Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
File: dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft (raw, json)
Hash identifier: jk9tHx0iXnDNWGn9idab4JFq68aN23Wga7yEs8aQXKw=
Subject key identifier: E5:14:06:AF:47:59:6F:CF:94:41:AC:8B:AE:AA:A7:96:3A:71:2A:FA
Authority key identifier: 75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
Certificate issuer: /CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Certificate serial: 0194C507DA964B8542B698AA38900C61A90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 05:00:13 +0000
Manifest this update: Sun 02 Feb 2025 05:00:13 +0000
Manifest next update: Mon 03 Feb 2025 05:00:13 +0000
Files and hashes: 1: ITU9N73wNSwtRlo0RIBRFcqyI18.roa (hash: tZ8waA6UjAXlSU4mKy5eCZ0yrObYCvk+4Q5dVUfAZCs=)
2: dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl (hash: nCz6cRWTF48gpiF53I8KM0JFj64p0gv6D16QtWCZG1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:da:96:4b:85:42:b6:98:aa:38:90:0c:61:a9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Validity
Not Before: Feb 2 05:00:13 2025 GMT
Not After : Feb 3 05:00:13 2025 GMT
Subject: CN=e51406af47596fcf9441ac8baeaaa7963a712afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:90:e7:ac:7d:10:ae:f7:ad:1e:aa:46:53:c8:
56:c2:94:f3:54:c0:51:4b:90:e1:7a:ee:ad:15:e6:
f4:97:70:b9:b3:c0:aa:c1:b6:8e:5d:1c:70:8b:1e:
c3:9b:b2:fc:62:e0:87:15:77:e4:a7:83:73:40:e4:
a2:e2:5c:d9:61:8f:b7:90:22:36:37:01:ed:5a:d6:
17:fd:67:1b:a8:c6:95:06:62:35:77:83:99:88:30:
38:81:ed:15:13:d9:d0:ae:0c:27:6a:89:6b:39:3f:
0f:44:45:b8:f0:52:9e:b3:8d:8c:0c:f6:8f:ce:6d:
8b:6a:2f:9a:1b:05:3e:64:f9:62:7c:42:d5:b8:53:
03:9c:5b:4f:9c:a3:a6:f8:70:26:93:bf:b1:e2:06:
50:31:92:92:78:4b:68:51:f9:27:99:20:96:99:4e:
0a:37:37:d7:f1:1d:8a:08:7d:39:2e:78:c2:3f:39:
f4:12:92:60:6b:b5:55:4c:e4:37:ae:9d:9f:87:89:
50:85:7d:6b:07:7c:a4:8f:82:3f:68:6a:94:a6:16:
31:b8:0f:bb:d1:c2:1e:b3:22:d1:62:cf:73:32:67:
95:05:c3:aa:62:0e:40:ba:0e:06:a0:73:4a:3f:4c:
b0:48:33:81:8d:ca:40:d8:94:a0:cb:e7:12:78:4a:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:14:06:AF:47:59:6F:CF:94:41:AC:8B:AE:AA:A7:96:3A:71:2A:FA
X509v3 Authority Key Identifier:
keyid:75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c6:5e:4d:b1:62:df:1a:53:3c:ec:3b:ee:78:e2:67:11:97:
47:63:80:56:d7:a1:d6:27:b7:d0:1d:04:00:17:17:ae:2a:2c:
1a:3a:42:09:a7:e8:7a:20:64:2d:48:9b:09:95:73:25:53:e8:
95:ba:84:f5:8a:13:11:05:ab:67:75:48:8c:5f:fa:27:fb:4b:
19:0e:20:39:6e:a8:51:90:ab:65:9e:96:67:1c:9f:72:f5:c9:
51:77:07:9c:c2:41:e6:b4:95:b5:fb:7a:69:82:a4:94:16:f6:
4f:d3:90:9c:bc:98:11:b4:4b:29:ec:f9:57:01:73:44:0d:e5:
2b:1d:37:b9:96:1f:35:bd:b4:34:9d:d1:23:ff:85:e7:8b:c6:
ee:b7:b0:60:31:70:76:c5:8e:ed:8f:92:90:c6:25:ee:4f:42:
13:e0:1b:42:5b:54:04:51:57:67:04:be:52:8f:73:11:a8:d0:
46:e5:0b:a2:1f:6a:f9:9c:5e:92:59:f3:0d:bc:ce:92:5a:4b:
bd:d5:51:40:29:4d:51:0c:e5:eb:fb:be:70:07:f9:e1:d1:bc:
72:d5:d4:0f:ba:2c:34:8b:08:3e:a7:53:42:e1:b3:7e:de:95:
bc:ef:dc:99:2c:fd:0f:73:06:35:f0:17:95:dc:f9:52:e9:45:
f8:3d:f2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:45 2025 by rpki-client