Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
File: exi86iJ6TqxhtTALME3u8UaU3JE.mft (raw, json)
Hash identifier: 3OeV6mqf4bXIhXsThchKm1shfKhL47gTRuWo0/43C9M=
Subject key identifier: CC:46:9A:93:33:48:0A:57:D9:55:21:9C:9A:02:34:BB:25:69:86:04
Authority key identifier: 7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
Certificate issuer: /CN=7b18bcea227a4eac61b5300b304deef14694dc91
Certificate serial: 0194C3F5D4ADCE2778051A5261B33A650F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
Manifest number: 097A
Signing time: Sun 02 Feb 2025 00:00:55 +0000
Manifest this update: Sun 02 Feb 2025 00:00:55 +0000
Manifest next update: Mon 03 Feb 2025 00:00:55 +0000
Files and hashes: 1: exi86iJ6TqxhtTALME3u8UaU3JE.crl (hash: W48pKe/HxQ3hPVbYrd4Wg3+GENDd2LJ7Hq0ZwPFXMJY=)
2: lQ20cZ9OUrcSqb6gIxN40wQjpAk.roa (hash: WgCV5F0Lo1vsx71+iRrim7ywAzohxnYAfe2pxSvyfPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:d4:ad:ce:27:78:05:1a:52:61:b3:3a:65:0f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b18bcea227a4eac61b5300b304deef14694dc91
Validity
Not Before: Feb 2 00:00:55 2025 GMT
Not After : Feb 3 00:00:55 2025 GMT
Subject: CN=cc469a9333480a57d955219c9a0234bb25698604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:96:e4:1e:8f:28:f8:9b:7d:de:7b:48:4c:
44:ac:96:49:3d:6e:64:cb:9c:8a:fe:b5:33:03:f5:
0a:3f:a9:c7:b8:d3:42:59:64:48:b9:68:41:19:db:
35:e5:c6:45:8a:29:5c:c8:18:ad:14:f9:b0:14:4b:
b4:49:c8:d8:74:51:e7:a9:8d:28:90:c5:fe:a4:66:
9c:ca:60:d4:d6:ec:38:57:89:82:71:06:86:20:cf:
84:5c:36:7a:b4:3b:01:b6:03:0d:8d:73:54:03:64:
46:7d:9a:38:40:be:4b:04:34:16:1b:0e:d3:23:c3:
cd:93:64:fa:67:bf:a7:d2:1e:f7:10:f5:d6:b3:7f:
f3:cd:b5:38:a7:fc:3e:bd:25:e5:9f:0a:31:f8:ea:
6f:47:7e:20:93:5e:16:af:f5:a4:cf:6f:32:35:86:
93:bc:69:fe:bf:99:f8:d1:37:61:57:65:db:a2:d7:
3a:1c:b6:94:5b:db:7e:68:86:00:db:51:a1:70:b9:
98:b5:d4:85:83:a0:f3:08:b2:2b:1d:0a:5b:20:6c:
40:80:3f:16:a1:41:fd:29:ef:6c:91:e5:9a:69:4a:
c9:e2:2f:17:c4:69:68:9d:59:3e:a1:f3:9f:04:02:
b7:00:2e:6d:c3:3b:ec:96:12:3a:ce:a1:97:db:d6:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:46:9A:93:33:48:0A:57:D9:55:21:9C:9A:02:34:BB:25:69:86:04
X509v3 Authority Key Identifier:
keyid:7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:58:79:4d:26:a6:2d:67:6f:5d:8f:d1:2f:ec:ef:6a:33:4e:
03:32:d6:fc:c4:4d:b3:24:5b:36:c5:4a:c8:35:a0:bf:a6:62:
73:e1:0e:ca:2a:2c:d2:45:c0:6f:87:65:0c:84:36:49:7b:4f:
ac:5f:cf:c1:c3:6b:26:09:63:e4:4d:c3:97:b5:cd:d0:bb:05:
7d:11:6d:cd:03:48:28:c5:14:e7:da:c3:bf:8b:2e:34:52:3e:
25:6d:10:87:bc:51:26:bf:2b:8a:ef:d3:50:ef:bb:1f:b3:31:
9d:5a:81:8f:5e:0e:b0:d7:d9:83:04:8c:cb:62:41:e1:d5:f1:
fb:c8:2d:96:fd:2d:10:c5:bc:64:4f:d2:a7:2b:f9:4e:31:fc:
08:d1:19:a7:cd:2e:12:b8:25:23:78:22:a7:6c:3b:cf:25:64:
75:be:3f:5d:04:60:29:f2:82:1a:00:9d:04:e9:9c:8b:96:86:
8c:3c:8e:25:ab:4c:b5:13:ae:9f:b8:c2:39:26:38:c2:04:a9:
65:2d:10:3b:70:20:be:05:9c:fa:86:ea:a1:54:2e:17:25:4c:
30:32:d0:34:62:c5:f8:f1:70:11:ea:f0:7e:37:ee:7b:80:f5:
d3:ad:21:64:9f:7a:65:e7:66:c1:71:c0:09:98:1d:9d:ca:7f:
80:0a:b1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:52:47 2025 by rpki-client