Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: KKd0ZOzoPtUsuUwjT1ougRkbAGKxZ48YvJ2h+pg7ekU=
Subject key identifier: B9:49:2C:CA:B0:C3:BC:9B:F9:C1:85:15:AD:04:CE:E9:C4:D7:4C:C5
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 019510C7C28874370BB92D87A043C07D3098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 13F3
Signing time: Sun 16 Feb 2025 22:01:21 +0000
Manifest this update: Sun 16 Feb 2025 22:01:21 +0000
Manifest next update: Mon 17 Feb 2025 22:01:21 +0000
Files and hashes: 1: 7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa (hash: l1BU7g4Ila9ufWlHn68dydGGRXENxO9riUoJiMBfymw=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: WoM240G6PJaW+e2VuBJXYnv0hNXLn0yMGQNtY14uh8U=)
3: UJ4AA8lthTvUaOv8y96F5tCFgzY.roa (hash: tgN2dNaoq5w5rynmNpRaU4NnYl8mkFWnYFqCjapx3rI=)
4: nRz9AftCLig4OmS0E1eBTIrPa5M.roa (hash: ea2h97J02X030CkXXWTZE1BGZvnjhrqY95EK1+tYFdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:c2:88:74:37:0b:b9:2d:87:a0:43:c0:7d:30:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Feb 16 22:01:21 2025 GMT
Not After : Feb 17 22:01:21 2025 GMT
Subject: CN=b9492ccab0c3bc9bf9c18515ad04cee9c4d74cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:5e:ae:aa:0e:5f:2d:1b:2c:a4:a2:17:d3:
e5:2a:10:ff:0c:5c:6a:aa:d0:dd:31:ad:f9:cb:5f:
76:c4:51:f7:13:59:6f:1b:d3:4b:38:6b:91:31:bc:
2f:4b:12:07:44:8a:b8:71:42:0a:8f:2e:8d:01:a7:
a5:dd:01:6e:ef:dc:90:63:5a:df:8c:9f:22:f1:06:
be:d1:f5:2f:e9:7d:83:ad:79:85:21:e9:a6:b8:09:
63:e3:27:c4:e7:15:1c:f9:37:42:6e:85:0e:d7:72:
23:4f:7b:a3:71:f0:af:d2:fd:76:f9:f8:cb:d8:66:
73:10:f8:86:21:86:dc:fa:25:8b:99:84:99:1c:86:
04:e6:c7:0d:fa:2e:26:fd:12:9e:4e:56:8c:66:f6:
17:78:fb:20:d8:c1:ad:29:cb:fb:0b:09:78:3e:31:
98:74:dc:31:1f:50:0a:86:62:b9:ec:b5:48:7b:11:
23:0f:4e:66:f0:c3:89:45:fe:1f:60:cc:48:71:c2:
9f:ce:2d:f3:6e:c7:16:66:d0:88:d2:7b:eb:eb:47:
1b:a9:b4:48:b5:6e:b4:bd:28:d5:43:30:6d:0d:53:
c4:83:5e:29:96:9b:53:58:8c:b7:aa:47:29:29:16:
78:00:a5:ea:e0:9b:71:60:f2:20:86:95:29:66:c1:
6b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:49:2C:CA:B0:C3:BC:9B:F9:C1:85:15:AD:04:CE:E9:C4:D7:4C:C5
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:60:e0:f4:8a:80:9f:95:96:5c:9f:e1:89:04:2c:e8:a0:67:
0b:3e:ac:b7:a7:eb:f4:55:b8:b3:54:27:23:52:e6:ce:b0:ef:
ef:13:2e:6a:f2:99:9d:aa:49:e1:ae:e1:84:34:7f:41:04:20:
75:6f:60:68:91:c9:91:80:35:ea:dc:fb:eb:31:4f:41:16:1c:
3d:03:08:83:65:7d:6a:10:7f:9e:86:cb:66:79:c4:73:00:f9:
8a:20:12:a7:e0:8b:cb:94:da:74:a5:64:24:8f:a3:31:bc:4c:
ae:f2:d9:6b:2e:3d:e2:8a:62:8f:c6:41:72:a9:8f:7b:88:53:
c6:22:7b:13:c6:b9:7f:b4:a4:8b:a5:3c:e9:16:70:b3:04:a3:
51:99:a1:7a:7d:e0:f0:9e:22:fa:8d:38:52:a6:d7:1c:77:47:
8a:d4:34:96:d9:1e:55:60:1d:44:cf:73:89:54:bc:63:66:4c:
c3:5d:4e:e1:69:f2:97:c2:ca:e0:18:0c:f0:56:c2:f4:e4:80:
66:ab:23:e4:2d:33:56:28:32:63:a5:94:1a:d7:e4:60:58:70:
25:ee:34:46:bb:9a:90:86:8d:89:df:ab:5c:f0:90:94:d9:7a:
fb:e3:3a:8d:9f:99:02:55:14:3a:5d:49:80:6a:08:2c:40:06:
19:a4:1e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:03 2025 by rpki-client