Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
File: 2S5c30xU_4aM6JUxXqtY8tiGUMI.mft (raw, json)
Hash identifier: MBb3zl7TcntKvRFl+YlJBHtNcAKo38BlkIk1ty4bUpY=
Subject key identifier: B7:21:53:6E:F8:E5:1E:60:D4:46:46:14:33:E6:AA:17:FC:8E:90:9A
Authority key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Certificate issuer: /CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Certificate serial: 0195127E1CF7C76A1B16F4C0C6E5D92CE747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 06:00:09 +0000
Manifest this update: Mon 17 Feb 2025 06:00:09 +0000
Manifest next update: Tue 18 Feb 2025 06:00:09 +0000
Files and hashes: 1: 2S5c30xU_4aM6JUxXqtY8tiGUMI.crl (hash: yMTDDomvoRtdNJsSh0HP2/7Md8vrPG0+m/KFQMByxYA=)
2: uU6zg4YH1264IiROqTWMjBqhAVA.roa (hash: OWnA1HPfhWIThBzmOjCNNoLbJUm6FK12YolmGLT6gvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:1c:f7:c7:6a:1b:16:f4:c0:c6:e5:d9:2c:e7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Validity
Not Before: Feb 17 06:00:09 2025 GMT
Not After : Feb 18 06:00:09 2025 GMT
Subject: CN=b721536ef8e51e60d446461433e6aa17fc8e909a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:b4:5b:88:fd:a7:3d:7a:65:73:c2:0e:64:
1a:1d:c1:09:13:c1:8e:09:fc:bc:3f:58:56:17:ef:
b5:e0:59:da:52:fb:68:e6:00:47:5a:7b:81:60:a9:
c7:8f:d7:c4:69:e8:de:66:e1:86:a0:be:47:68:9f:
c2:8f:49:a3:c0:3a:9d:dc:db:cc:06:dd:4a:6c:67:
b9:74:3b:59:1f:2e:73:a4:2f:69:c6:f2:cc:0c:4e:
51:4f:59:01:2b:0c:88:5c:d6:08:c5:31:b7:05:a5:
a1:4d:89:4a:60:f0:ac:be:16:fe:02:9d:83:b8:35:
9a:84:9c:3c:6c:ff:39:0a:65:61:48:7c:44:de:83:
8e:5d:80:e5:2e:87:7a:13:8b:3b:89:31:da:fa:58:
7f:87:e2:47:b1:d5:79:86:95:d3:d4:4c:fd:4c:b7:
82:aa:ba:ad:b1:94:2d:22:b7:f3:15:d4:38:8b:67:
70:79:51:60:ea:2f:d8:48:82:31:37:b1:bd:af:43:
bd:e7:22:61:26:4c:9e:fe:49:7e:2b:78:35:b9:ce:
93:17:2e:a9:8b:4c:3d:b6:4a:c3:84:08:52:24:df:
9b:80:61:0e:d9:db:0d:09:5a:b2:0a:0d:3e:aa:65:
51:fc:2a:3c:a4:01:fe:10:ca:22:71:61:0d:ff:04:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:21:53:6E:F8:E5:1E:60:D4:46:46:14:33:E6:AA:17:FC:8E:90:9A
X509v3 Authority Key Identifier:
keyid:D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:6d:17:f6:a8:df:2d:4e:f5:75:c3:61:4c:ce:f3:d7:a0:f2:
01:da:08:1a:f5:e5:3d:ea:15:d1:85:f7:cd:ff:96:4d:4d:22:
8c:f5:0d:b7:e3:57:6a:75:b5:c8:54:9a:6e:1e:00:44:fb:29:
aa:0c:87:1d:f7:b0:53:52:20:9e:fa:f6:80:b0:b6:d7:34:36:
ae:61:4b:81:b2:5a:06:d8:c4:6d:66:45:74:cd:92:6c:65:d5:
24:64:6b:8f:f3:3a:7f:a5:f7:08:e1:26:18:03:df:59:56:ba:
4a:eb:b6:a4:dd:b3:e5:fc:95:e6:5b:46:fd:7a:0a:d0:26:b9:
e4:06:71:4c:9c:5a:29:f8:ff:3c:aa:97:f7:85:12:92:dc:84:
05:42:67:7f:8f:23:17:14:0d:ea:ee:20:83:fa:d7:75:1c:5a:
98:ed:cf:8c:75:62:3b:4d:5f:da:13:80:7a:09:b1:2d:2f:8f:
fc:fb:6a:04:97:c8:e8:61:a1:b7:f0:f1:fc:0d:7a:64:73:a4:
95:66:d9:6a:36:aa:d0:c7:63:31:c0:5e:d0:0d:6a:d8:99:55:
f6:c2:7e:14:82:51:60:a8:94:b6:1a:70:b3:89:2d:ba:83:b0:
78:0a:dd:d2:0a:09:11:d9:61:96:cf:7e:96:4e:22:98:0e:4d:
d4:82:9d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:44 2025 by rpki-client