Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: SLBk7ntumYkaL7AL8UM7zIZZ5CTeRuLqL+CxlVXyKAE=
Subject key identifier: B1:26:6C:AF:6B:1A:B0:2F:A1:EA:2E:C3:77:60:F3:AD:06:D1:D3:E4
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 01950ED8365FCE5F6D891D10F1E70D3BF747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 03EE
Signing time: Sun 16 Feb 2025 13:00:05 +0000
Manifest this update: Sun 16 Feb 2025 13:00:05 +0000
Manifest next update: Mon 17 Feb 2025 13:00:05 +0000
Files and hashes: 1: XtH0htLAKG6Q5dcfnWZEaEHDokg.roa (hash: 6hipGrL8gPx/AA1jsYDtYKkvzd7jAI7crI4ZoMmJgjA=)
2: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: GM6c+W8FJvW6Y66/cZJvLr6SdH/MiueIzPb6eqX17T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0e:d8:36:5f:ce:5f:6d:89:1d:10:f1:e7:0d:3b:f7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Feb 16 13:00:05 2025 GMT
Not After : Feb 17 13:00:05 2025 GMT
Subject: CN=b1266caf6b1ab02fa1ea2ec37760f3ad06d1d3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:46:f9:ff:5e:53:ea:ea:06:d1:80:da:69:d4:
1b:f0:c5:8f:44:f1:b7:a8:1e:54:3d:02:fd:42:32:
8d:89:1f:8f:5d:26:a2:c9:be:92:61:42:f5:74:68:
d7:19:50:5e:d9:29:38:85:70:52:c7:db:fa:52:16:
56:ef:42:e6:b8:5a:21:95:38:fa:f1:c0:10:8c:f5:
ed:7f:72:7b:e6:9e:21:68:c0:3b:43:03:de:fc:d3:
79:77:13:99:88:2e:f8:cc:56:ba:eb:48:d4:20:01:
3a:5b:38:6c:16:c9:cd:6c:ad:61:92:bb:fc:65:d0:
af:a9:61:be:5e:b3:1e:d1:1c:43:63:98:71:1a:72:
12:7a:95:4e:bd:a3:f3:7a:81:a0:33:78:32:7b:a4:
ab:ef:f4:cf:3c:b0:c7:9b:49:4a:de:d3:00:5d:31:
9f:37:e0:ea:30:76:80:6c:a4:64:25:a8:c2:a0:a5:
3c:05:fa:60:d5:98:7b:0f:bf:c0:a1:0c:39:3d:98:
60:59:18:61:e4:ad:ac:48:76:f9:36:97:6b:c0:91:
7c:b8:16:a8:2e:de:a8:c3:ae:68:15:f6:29:d3:24:
7a:c5:b0:7e:14:d4:da:5a:83:28:e8:9c:f4:1e:77:
53:1e:5c:e8:ca:84:aa:ec:38:ea:ef:46:6c:70:ff:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:26:6C:AF:6B:1A:B0:2F:A1:EA:2E:C3:77:60:F3:AD:06:D1:D3:E4
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e0:80:ea:23:02:9f:a3:8f:57:57:54:f5:ad:49:88:8e:c5:
9c:3d:a5:7e:13:67:56:3a:9e:b1:9f:9b:46:e4:22:5e:22:e5:
1b:c4:d3:1d:be:70:ef:66:54:e2:cd:57:92:7a:e7:ed:aa:00:
b6:30:06:c3:63:8d:4a:3f:5e:c7:15:92:a7:2c:c6:40:d1:be:
09:ef:f1:1d:0b:93:d7:4f:b6:0f:ce:56:ee:7b:e2:8a:bd:e9:
60:e2:2b:a9:f9:88:1c:d0:52:19:5a:81:0d:f1:03:23:53:56:
a1:21:b3:ed:a3:36:89:00:75:0b:15:c7:d4:9b:cc:a1:32:16:
a9:5c:c7:bb:56:cc:53:1c:15:7d:03:81:8b:04:b9:b3:a1:d0:
bd:b7:84:23:ac:1c:3f:34:aa:7e:b0:e8:3f:4c:cb:b8:8d:b9:
11:48:38:3b:ee:2d:ca:27:31:a9:e5:4e:33:54:de:cd:f0:c3:
5b:16:23:ea:96:77:6e:05:6b:8e:54:dd:45:7f:11:95:22:e3:
75:14:ea:67:f7:f3:d2:58:77:05:a5:3c:0e:ba:3e:cc:90:2a:
7f:0a:5b:8c:92:81:67:d5:b6:9d:cf:5b:c2:92:20:9b:5b:23:
e4:3e:a4:dd:3b:a8:2b:e4:4a:54:71:ab:ce:ba:99:fe:ef:cf:
ae:1b:6c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:40 2025 by rpki-client