Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: LLmmSr5YosXi3YJzd0liyL6WtX5amARL6ISU2cftF1E=
Subject key identifier: 4E:14:F6:DA:D1:13:6D:70:B2:B3:83:76:5B:79:FA:E9:81:71:FC:44
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 0194C42C1D288CABE4F7540D026ADB3AF06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 142C
Signing time: Sun 02 Feb 2025 01:00:12 +0000
Manifest this update: Sun 02 Feb 2025 01:00:12 +0000
Manifest next update: Mon 03 Feb 2025 01:00:12 +0000
Files and hashes: 1: WntKpaBL0rwf0OHtGIxbqp43a48.roa (hash: RD+6zKliyi529qWw5SlqL86NJOiZz+f7ljpnnMAUmvo=)
2: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: qaIiOG7Ev6vB5H2dZq5iz49y9GRG3TV953lggwsmGfo=)
3: wGTkAR_0sF92lgaxXY9nSUR4GIc.roa (hash: eDBRIXJLntwza/xwaubebQOnZv9qj50gWoqkIryMxT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:1d:28:8c:ab:e4:f7:54:0d:02:6a:db:3a:f0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Feb 2 01:00:12 2025 GMT
Not After : Feb 3 01:00:12 2025 GMT
Subject: CN=4e14f6dad1136d70b2b383765b79fae98171fc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:c3:c3:0c:3c:46:f0:19:25:8a:bf:c1:29:
70:cc:7c:e1:f9:15:49:96:1e:05:f1:29:9e:8e:85:
cb:c7:04:41:98:8d:dd:db:a4:3e:20:36:2b:5d:e3:
7b:5c:b7:0a:58:11:f1:34:3b:3b:f3:a1:d1:0a:74:
eb:76:01:06:9f:9d:10:7e:b8:96:79:24:31:a8:be:
9e:14:0e:f2:03:f9:01:20:15:da:86:d7:44:a9:de:
48:76:c6:ee:1b:30:df:c3:18:52:f1:8a:9c:65:98:
02:2f:db:75:5d:55:03:1a:f2:05:1a:c0:99:14:fa:
9a:7d:65:84:cf:ee:a2:29:55:78:09:f1:14:be:64:
9d:28:5c:58:58:35:16:1d:e0:95:44:b4:9b:95:37:
ee:76:f8:35:fd:49:82:9b:5d:9a:57:7c:ac:b0:5d:
93:23:a7:a8:39:93:bf:f1:5d:52:93:4e:36:e1:a9:
64:07:b8:b8:76:2f:2f:3e:3f:d9:c3:4e:e8:86:e8:
37:24:ec:d7:d5:46:7b:b0:16:d4:c4:ae:62:4e:e3:
53:3f:21:3f:fd:ab:57:0e:ad:1e:f9:89:95:83:56:
6a:07:b2:2c:80:b9:d7:89:c9:1d:9b:ec:c3:38:b7:
35:ba:16:1e:95:60:f9:f6:56:0e:73:5e:35:db:7e:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:14:F6:DA:D1:13:6D:70:B2:B3:83:76:5B:79:FA:E9:81:71:FC:44
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5d:2a:3c:39:15:18:cb:82:4d:d4:51:63:12:23:7d:63:ac:
3d:11:e1:ca:02:3b:a3:35:01:d7:aa:dc:03:9c:d6:1a:8c:52:
bb:31:15:59:45:84:0f:d2:e4:0f:e1:38:26:c6:23:4a:24:8a:
88:da:c5:85:17:da:f9:c7:d0:32:83:50:5c:3c:96:68:94:86:
d8:e9:ad:0e:1f:ef:10:b6:17:d6:e0:b8:b5:f2:04:b2:55:d8:
58:bb:0c:11:bf:72:22:56:8f:0c:f9:bc:29:b7:fb:57:25:c9:
1f:17:45:3b:64:5a:01:4b:a7:09:dc:33:72:79:4a:3d:4d:3f:
5e:e8:78:9c:d9:b2:33:7f:17:55:5c:c7:8a:bd:91:fe:22:e1:
8c:d3:d9:b8:8f:5e:01:33:e0:f0:66:57:90:d2:7d:0d:b3:95:
4c:29:15:c2:0f:d4:b6:3f:f1:ff:1f:13:95:fd:a9:9f:7f:a5:
fd:24:f8:36:06:f1:93:c4:b8:33:22:1d:43:0b:f0:9d:4c:af:
86:5a:12:8a:15:06:0b:3e:86:fe:7f:34:23:bd:1a:8e:dd:c0:
dd:15:98:9b:d4:29:00:fb:83:2e:08:cf:a7:48:73:60:22:00:
49:00:fd:b8:51:41:4c:f7:cc:1b:3c:3f:aa:4e:85:f1:c1:c6:
75:18:77:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:44 2025 by rpki-client