifier: D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
Certificate issuer: /CN=d95bdfd7ae206871e38267f4577862111864d82f
Certificate serial: 0194C49A6665E050C908215D05EA0F4DA40B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
Manifest number: 12
Signing time: Sun 02 Feb 2025 03:00:40 +0000
Manifest this update: Sun 02 Feb 2025 03:00:40 +0000
Manifest next update: Mon 03 Feb 2025 03:00:40 +0000
Files and hashes: 1: 2Vvf164gaHHjgmf0V3hiERhk2C8.crl (hash: EebYtmXrDdjynDW1D8U1G0pQDku4byx3hTvEYdRMgns=)
2: yYyiNsgvxodzcWtsJth3gtqP74s.roa (hash: h9GU418V8HLDeWxchLf1ERx3rIBgo7WWOa5d5upmucg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:66:65:e0:50:c9:08:21:5d:05:ea:0f:4d:a4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95bdfd7ae206871e38267f4577862111864d82f
Validity
Not Before: Feb 2 03:00:40 2025 GMT
Not After : Feb 3 03:00:40 2025 GMT
Subject: CN=ddf3f9d19131d163c0967fa10b85443918b78a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:12:01:16:ee:20:60:e9:d1:cc:41:79:40:
1c:29:87:ed:99:14:55:ec:92:a5:cf:f2:91:d1:a2:
1e:a9:9e:0f:33:6d:82:fc:96:3c:56:24:1b:b7:6a:
6a:19:fe:a2:e9:25:f6:80:06:5e:d8:31:47:b6:be:
b2:22:83:29:91:80:6f:50:36:09:c3:84:61:da:0f:
d1:27:7f:06:ce:0c:58:d9:d5:57:29:0d:57:db:17:
66:64:e0:dc:6d:3d:3d:a2:3b:78:58:6f:ab:7c:fc:
b4:95:58:b6:c4:81:74:2f:9f:a0:63:0a:13:44:c7:
c7:ec:f9:25:16:c1:ab:37:3d:3c:09:fc:59:6b:89:
8f:0f:1f:1b:92:6b:fb:ca:74:46:e9:ce:a2:2f:eb:
63:0e:f3:c2:55:63:6b:cf:97:2b:eb:57:5e:43:d9:
40:7c:f8:97:c4:de:70:e6:0b:1f:94:37:72:ac:74:
0c:62:99:ef:f1:d7:f2:4b:65:20:f4:d1:81:54:71:
2f:14:73:52:d2:90:a7:05:68:3d:67:21:5b:84:d8:
19:bb:4b:b5:61:d9:c8:8c:73:c6:77:ab:86:31:92:
d1:a6:5f:52:b4:42:3a:00:67:47:8f:51:76:d5:5e:
d4:8f:cf:59:da:7b:3d:0a:d4:2e:51:71:b7:e7:11:
e2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F3:F9:D1:91:31:D1:63:C0:96:7F:A1:0B:85:44:39:18:B7:8A:38
X509v3 Authority Key Identifier:
keyid:D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:88:cc:24:ae:b8:dd:ab:e7:ec:5b:c8:b5:9b:99:83:b3:67:
05:cf:30:14:16:fa:0b:39:7c:8c:c8:dd:12:46:62:f6:1b:c1:
09:e2:d5:21:8b:82:16:ad:26:bb:57:27:5a:10:00:61:03:e1:
66:6e:42:ad:d6:bc:c6:18:17:e4:08:aa:af:9c:3a:c1:95:02:
ac:16:d0:0a:ac:de:68:34:24:df:f4:d9:5b:14:fb:6d:bd:62:
0d:e8:6f:94:37:86:27:70:85:70:a5:c7:cb:6b:89:cb:d0:78:
a5:d5:2e:a0:fd:f4:18:01:c5:9c:33:d0:f2:98:80:a4:60:a4:
c4:5a:4f:96:16:60:c3:8b:36:2c:6a:9d:ae:19:d1:11:06:80:
1a:b1:8a:3c:64:70:86:84:58:78:6c:f4:fc:b9:a2:c1:00:77:
5a:b7:01:24:2e:be:2e:5f:2a:cf:b0:d3:f4:55:0f:17:14:95:
2a:35:ad:c7:ae:d8:2d:a5:91:8c:b3:67:41:eb:d4:2c:43:11:
d2:bb:66:8a:4a:51:86:4a:86:51:3a:fc:67:fc:bb:b5:23:5d:
04:81:9d:b8:1e:d4:c2:0b:34:5c:44:a7:b3:60:6a:8d:31:d9:
0e:1f:4f:2a:de:2b:1f:6d:f5:86:98:8a:f3:3a:e7:53:f8:bd:
30:f9:af:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:44 2025 by rpki-client