Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier: sMrD2Aj6X0Ul3Zy2DtueehZtfhB+5wgWgoV+S3d++sA=
Subject key identifier: 95:0A:5E:74:11:7D:75:F8:89:F5:5E:DB:44:D9:38:5B:B7:24:F4:61
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer: /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial: 01951134E706CBDDBACEF6263D08FBE899FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number: 012A
Signing time: Mon 17 Feb 2025 00:00:34 +0000
Manifest this update: Mon 17 Feb 2025 00:00:34 +0000
Manifest next update: Tue 18 Feb 2025 00:00:34 +0000
Files and hashes: 1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: HpIFe60Qm/1eZ30iohAjRNaCYZ+K8jJjqVzF3rF/JDI=)
2: sQlDLD71rwuQKEk9z1_BmhFOeQE.roa (hash: nNqb64nCN8cpCLQ5+ALkkO+gwOA+NXq21TqlMFS9bWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:e7:06:cb:dd:ba:ce:f6:26:3d:08:fb:e8:99:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Validity
Not Before: Feb 17 00:00:34 2025 GMT
Not After : Feb 18 00:00:34 2025 GMT
Subject: CN=950a5e74117d75f889f55edb44d9385bb724f461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:d1:97:92:f1:a4:2a:41:33:58:91:eb:56:
f1:3a:ef:82:2c:74:92:a2:0e:a6:53:30:29:00:f7:
29:c8:fd:26:e6:eb:36:b1:18:1c:98:c7:02:61:e6:
68:14:e6:41:11:0b:8e:10:f0:8b:b4:b0:cb:d3:f7:
ed:64:be:db:ee:93:02:72:3e:af:b8:f9:40:46:3f:
bc:ce:ae:d9:ad:0c:88:a4:ff:3e:97:54:28:19:12:
7f:e9:36:bc:ab:a9:56:ce:e2:1b:32:f2:73:39:23:
52:9b:68:c0:b7:d2:c1:65:cf:b1:5c:e7:c6:48:7c:
c9:51:20:da:3f:52:81:b8:f6:e5:92:31:b1:5e:c8:
6b:43:94:a2:a1:7a:6c:fe:52:4b:ca:38:41:cc:b7:
a9:2b:e7:12:a4:70:37:86:29:f1:4a:30:1c:16:f5:
c5:b8:4b:d0:17:53:04:6c:a6:11:80:70:35:e5:05:
8c:96:0d:35:f0:3e:93:17:81:8c:9d:1b:eb:58:2f:
2a:bd:eb:70:03:95:f5:21:99:c9:d8:c8:a4:e5:26:
7b:ae:d3:33:a5:2a:d7:73:ba:37:b1:e5:fb:2e:c9:
2e:9e:73:0d:83:d2:30:4e:52:a3:88:75:9d:14:cd:
e8:93:06:64:b3:05:e5:e2:d0:63:dc:f7:52:ec:6f:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0A:5E:74:11:7D:75:F8:89:F5:5E:DB:44:D9:38:5B:B7:24:F4:61
X509v3 Authority Key Identifier:
keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:05:ca:c8:2f:17:7e:bd:28:a9:7c:3c:8c:d8:4f:c1:96:81:
db:5d:ae:7d:54:68:b3:34:c0:b3:3d:8a:3c:28:9c:39:59:46:
a3:c3:45:41:62:65:b6:81:aa:97:81:cc:d0:7e:3d:d1:77:fe:
1b:bf:73:4a:73:fe:2e:65:f6:6a:ad:5a:30:7d:5b:fd:a1:19:
2f:56:0a:ae:cd:c5:95:c5:15:f7:f6:41:d9:06:4c:98:1e:61:
72:ab:fa:92:c1:1f:56:39:a4:2b:81:2c:d3:5c:a6:d6:2e:29:
5a:93:28:c6:e8:4f:3a:6d:50:c1:88:c9:e0:b9:12:31:b8:95:
b1:22:76:32:68:9a:57:25:f7:a7:38:49:00:f1:4f:94:ac:44:
56:ea:9d:ca:3f:bc:90:7d:55:15:fd:f9:ef:7b:18:22:7f:f4:
06:f9:40:63:7d:91:5c:92:b4:7f:6d:ca:2f:0e:18:47:91:73:
3c:cf:67:03:ab:06:91:c0:72:36:a5:b0:52:3f:71:61:9f:3c:
ba:05:5c:c4:d9:10:55:88:2e:2f:ba:b4:a5:47:69:12:88:5b:
21:a2:57:57:49:12:2b:ac:37:8b:37:c9:11:13:9f:62:f2:73:
28:c1:cf:7a:3e:12:a4:6d:37:36:ce:82:7a:d0:0d:69:0b:40:
94:84:2b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:54 2025 by rpki-client