Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: UaFPbeAptyliNsEVRnFDajA4xki0DV3mksP6nc9R+bk=
Subject key identifier: C4:4E:9E:2D:E4:AB:E6:D8:FA:AD:94:38:B4:6D:8D:C3:89:C2:17:2B
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 0194C49A0EDE1EB05BFC307E1D5F997EDD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 11A7
Signing time: Sun 02 Feb 2025 03:00:18 +0000
Manifest this update: Sun 02 Feb 2025 03:00:18 +0000
Manifest next update: Mon 03 Feb 2025 03:00:18 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: TWn/VoZwv+jC6C0v6W+zu/SPy6xlXk8qahZrqhExI6M=)
2: wiMZyenwx3I7xwOHgp4nhnMI51s.roa (hash: Qx/P/QV7oNsKOLP9lE01kMvoM8G9Aq9IlKHXWkjW/bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:0e:de:1e:b0:5b:fc:30:7e:1d:5f:99:7e:dd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Feb 2 03:00:18 2025 GMT
Not After : Feb 3 03:00:18 2025 GMT
Subject: CN=c44e9e2de4abe6d8faad9438b46d8dc389c2172b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:93:f1:e6:48:d2:a0:be:75:5d:26:63:0c:
3d:d2:09:fe:a9:0e:f5:f2:a6:66:1a:c0:94:59:63:
e3:0f:a0:78:e9:9f:0b:dc:be:79:b7:7e:67:3f:8b:
e3:de:f6:d0:9e:fd:ed:47:52:87:a3:c9:50:ad:76:
a5:1d:43:ad:a1:68:d4:33:50:69:80:a0:28:26:04:
86:84:0d:15:bd:0f:ab:0f:c2:10:c5:fa:d5:d9:c9:
03:81:63:2c:01:50:3f:8a:97:e8:00:1d:77:45:04:
4a:e7:27:ef:bf:1d:c5:29:01:48:0a:48:6d:87:99:
68:53:1a:a4:7d:5f:14:01:4b:16:ad:de:d9:18:44:
4f:91:f8:51:a6:26:cc:4c:32:8e:3b:14:c8:b6:42:
1d:72:64:46:46:d2:8d:3f:cf:17:47:46:7a:4f:ab:
31:a2:54:f3:35:33:25:7f:0e:42:ab:8f:ef:08:71:
13:db:71:4b:4f:6f:63:9b:a0:b5:96:40:1c:5c:df:
8a:18:ef:41:37:e3:13:1a:18:ba:9e:e9:71:f1:a6:
88:b9:b1:26:b0:ae:2a:4f:1e:9f:61:1f:4d:68:2f:
66:9e:2c:cc:a2:d2:18:60:eb:ac:d3:ae:25:a7:0e:
0e:01:44:64:e3:41:de:bb:a3:02:b6:20:60:a7:b0:
39:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4E:9E:2D:E4:AB:E6:D8:FA:AD:94:38:B4:6D:8D:C3:89:C2:17:2B
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:14:97:76:5c:47:14:98:0a:c7:3b:1d:40:e0:fb:42:a4:1a:
08:f8:9d:23:e4:82:5b:07:36:33:28:11:78:4d:0e:4a:81:b4:
48:a9:83:bb:e9:77:ef:98:93:c9:ea:53:a5:06:20:f7:77:f8:
d9:bd:2d:18:e9:8d:2a:96:4c:1d:f6:7d:7d:31:8d:a7:fa:f7:
ba:43:32:76:f9:d9:ba:99:f7:44:b1:f8:49:b9:56:00:68:0a:
62:32:e4:49:53:36:82:ea:91:77:23:8b:d0:9b:7d:bb:8e:6c:
b1:57:4c:28:cb:2e:70:5a:bf:4c:f2:3c:d3:f7:f3:99:03:8a:
bf:01:f8:89:bb:47:68:11:fb:23:9c:fb:f7:6e:58:ac:2d:62:
6b:5a:6f:3a:ff:da:e1:49:df:e5:ad:b8:f7:c4:32:18:0c:19:
8e:ec:f0:83:8c:16:d9:77:22:4d:c8:cd:a0:a2:4e:b8:67:90:
2b:ac:cc:7a:3f:ae:51:1e:a9:0a:f4:9d:e3:02:d4:4d:4c:34:
1b:22:fd:07:7b:8b:1c:f3:d5:4a:06:6c:9d:b0:f5:c4:e9:1a:
55:da:98:e2:d9:e3:66:e6:a2:76:1b:75:e4:ab:1a:14:86:d7:
04:f0:99:fd:4a:75:e7:d6:cf:c5:f1:37:eb:06:2a:a6:81:73:
17:f7:5d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:49 2025 by rpki-client