Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File: 9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier: H6etVkbpyVWkkucm7YJr6FMQWdKgQrhyW3S2Bbqh5u8=
Subject key identifier: 8E:DC:5F:C4:45:E8:DF:F4:59:2B:05:2C:D4:F6:A0:3C:5C:C1:CB:49
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial: 019510FE1DF06E95C086BA9023A40A0A29EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number: 1457
Signing time: Sun 16 Feb 2025 23:00:43 +0000
Manifest this update: Sun 16 Feb 2025 23:00:43 +0000
Manifest next update: Mon 17 Feb 2025 23:00:43 +0000
Files and hashes: 1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: 8kqaHKzra1Ag4r8EHr2TpPL5hwRd0GH53T26UAfe/t8=)
2: KNQf97WzItrOYioPwLu-Tdh4fNc.roa (hash: RIjtWc8dl547OecCvbWgp63AohvHeAGZkMZVo9/tFEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:1d:f0:6e:95:c0:86:ba:90:23:a4:0a:0a:29:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Validity
Not Before: Feb 16 23:00:43 2025 GMT
Not After : Feb 17 23:00:43 2025 GMT
Subject: CN=8edc5fc445e8dff4592b052cd4f6a03c5cc1cb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:49:d5:e8:65:66:ca:9d:54:db:8e:78:a5:ea:
1c:5f:ce:08:65:50:ac:fa:06:4d:b0:d5:26:49:70:
50:e0:ec:05:77:7f:bf:01:67:29:11:a5:1a:fe:c8:
ec:3d:b4:c1:a7:4e:2a:f7:54:99:32:2d:f9:ec:ce:
ec:5b:c0:1a:7f:ba:c8:8f:b6:98:94:ac:d3:b9:d8:
3d:ac:ac:84:e0:80:52:cc:c8:0c:c3:8c:36:ce:8c:
ad:0a:b6:76:d9:d6:d2:65:98:9b:ec:3b:ba:7e:f0:
d1:2c:90:41:d1:52:51:89:39:2f:9d:d4:b8:63:0a:
15:94:89:8e:b7:de:bf:2c:9e:8a:93:17:a7:da:0a:
f5:10:f1:e9:03:c8:be:c1:6f:78:07:53:12:af:94:
5a:27:8f:56:ea:86:07:6a:bc:9e:84:f7:e5:f7:d5:
12:41:29:d0:c6:fb:73:38:13:28:15:c3:ec:d4:2a:
71:1a:fc:c8:44:51:e0:60:30:f4:85:2c:cb:d5:cc:
7f:37:11:e0:6b:74:36:c5:d6:be:83:ad:dd:9e:c5:
bf:ad:a6:f3:d3:ac:4b:75:65:78:de:81:1e:08:e1:
ee:de:4d:5e:d8:c7:82:5f:c2:b3:fb:31:0f:30:81:
5c:43:5e:84:7a:be:a9:6e:cf:a0:f8:ec:02:78:21:
84:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DC:5F:C4:45:E8:DF:F4:59:2B:05:2C:D4:F6:A0:3C:5C:C1:CB:49
X509v3 Authority Key Identifier:
keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c0:20:c7:55:25:c8:ab:dd:a3:fc:93:23:b3:63:1f:bc:b5:
96:c8:83:2a:58:1e:46:45:74:9a:f7:79:7a:f7:21:e9:c4:92:
cc:b5:a6:aa:06:25:dd:64:b7:2c:4c:9a:4f:03:57:50:50:92:
d7:e0:07:4b:2c:02:46:1f:ce:35:48:9a:90:67:c5:a7:ba:74:
2f:6f:75:35:cc:a5:c4:21:c0:c2:e8:b2:37:46:da:d4:b3:5e:
61:ed:67:83:57:11:c2:cc:0e:b9:09:46:d6:f4:f9:46:fa:62:
79:e5:3d:92:90:a5:69:fd:81:17:ee:59:db:e3:df:75:8f:e4:
8c:5a:db:f3:17:0a:be:17:19:c1:9c:9d:f5:39:f7:85:0f:85:
3e:13:37:3a:9d:61:00:84:e5:57:87:2d:9f:70:f7:c5:b1:32:
84:36:c0:25:fa:97:55:88:e3:b9:30:91:b4:28:0e:d2:1e:4d:
8a:e7:20:21:c6:ef:0b:46:07:4e:5e:1b:cd:ae:d6:b7:fb:f5:
b5:95:46:b0:0c:4f:71:be:1c:7f:a4:ac:db:46:85:06:48:66:
bd:52:31:36:cd:e4:7c:94:43:77:e8:53:8d:ad:f0:a5:00:1c:
ac:cd:19:6d:c7:c3:1b:bf:22:8e:2b:63:5b:80:df:59:28:ec:
f2:84:c4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:36 2025 by rpki-client