Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
File: _7up17hmEtT4fPFhcf-CsrRBNk0.mft (raw, json)
Hash identifier: i/FEu8pa6eHmfrdboN7J3e76bfn322mZ7ndKpR8cnkA=
Subject key identifier: 10:E3:21:BA:10:BD:C3:E1:9F:60:EE:8F:4B:86:45:55:A7:71:9F:50
Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
Certificate issuer: /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Certificate serial: 0194C3F59A6F0724AF01AAFC6B314A8D3728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
Manifest number: 1430
Signing time: Sun 02 Feb 2025 00:00:40 +0000
Manifest this update: Sun 02 Feb 2025 00:00:40 +0000
Manifest next update: Mon 03 Feb 2025 00:00:40 +0000
Files and hashes: 1: LYzc6OtaS8KV6QcG5hHmYjRMk0Y.roa (hash: fgjAjawvKdndlxTdQAycErp9wGnUNzrHaq3cdzUckXg=)
2: _7up17hmEtT4fPFhcf-CsrRBNk0.crl (hash: CHjrcDTUd+ITCOmdXTP3euVcueMrLONNQmqKSHI2eMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:9a:6f:07:24:af:01:aa:fc:6b:31:4a:8d:37:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Validity
Not Before: Feb 2 00:00:40 2025 GMT
Not After : Feb 3 00:00:40 2025 GMT
Subject: CN=10e321ba10bdc3e19f60ee8f4b864555a7719f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:32:99:06:e0:8a:e0:f7:b8:96:15:de:9b:
4a:f0:6e:7e:84:a4:00:f2:7e:bc:f8:0b:b0:93:c6:
c5:5e:fe:b0:c6:0a:16:17:de:1a:6a:b7:e9:c6:06:
ab:36:af:19:f2:7d:8e:93:0b:50:15:a5:76:f5:16:
57:21:02:9d:18:9a:c1:29:f7:03:8d:95:2b:da:d5:
10:61:b6:42:c2:cd:b5:ab:b7:ab:2e:f3:dc:4e:84:
ef:21:20:2a:3c:02:cd:0b:f3:9f:2d:a8:3c:e4:93:
8f:17:73:de:b6:e4:f0:85:ea:dc:18:c5:22:fc:ff:
d9:aa:69:91:bf:0a:76:b4:25:56:61:da:cb:a4:6b:
2d:3a:73:83:69:69:c6:23:fe:ab:9a:ba:5d:e7:95:
5a:d6:93:7b:d5:9d:8f:ff:79:66:72:4d:9b:ed:85:
30:46:c1:52:51:d0:fc:e0:a7:bc:fd:bf:b2:16:b8:
3a:02:8b:3e:a8:6b:93:71:15:df:53:93:12:39:e1:
8b:06:17:c8:02:7f:ff:72:89:42:b8:15:51:e6:a8:
db:45:93:d7:99:99:94:d4:a0:66:09:65:76:35:ae:
92:60:d6:10:5b:15:f6:38:85:01:f0:0b:6b:bc:fa:
c8:8e:5c:35:80:e9:9e:f2:cd:fa:9a:b9:20:c4:92:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E3:21:BA:10:BD:C3:E1:9F:60:EE:8F:4B:86:45:55:A7:71:9F:50
X509v3 Authority Key Identifier:
keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1b:7f:f8:24:eb:a5:37:c4:55:c0:a5:14:32:1b:88:e6:1d:
d9:a9:f8:86:a1:3d:2d:ce:b8:25:7e:a1:f0:bd:68:82:66:da:
82:27:40:63:ab:ad:de:7d:5a:df:eb:89:0b:d6:c1:87:4d:69:
91:57:c4:4a:1a:74:3b:74:05:4f:85:34:e5:ff:a0:0e:1a:de:
44:ad:4e:d4:17:dc:ba:6c:2a:23:43:71:b6:4a:3c:32:a9:1e:
9d:9a:bf:ff:1c:26:08:39:24:cb:ba:03:5d:e8:c1:73:0a:e0:
56:4f:ba:31:27:70:37:20:69:5b:54:8b:00:89:6b:7a:02:dc:
1d:ad:00:1c:c7:f8:41:8c:58:f8:38:b8:94:52:1c:c8:d7:99:
b6:fb:c9:64:de:cd:b5:b9:6d:86:7d:a1:00:9d:f3:94:de:89:
19:d7:b8:b4:bf:86:8b:3d:60:d5:8e:2c:64:8d:c5:12:20:76:
1e:01:1f:87:93:72:0e:fe:da:e3:c0:8b:39:cd:f8:07:6e:67:
5c:1e:68:b2:81:e5:b7:7e:50:fb:88:06:66:83:c2:4e:99:4d:
33:5e:07:0c:f5:51:fd:ff:d5:15:77:3e:c0:fa:55:b1:24:4e:
41:d4:aa:d8:d3:1c:1b:c5:f2:c5:49:d8:09:4d:d9:a7:2e:e1:
4d:f4:f9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:54:17 2025 by rpki-client