Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: 511BNIcN5jesrO1tkcm4lCJXjTpQgqi9KcaK9Zz+IVM=
Subject key identifier: DE:F4:50:B3:FF:A1:5D:BB:1E:FF:2C:16:E7:5C:A6:E4:C2:D9:E2:7B
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 019510C6F1ECC35DCC965DE673BF55D3EA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 118F
Signing time: Sun 16 Feb 2025 22:00:28 +0000
Manifest this update: Sun 16 Feb 2025 22:00:28 +0000
Manifest next update: Mon 17 Feb 2025 22:00:28 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: gvJfyG3Rtsq4mi5yAc2+GK2jY+WgaJrizGkVennnQ6U=)
2: ughB2qwCJjXq23HnnasoQDdXgE8.roa (hash: LImj3hNpOasXYHWcbm9URdJgBeEySrqqax18nJO4GMo=)
3: v0jeM-EK5U0lFswlXgsyLuIVWWw.roa (hash: M3nsb4FrAgnB7zU3prkNFU+S+Vg3EPSnI0a1Dxv4l5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:f1:ec:c3:5d:cc:96:5d:e6:73:bf:55:d3:ea:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Feb 16 22:00:28 2025 GMT
Not After : Feb 17 22:00:28 2025 GMT
Subject: CN=def450b3ffa15dbb1eff2c16e75ca6e4c2d9e27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:74:b6:61:a9:f7:37:f4:2e:25:4d:fc:40:58:
b9:45:84:fa:ba:31:45:cb:8f:1f:97:1e:b4:47:33:
9a:b8:a0:24:70:16:8e:df:d3:c6:b7:94:7c:b0:e5:
bc:7d:99:9f:43:4e:df:33:f8:b3:ea:dc:26:70:e6:
9c:15:71:9f:1e:fe:c2:c0:3b:53:69:08:c2:03:a4:
97:e2:eb:58:dc:dd:2d:f6:3e:21:ad:d4:2d:21:90:
c4:77:27:e0:7f:48:7c:c8:c5:07:40:ea:cc:e2:16:
8f:e9:4a:f3:12:3e:ad:cd:fa:84:59:57:b8:19:09:
51:83:75:63:db:56:2f:f0:bc:a8:97:c9:29:1e:c5:
b8:03:86:7f:aa:cb:71:5f:79:aa:b0:cf:ba:83:95:
4d:26:02:19:9e:a7:ba:ba:20:ab:a4:63:4b:26:e6:
ff:bd:46:ab:09:98:c0:21:12:b1:72:86:91:0c:e2:
77:d7:5d:b6:fa:4b:26:9c:20:7d:79:03:94:ba:8c:
86:32:80:ee:bb:b3:f5:7f:e2:90:66:52:77:d9:f3:
4d:71:34:aa:97:80:cd:e7:f9:a8:99:71:ce:ea:46:
88:14:e0:ec:41:39:10:38:2f:0f:69:0d:20:be:ae:
09:88:b6:35:cb:4a:3e:5b:14:71:ac:48:b0:af:d6:
26:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F4:50:B3:FF:A1:5D:BB:1E:FF:2C:16:E7:5C:A6:E4:C2:D9:E2:7B
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bc:ea:3c:cb:8e:22:e1:8e:6a:5c:cf:2c:18:ea:a3:2a:09:
93:bd:4b:83:09:f6:05:78:72:70:7f:e4:05:71:ca:ad:3c:b9:
46:54:bb:f7:76:39:5a:ac:71:74:a6:63:27:ed:50:06:76:01:
42:a4:54:55:fe:8d:ca:8c:36:e1:6d:7b:8c:e4:4b:3e:e0:31:
cb:af:42:02:57:0f:d0:36:a9:57:0a:a6:f8:e5:fa:90:88:a7:
be:2d:2b:06:7b:f1:1e:51:4d:ee:74:45:eb:38:e3:16:8d:ae:
bb:ed:79:7e:7c:11:f9:66:9e:43:6a:67:55:c7:87:00:e1:7e:
9e:55:0a:32:b6:e0:77:5d:f2:16:b7:64:c4:7d:b9:b7:20:38:
b2:ec:23:c6:c9:49:ec:04:ff:32:53:df:b6:f0:d6:5e:0f:86:
27:46:a6:79:b3:a7:44:d3:67:8e:3d:95:fb:39:bb:a0:a6:52:
f3:cd:b1:33:f9:ae:e7:a0:2c:7d:d1:9c:bb:1b:09:0d:c7:36:
20:a6:42:60:8e:15:f5:24:a1:cf:f0:eb:42:13:7c:de:58:f7:
c6:57:85:24:1f:f1:0a:8e:99:02:a6:8b:bb:6b:58:53:f4:b1:
ad:bd:74:82:b1:de:b5:e9:3d:61:0e:96:2f:48:10:36:8a:c1:
a8:cb:b2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:46 2025 by rpki-client