Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
File: lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft (raw, json)
Hash identifier: 5i8G9PASccws6UhVb2/X+ajofv2mR9s7RXQwZuSdl80=
Subject key identifier: 0C:DD:49:EC:DC:12:E6:87:28:6D:22:F7:D9:7A:63:EB:AA:1A:3F:70
Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213
Certificate serial: 01951135352B06C91A901AC17C2008BFF908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
Manifest number: 06D6
Signing time: Mon 17 Feb 2025 00:00:54 +0000
Manifest this update: Mon 17 Feb 2025 00:00:54 +0000
Manifest next update: Tue 18 Feb 2025 00:00:54 +0000
Files and hashes: 1: lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl (hash: RF/Ynk+rQvQWtIqAlEQaJ5o3hs/5t5LhvmPH5EPfxhI=)
2: qP3YU_S4LUHGi-PUyOS9YdXOrOg.roa (hash: 86gRYjmoaW5iHjfh3rXQG4yuY8yHQt9SBONVBj8bSuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:35:2b:06:c9:1a:90:1a:c1:7c:20:08:bf:f9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213
Validity
Not Before: Feb 17 00:00:54 2025 GMT
Not After : Feb 18 00:00:54 2025 GMT
Subject: CN=0cdd49ecdc12e687286d22f7d97a63ebaa1a3f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:11:89:2a:af:c5:e9:5e:00:7a:30:64:36:
96:69:f8:27:09:1d:a2:ac:92:90:3e:04:43:f5:9a:
d7:fc:9b:53:40:5a:79:2b:aa:42:5f:bf:37:01:ff:
e1:70:3f:1d:16:62:e7:88:a5:fa:8f:7b:69:8e:85:
3a:09:40:2c:67:f9:2d:f4:53:4a:6f:80:e8:d7:35:
c0:2a:22:6b:67:2f:c0:d8:22:c9:42:bd:5d:72:ca:
f4:6f:77:b2:06:1a:63:20:71:24:0c:df:ec:00:8b:
c5:cc:8d:66:96:7c:06:49:38:2d:1c:00:fa:a0:e3:
c1:3d:15:21:95:0d:5f:24:cb:14:c0:99:bf:38:1f:
b4:b9:07:81:83:85:77:99:c8:32:5b:01:eb:8d:41:
8f:fa:33:b3:83:ea:af:86:c9:f0:29:db:d0:00:21:
c9:b9:e8:16:53:12:fa:b3:67:10:ba:17:7e:96:33:
e8:e6:5b:85:8d:e2:2d:33:36:7b:92:44:d3:6f:fd:
76:9b:b2:fd:1c:97:6f:81:1f:59:48:49:cc:34:25:
f5:0a:9c:1a:9f:8f:f0:52:53:8b:f0:6a:af:c3:e4:
ed:aa:de:4a:23:f9:9f:5a:68:b1:78:b9:5e:25:e2:
ab:f0:f7:43:a3:ec:99:20:fe:af:c6:91:47:0c:f7:
d2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DD:49:EC:DC:12:E6:87:28:6D:22:F7:D9:7A:63:EB:AA:1A:3F:70
X509v3 Authority Key Identifier:
keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5b:1e:d6:02:40:4c:e4:ea:b4:b4:0d:96:b1:06:35:9a:b9:
71:2e:79:25:4b:41:58:a5:c3:a9:58:ef:67:13:5c:f3:10:a9:
7c:66:bc:74:52:a3:1e:8b:05:01:24:30:12:bd:9b:62:88:2c:
50:77:f9:37:a5:ad:8d:56:30:26:eb:61:48:c8:1e:27:fd:98:
ab:2a:26:24:c1:67:16:04:4e:81:c8:d3:d0:31:98:19:94:a9:
55:1b:b6:be:d9:4c:fa:76:e5:d8:5a:88:62:a1:56:43:84:1b:
5b:8d:7d:92:b0:9d:0b:b7:38:61:4d:d6:9f:6e:c2:75:3c:ea:
e6:27:5f:b6:e4:28:96:e8:8c:0b:37:3d:ee:68:eb:6b:28:0e:
fc:7d:dd:c7:33:fd:c1:f5:64:ed:71:95:7a:7e:f8:05:a6:36:
58:57:bd:4f:16:ea:9a:97:6c:93:2a:de:4f:4c:59:c3:e5:46:
85:d6:17:71:0c:27:0f:6e:09:34:bd:52:23:90:cf:b7:3c:f0:
c5:5c:ed:6f:1f:a1:9e:90:f4:1d:dc:c0:d1:41:69:b4:6b:1d:
71:77:0a:ba:7f:e6:b8:d5:68:c2:c2:d8:6d:ff:28:c3:08:7b:
98:20:44:f9:20:09:58:22:5c:a0:ab:f7:09:6e:e1:e8:03:79:
50:ac:6b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:23 2025 by rpki-client