Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: qalMXxNJgns/4f2cOmOLvicAdv/XNlu643a7zIqz5hs=
Subject key identifier: 64:B8:32:96:D1:FD:0A:8B:2C:CF:F4:BC:D3:E4:7F:23:4E:74:12:02
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 01951210A8B36DEE6938A8DCA5708FD32477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 0F7E
Signing time: Mon 17 Feb 2025 04:00:36 +0000
Manifest this update: Mon 17 Feb 2025 04:00:36 +0000
Manifest next update: Tue 18 Feb 2025 04:00:36 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: 3G/Cmy+mnuT6xVRuVCtbVLBicgd3J3dPQjHY1boOFdc=)
2: zwZQF0vycCjVTXKGPdvngCC8DiM.roa (hash: 3IwNNQnob+DFL0Pb8HdxIF5jocGgq3KKZc4IEORySTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:a8:b3:6d:ee:69:38:a8:dc:a5:70:8f:d3:24:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: Feb 17 04:00:36 2025 GMT
Not After : Feb 18 04:00:36 2025 GMT
Subject: CN=64b83296d1fd0a8b2ccff4bcd3e47f234e741202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:d3:61:cb:b2:28:e4:b3:ce:42:48:40:6c:
7b:27:2f:5a:1a:2d:63:2a:5c:4c:c7:21:48:4f:ea:
55:40:2a:32:fd:f9:b9:e8:8f:e1:f0:55:39:40:fb:
0c:8a:07:b0:a9:67:55:dc:4f:9b:b3:78:bb:c7:38:
88:49:da:c8:ba:5a:25:be:12:11:5d:40:4f:b0:3d:
8c:9b:81:25:ba:e2:f4:77:cc:11:46:1a:aa:af:2b:
80:bb:cb:a6:f7:fd:b9:24:fd:a9:e8:21:b3:af:a2:
49:ae:26:f1:df:c4:bc:23:d8:fb:30:4f:04:72:f1:
b6:b1:d3:cb:8b:f2:ea:90:eb:57:f8:b6:08:56:fc:
2c:ed:5e:87:b5:0f:be:9e:9f:51:c5:df:65:e1:7b:
75:28:d0:1b:92:7a:da:2a:ff:cc:be:0d:ae:3a:65:
45:b9:1f:55:a5:eb:f2:66:aa:f6:ff:2b:50:8d:0c:
46:ef:4b:fc:3e:6a:c1:71:38:99:71:cb:aa:3a:ac:
85:85:b0:8d:ee:45:d2:0e:eb:3a:d0:31:58:d3:ef:
04:60:cc:d4:4e:1a:62:99:6a:35:b6:9a:6b:8a:41:
e5:db:92:b6:8b:c4:fb:b6:84:b7:a4:fd:13:f9:30:
ab:9f:c4:bf:59:77:98:6d:c1:cc:16:75:8b:70:66:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B8:32:96:D1:FD:0A:8B:2C:CF:F4:BC:D3:E4:7F:23:4E:74:12:02
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d2:35:be:57:b7:81:29:59:8d:7d:95:9e:3c:e3:dc:00:1f:
5b:b0:b0:de:48:5e:63:30:5f:e6:ef:ee:e5:d2:54:88:9d:4d:
f4:7c:8d:a2:46:1b:be:e5:a1:61:9d:7d:c3:bd:b0:7b:bf:f3:
ea:de:9c:2c:57:b3:d6:4c:bb:8b:2f:50:18:e3:6d:a4:28:36:
90:d6:82:77:96:32:9e:f6:a8:10:e1:90:ba:10:a6:ea:76:d6:
80:d9:de:a5:15:3d:3d:06:96:3d:c1:32:74:5c:e0:d1:a0:9c:
ba:fa:7d:98:20:a4:8c:74:4e:b3:7a:71:6e:fa:9a:95:bf:b7:
b9:fc:d1:4d:0c:c5:e4:da:61:2e:d8:69:5c:6d:23:e3:0e:7c:
bd:06:49:3e:09:04:5d:ec:f5:ba:2d:f3:1f:6b:f3:39:d5:09:
dc:8e:91:89:c0:f1:59:21:fd:74:3e:f0:a9:75:0c:e6:df:69:
8a:18:d6:c0:e9:c4:8a:f9:82:da:ac:30:54:c6:72:c9:e4:94:
b9:06:a1:77:64:e1:44:12:bd:f9:cd:14:dc:87:9e:80:34:ca:
7b:cd:c9:ea:7a:9f:18:2c:8d:9a:7d:b3:05:a6:84:35:89:59:
cb:65:ae:32:04:8c:dd:bc:c7:1e:2c:f8:bd:93:ab:ef:63:5c:
d6:fc:be:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:16 2025 by rpki-client