Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json)
Hash identifier: 3iZfOY5BbSbWx55y2Uc57CTDoKvayuSxyXSPbhiYtLk=
Subject key identifier: 63:B7:F4:1F:0E:6A:35:5F:66:0A:E2:F7:61:2E:F7:C1:F4:2D:A8:4A
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial: 01950F0F6F1E7C7F2F253B211C624B1BCF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 14:00:24 +0000
Manifest this update: Sun 16 Feb 2025 14:00:24 +0000
Manifest next update: Mon 17 Feb 2025 14:00:24 +0000
Files and hashes: 1: DTYyZuafFj4qXWfudssAoo7YyUc.roa (hash: XFaAmLI0e2ldAKL+t4MvCZW7ieWrsLzA21ljUa5d0Uc=)
2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: +SKYz7y3pvRw8d9Zam8I3djXdq2tEhhp6UKudCdjEWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:0f:6f:1e:7c:7f:2f:25:3b:21:1c:62:4b:1b:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Validity
Not Before: Feb 16 14:00:24 2025 GMT
Not After : Feb 17 14:00:24 2025 GMT
Subject: CN=63b7f41f0e6a355f660ae2f7612ef7c1f42da84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:72:f6:34:ed:29:ca:6e:61:e1:1b:20:12:
52:09:c6:ab:d9:d9:62:94:1c:12:80:2b:5f:18:d3:
62:d7:fc:f0:ed:d9:e2:c0:72:0f:e7:18:02:19:84:
3f:3e:20:78:12:82:a2:66:a6:ee:13:44:9a:a5:50:
d7:03:dd:7b:2d:39:3b:13:d2:79:6e:e1:8e:ea:45:
21:3d:8e:33:84:7e:54:1b:1f:f8:ca:c4:26:58:ff:
ae:bd:68:eb:c7:fe:88:e0:01:0b:3d:d5:e7:33:15:
ed:1c:b6:22:7d:c1:a2:cd:2c:63:61:24:42:1c:a8:
7f:09:54:30:1c:ed:20:09:84:7a:3c:79:df:4b:3b:
4f:8b:06:d4:d9:46:67:8d:2f:94:ee:eb:5f:28:2d:
ff:2c:e8:db:f8:91:eb:20:fa:fe:ea:01:0b:1d:9b:
a0:20:e1:70:bc:77:87:b1:fd:1e:f6:c0:41:a5:85:
8c:f6:68:32:77:a7:bc:28:03:74:e5:c9:50:1a:c1:
02:c8:02:48:b9:a1:ba:73:3f:11:62:78:5a:7f:f4:
8a:8f:18:11:f3:89:29:fa:4c:b7:9d:ed:31:1b:92:
c2:b5:55:34:9e:ea:34:a2:1a:9f:66:fe:fd:4f:07:
a3:40:58:5a:b7:c8:eb:af:1d:a9:5d:a4:fe:05:37:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B7:F4:1F:0E:6A:35:5F:66:0A:E2:F7:61:2E:F7:C1:F4:2D:A8:4A
X509v3 Authority Key Identifier:
keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:80:07:93:b2:9c:06:9e:ec:6c:15:96:5a:ba:d5:1c:58:61:
e9:7e:b3:0f:be:c0:73:52:81:17:d0:7c:38:29:6c:53:c8:81:
93:af:f5:a3:0d:64:b7:7a:13:65:2a:5d:f5:68:a8:f6:12:b5:
52:cf:36:43:03:74:68:de:9e:68:0d:1a:eb:80:17:35:20:1f:
f5:40:a5:89:66:f6:f1:5f:cb:ad:f1:3f:fa:4b:e1:ae:57:00:
ef:89:e5:5e:9f:7f:28:6b:f9:63:f6:df:36:b3:67:ef:4d:72:
15:9a:6f:df:57:57:00:b6:6d:6f:32:44:82:8c:46:bd:e5:85:
39:14:02:47:66:77:d9:89:9c:7c:1c:97:89:72:8d:12:37:c5:
2f:37:3c:0e:84:c1:ff:ec:f5:b8:c1:3f:0f:21:c1:87:c7:23:
63:cb:3e:84:27:8d:1d:ed:8c:60:54:c8:da:50:76:54:cf:63:
e3:f4:38:0d:f6:47:a9:cf:cb:d3:42:b3:0d:aa:8b:49:d4:bb:
53:12:34:78:b4:64:a9:36:75:e8:5a:ce:56:d9:7a:25:23:23:
27:de:82:e4:a4:23:a2:d7:8f:1d:3c:15:0a:49:f9:a4:29:9d:
0c:18:7d:2c:cd:3b:f6:b9:43:b5:26:a8:d5:89:d4:93:ba:a6:
44:77:75:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:42 2025 by rpki-client