Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json)
Hash identifier: SP6mclWnv3tWri4GLF4jHZ8xyWp/tNCxZBVDPmlZ+Bw=
Subject key identifier: 2C:B2:EB:1C:9C:45:C3:94:F7:4B:0E:88:6D:0A:88:E8:21:0D:F6:26
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 0194C4D15ED166B84389037828E2D13BC568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
Manifest number: 0D2A
Signing time: Sun 02 Feb 2025 04:00:43 +0000
Manifest this update: Sun 02 Feb 2025 04:00:43 +0000
Manifest next update: Mon 03 Feb 2025 04:00:43 +0000
Files and hashes: 1: t79WdBqxFFntJ1dx66Q8iAsYk1A.roa (hash: Pk/lATHQMHKBJ7PlIPPnor0o8ARLjsDurmPSUe+LfCo=)
2: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: 27uWcKkyJtF0ZGyNdDTWWLCUuxa93TuQw3usGhR6z1E=)
3: vM1WQhwz3cRdhRzRWZYRS2EG35U.roa (hash: 6cZcrnHWZ9ymPZFFF87v+vfASbgITAqQf6OR2I+DcbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:5e:d1:66:b8:43:89:03:78:28:e2:d1:3b:c5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Feb 2 04:00:43 2025 GMT
Not After : Feb 3 04:00:43 2025 GMT
Subject: CN=2cb2eb1c9c45c394f74b0e886d0a88e8210df626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:1e:31:a2:a9:2f:14:e7:73:83:81:96:e2:
0e:43:f6:78:7d:11:95:53:6a:15:2b:93:1f:e8:5d:
80:c8:a0:4e:54:3e:b6:a3:dd:e4:b5:14:8b:50:fe:
ac:70:d0:41:f7:7c:af:16:26:55:9f:ed:a3:b8:4a:
72:ee:c4:a4:f3:33:c9:d2:6b:ad:f0:4c:31:78:a1:
ea:0e:59:ba:74:c6:66:37:24:99:d1:e1:e1:a9:f1:
cc:2c:1f:38:51:d5:3a:db:ed:db:ae:e2:b5:2c:25:
d6:e0:a5:ae:b8:0a:56:6c:e1:d9:72:ca:bd:2e:39:
a5:20:38:7a:cc:ca:49:c8:fc:30:47:07:fb:e0:54:
3e:79:2c:d2:bd:37:f8:cd:01:79:38:d5:bf:a6:56:
38:9d:fc:99:d2:92:8a:16:bc:81:a4:45:a5:5a:08:
70:bf:51:d6:73:bb:38:20:10:c8:77:34:0d:d0:70:
b3:c0:14:0b:08:56:15:e7:ab:3a:ff:58:26:48:4f:
be:45:95:89:5e:a4:b5:a6:de:bb:1a:3c:9f:65:e3:
ab:1c:b9:60:3e:87:1e:5b:bb:08:0b:66:2d:9d:d9:
1f:64:04:3e:ec:bc:af:d0:a8:0d:7b:89:14:0e:76:
2b:f5:e9:81:fb:71:ae:4e:0b:af:32:c4:58:fa:ec:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B2:EB:1C:9C:45:C3:94:F7:4B:0E:88:6D:0A:88:E8:21:0D:F6:26
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b7:99:0f:85:d0:89:da:e9:a3:93:00:99:c7:2f:dd:d5:c5:
e2:79:29:74:8a:15:80:22:ae:16:3b:c6:14:c3:0f:46:b3:86:
ae:2c:32:6d:2b:9d:63:02:44:15:3e:2c:61:24:78:99:84:48:
a8:34:07:0c:fa:88:11:ca:de:c3:8c:78:f3:40:fa:6a:31:e8:
d3:6c:a9:72:1d:5a:ee:04:29:8d:04:f2:1b:d2:9e:5b:b8:58:
bc:1b:92:85:d4:d5:7d:9b:7a:6c:41:60:8b:78:2d:24:27:d5:
a3:66:94:4f:79:ee:27:78:cc:7e:b8:1e:39:9d:40:02:93:34:
b3:4f:fa:1d:46:8d:0f:0b:50:e0:f2:71:1b:ef:dc:66:0f:92:
c6:6f:07:2d:6a:43:b5:29:35:89:b0:3b:71:20:3c:5f:15:b3:
85:f0:3d:6c:46:01:13:cd:d5:ad:2e:c9:fe:05:c9:ba:2f:43:
73:17:a1:1e:df:89:d8:9b:15:36:15:b9:0d:94:69:b7:cd:e9:
2a:4d:e3:6a:a7:4a:aa:ac:55:87:08:8e:6d:16:11:d2:60:fd:
62:04:00:0e:f4:89:ed:e7:69:41:9c:19:6f:45:7f:91:01:dd:
39:5e:a7:cd:07:8c:1c:15:82:02:71:92:fd:ef:7c:8e:4e:d7:
10:16:b7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:33 2025 by rpki-client