Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
File: SGgL3la9O_VhV4oP4QjLwcanWds.mft (raw, json)
Hash identifier: 021KPbuW+gPq9jbCmG+Ged1GT9Bgs1okNpCdMTX8bhI=
Subject key identifier: 8E:19:58:B1:2E:69:0D:1E:A5:87:83:ED:FA:D4:C5:30:B1:26:5C:C6
Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
Certificate issuer: /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Certificate serial: 019511D9CE5C722E8FFA0F4C098046E0FB0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
Manifest number: 08D6
Signing time: Mon 17 Feb 2025 03:00:41 +0000
Manifest this update: Mon 17 Feb 2025 03:00:41 +0000
Manifest next update: Tue 18 Feb 2025 03:00:41 +0000
Files and hashes: 1: SGgL3la9O_VhV4oP4QjLwcanWds.crl (hash: KhvVt4o6V4qq0gJ5E85q173vzDEYabpkalOlMEfbfIE=)
2: XlwydODeF8gcZq2lEX8o8gcX3v8.roa (hash: TCKQsk1WAUMm3psVkuDPcRNKeGExKBO69fhhu70s8wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:ce:5c:72:2e:8f:fa:0f:4c:09:80:46:e0:fb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Validity
Not Before: Feb 17 03:00:41 2025 GMT
Not After : Feb 18 03:00:41 2025 GMT
Subject: CN=8e1958b12e690d1ea58783edfad4c530b1265cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:1d:97:d9:0c:ae:ac:36:4d:c7:52:98:f8:
38:31:9c:1a:2c:5d:87:a9:58:cd:7c:2d:8d:9c:e0:
74:9a:f5:2b:c1:a2:9f:1c:d1:d0:19:66:51:25:7a:
9d:8a:24:22:8d:a3:9e:ab:80:9c:89:cb:13:f8:78:
16:e9:c2:26:86:8a:55:71:4c:29:20:03:26:0e:37:
59:6c:05:a6:56:ef:d2:7c:6a:12:46:f6:15:ef:c7:
58:7e:c3:05:b8:50:af:7c:3c:e1:78:eb:e2:43:d4:
a2:04:a6:ea:f4:c6:9b:c2:26:52:f7:77:b1:e7:dc:
c4:cf:2a:31:e2:e5:73:f4:65:d5:76:d4:87:e8:60:
d5:29:4d:ce:84:99:10:58:0d:1e:6c:d6:de:69:1a:
e4:b4:fe:6e:d8:bd:f7:92:28:d4:cf:fa:9e:19:d5:
33:e4:c9:ec:cc:bc:66:01:cf:33:70:67:4b:70:31:
70:02:df:08:fb:ad:69:77:28:96:88:9d:89:fc:f6:
19:6f:22:20:f2:43:90:06:4c:75:1d:06:0c:84:a8:
64:06:a0:59:38:e1:36:76:a1:52:36:17:83:27:7d:
67:b2:a0:7f:c4:36:9b:c1:c5:8b:5c:c5:8b:86:fb:
81:74:7c:14:c4:7d:7c:7c:85:96:0a:8e:3b:b3:6a:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:19:58:B1:2E:69:0D:1E:A5:87:83:ED:FA:D4:C5:30:B1:26:5C:C6
X509v3 Authority Key Identifier:
keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b1:b2:af:58:24:a6:da:86:0d:26:27:f2:6f:47:36:70:7a:
9e:bc:1c:b6:05:4c:07:83:76:55:54:40:b5:f1:b5:49:eb:68:
70:1e:f4:f7:67:e3:cb:7c:ab:36:8f:ae:be:d9:10:c6:13:c9:
c6:64:6e:8f:5d:c7:51:a2:b2:48:0f:61:ef:c1:53:8e:a2:54:
c5:f9:0d:8d:c0:68:b2:6e:b6:a7:cb:a3:e3:55:6c:b7:2f:01:
57:39:ff:c8:9f:f1:3a:8e:09:8c:3e:3b:af:f9:6f:d7:c3:c0:
f4:79:d5:ea:b5:88:b6:73:56:02:66:95:b1:76:9b:87:b0:7e:
27:f7:7c:87:34:14:75:6d:b9:ea:8f:5d:fd:14:8b:87:ff:ea:
a9:64:85:eb:38:53:86:9d:12:f1:13:75:7b:85:d2:e0:04:e9:
5c:fa:94:33:a2:a6:d6:46:82:ff:af:77:ed:f2:4a:a9:1b:2f:
39:f9:be:ff:76:66:29:5d:b6:0c:88:c7:8c:ab:bd:9a:7b:83:
4b:2c:8e:40:bf:29:2c:af:63:2d:62:78:9b:a1:60:a6:f4:ae:
e0:dd:4d:37:66:b4:f4:24:98:53:e0:ff:72:c4:a1:e4:a7:98:
38:27:a3:09:ce:08:85:df:67:e9:a9:a2:92:bd:75:9c:f4:65:
1c:cf:cb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:40 2025 by rpki-client