Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
File: k9TErXMeRe0yCi84q3C3p7_36nk.mft (raw, json)
Hash identifier: ST3YHzV1/vipsLupn4cE2b0X9R4jUoEmciytDu/meEs=
Subject key identifier: 11:30:E4:5E:6D:87:72:6A:68:1A:A2:CB:CF:83:3E:28:A2:0A:07:84
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 0194C4D188E000774C2EE778198CCC391DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
Manifest number: 0CF1
Signing time: Sun 02 Feb 2025 04:00:53 +0000
Manifest this update: Sun 02 Feb 2025 04:00:53 +0000
Manifest next update: Mon 03 Feb 2025 04:00:53 +0000
Files and hashes: 1: QcUww1gBut5P9LED1fX9vTB1tFI.roa (hash: L8MG8T6h4oWceQxYV3j9aYR1Fk9m/+E+nrLcLpw/ZNc=)
2: Sb2fgxISW-k8wA_jVXd4LPL4sOw.roa (hash: LphNHUTsgnKV2YEr+uySGx/2aJwsuve38PTMVdLOS6w=)
3: k9TErXMeRe0yCi84q3C3p7_36nk.crl (hash: rmV+kbr1kWvYz9C+qetMGt0LCbzuK9Ybs4enGR7aHVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:88:e0:00:77:4c:2e:e7:78:19:8c:cc:39:1d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Feb 2 04:00:53 2025 GMT
Not After : Feb 3 04:00:53 2025 GMT
Subject: CN=1130e45e6d87726a681aa2cbcf833e28a20a0784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:e6:91:1b:c2:1e:6f:3f:c4:3e:08:a6:93:
94:db:24:63:05:42:d8:0b:5b:4b:cc:ea:ad:4a:34:
1b:ec:b0:19:4d:7c:8e:39:3d:2d:bf:f7:2b:48:3b:
a9:b6:47:92:4c:f5:12:36:05:0d:c8:72:01:78:0f:
cd:96:d0:ad:d1:29:15:bd:27:71:23:fb:fe:38:2f:
46:f6:a4:29:96:a1:66:a0:a3:47:4a:7e:a0:f1:4a:
c0:e1:37:7a:e6:cd:f7:81:20:f4:0d:aa:03:dc:f8:
6a:7f:63:11:54:a7:fd:bb:9f:8d:9e:0b:2f:c5:b2:
63:29:09:11:20:4b:bc:b7:b2:38:a9:e7:b3:8a:ad:
0b:c1:0a:bf:d9:c0:c2:da:59:86:6c:0f:f6:09:8d:
85:ba:62:6e:73:f8:a2:df:9c:58:da:0b:ed:0f:c4:
da:cf:2e:c1:7f:31:e7:1e:32:84:7a:29:8e:1b:11:
f8:e5:c5:49:ed:55:65:cf:3c:4c:16:33:53:01:4d:
15:2e:e5:6f:1d:60:ac:93:28:16:1e:99:17:64:ff:
a5:89:b4:30:31:6e:8f:07:30:73:e9:10:14:37:b2:
3c:4c:4e:65:f3:ac:4d:e1:1a:ee:61:6e:e9:60:2f:
34:8e:27:ee:d4:ce:a6:50:82:3e:9a:a2:39:2c:61:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:30:E4:5E:6D:87:72:6A:68:1A:A2:CB:CF:83:3E:28:A2:0A:07:84
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9f:4c:a7:33:f8:a4:2d:39:ac:a7:89:94:87:9a:84:f2:8b:
f1:c9:c3:0d:4a:65:e3:1a:5e:ad:c8:1a:f2:54:ba:ab:37:dd:
74:bb:0f:9e:bf:0e:51:7e:5e:85:4e:6b:0b:d5:92:1d:51:ff:
2d:b1:f4:59:6e:3f:93:6e:10:bb:49:68:12:7a:11:a3:25:84:
47:91:65:dd:07:aa:98:06:f7:ac:a6:2d:e8:a4:e0:49:c6:97:
c2:76:dd:0d:fd:88:66:8e:0a:ee:1c:9d:da:bf:95:8c:20:66:
6c:1e:fc:a5:46:2d:6d:0d:4a:d1:82:cb:48:a7:fb:4f:75:38:
0f:25:94:b0:b0:bd:93:9f:60:e1:2f:78:3a:2b:06:e4:b8:8b:
aa:fd:0d:04:64:62:24:1f:14:5a:99:41:7b:bb:77:dd:f5:04:
70:7c:0a:5c:2a:af:81:9d:0a:ef:6c:16:c3:38:c9:d1:e3:23:
b0:cb:ab:e3:ea:52:c5:f7:48:6c:5a:bb:be:0d:de:67:14:cc:
c7:21:27:84:e2:e4:2c:5b:03:24:40:2e:61:3a:0d:9f:14:3d:
65:dc:53:2b:f9:5e:1e:c0:a1:30:be:18:d3:d0:2e:ab:c5:16:
e2:5c:a9:5a:c3:74:6f:ad:0e:13:ce:11:07:52:12:d5:8b:f5:
93:56:93:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:54 2025 by rpki-client