Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
File: p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json)
Hash identifier: 3lP4gmbO/VQkE+skn9O8PmtvuZi+YSl7NNCYcG2oHMk=
Subject key identifier: 6F:CF:93:D4:0F:FD:D2:67:6A:A6:22:A0:BA:38:AE:E5:72:29:4A:86
Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
Certificate issuer: /CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Certificate serial: 019510C730FCB241F62F5DEAF316E64A2BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
Manifest number: 0BB8
Signing time: Sun 16 Feb 2025 22:00:44 +0000
Manifest this update: Sun 16 Feb 2025 22:00:44 +0000
Manifest next update: Mon 17 Feb 2025 22:00:44 +0000
Files and hashes: 1: YzYY5Pk4uD_RFCQ6kGkD8Ksosug.roa (hash: JV37Wu2EuvzzpKn9Z7XGUJb+gi9iNJI/YQAjXDOu0ds=)
2: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: Tj6O1on5pXL4XXIUtv/YDvZX8q6dQFeAyQq1SJBOGpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:30:fc:b2:41:f6:2f:5d:ea:f3:16:e6:4a:2b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Validity
Not Before: Feb 16 22:00:44 2025 GMT
Not After : Feb 17 22:00:44 2025 GMT
Subject: CN=6fcf93d40ffdd2676aa622a0ba38aee572294a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3f:0c:64:bb:32:e4:20:64:9f:09:1e:a5:7f:
36:ad:20:87:e5:27:a7:d2:54:5f:c0:73:41:76:93:
77:ce:51:c7:95:c4:2a:3b:eb:45:8f:ec:3a:9f:cb:
f0:68:b7:c0:63:e4:85:a5:d1:20:15:ad:be:4f:fc:
04:f1:2a:a6:75:56:e4:13:b0:04:f2:31:72:b4:44:
73:a8:c5:d5:21:19:fb:0a:fd:b3:71:0a:99:09:3c:
5f:7c:e6:e5:85:19:ac:1d:a2:7a:03:11:47:49:a4:
18:dc:0b:ad:18:4a:93:ee:79:48:85:d7:03:d1:f5:
a7:13:92:c6:98:bb:34:0d:57:56:2b:aa:d3:89:28:
5a:c5:20:b0:7c:04:bb:cd:42:13:44:e0:17:db:91:
8b:d6:b2:05:13:e7:c5:bc:9e:58:50:0c:1c:43:13:
92:c6:80:8b:e5:cb:57:bf:58:fd:8a:2c:df:26:17:
d9:45:35:80:53:36:50:29:1d:ba:19:86:6f:0f:fe:
b3:4f:0b:76:1c:1c:a4:43:bb:0d:9c:45:78:1c:a8:
37:d2:3b:cd:8c:14:8b:a3:f3:cb:05:e9:eb:29:96:
5d:08:91:25:36:fe:30:b4:09:52:b1:da:ed:c1:5a:
a8:9a:49:18:7a:24:ee:e3:f4:47:e6:5c:79:08:f9:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CF:93:D4:0F:FD:D2:67:6A:A6:22:A0:BA:38:AE:E5:72:29:4A:86
X509v3 Authority Key Identifier:
keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0a:84:08:4d:e8:0d:64:8f:3d:70:4b:c0:8c:06:1e:09:45:
eb:74:32:44:28:1d:4f:60:18:50:72:51:f1:51:f9:ac:ff:ac:
8f:37:d3:84:5d:ac:81:28:cc:6d:b3:0d:09:45:69:cd:55:dd:
53:57:52:e6:a6:4a:f6:54:9c:67:54:7b:bf:90:8c:a0:74:f4:
90:65:2c:ba:9a:fe:11:db:b5:b2:7e:3c:40:ae:7d:52:07:ec:
a8:16:b1:d0:25:5b:0b:2a:f5:ba:eb:b8:c0:27:2e:00:36:ed:
96:30:6c:f8:09:4a:f2:65:df:d4:80:82:4a:16:74:44:3c:73:
f9:cc:cc:92:97:24:7f:36:e2:31:43:b5:0c:a1:24:41:b7:36:
0a:cb:96:6c:13:f9:ee:1a:1c:04:40:ef:09:0d:4b:4c:0e:7a:
9a:bc:50:f1:85:63:3e:2c:d5:7a:ad:fe:88:1d:b1:fc:dd:cf:
f8:29:62:27:6d:12:5b:c7:3a:8a:46:ac:b6:99:a1:05:49:07:
b0:23:e5:ee:ac:ba:4f:6c:b7:ea:f1:18:c1:e0:9f:b3:4a:27:
c3:01:1c:ad:92:bf:56:2e:51:71:c2:11:e5:c3:91:62:d2:a0:
61:d2:d9:71:7d:87:d1:12:d0:51:b5:2f:ed:dc:63:d4:bc:10:
43:ea:77:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:00 2025 by rpki-client