Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: +votNgOfkRzG1YUYmjGOJLAjDAXV7s/VEHEAILkkcp0=
Subject key identifier: A6:71:D1:BC:EF:9A:65:76:A5:BB:7E:D9:8D:CC:82:96:14:57:D2:F2
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 019511D9CD12E1A104DB5BA2EA1C3CD0D701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 03:00:41 +0000
Manifest this update: Mon 17 Feb 2025 03:00:41 +0000
Manifest next update: Tue 18 Feb 2025 03:00:41 +0000
Files and hashes: 1: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: cUz2dWM6A8ISlNsCsFhUqXA/SMekWqvN2FrXd3PxMhg=)
2: u16TB_X_VEL7--qGdSVXn8Zs3wY.roa (hash: m8sRTErDjjsLnDtgYn9w7y6plArnvxsTKmxxZwh54Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:cd:12:e1:a1:04:db:5b:a2:ea:1c:3c:d0:d7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Feb 17 03:00:41 2025 GMT
Not After : Feb 18 03:00:41 2025 GMT
Subject: CN=a671d1bcef9a6576a5bb7ed98dcc82961457d2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:1a:14:6e:77:33:3c:92:e6:aa:2c:10:f4:
a5:06:72:1b:24:c8:e0:88:20:93:b0:7e:68:de:49:
d0:71:56:e4:9e:60:e1:98:2e:52:a6:ac:f0:75:a4:
66:ad:0d:38:22:4d:04:c1:61:ae:5f:67:9c:f0:b5:
f8:40:3e:a8:f8:12:a9:4f:f0:28:c8:ac:66:07:82:
ab:9a:99:1f:18:09:7f:8f:a4:91:c4:29:62:50:d6:
e1:a9:f1:a2:e1:36:3f:75:15:88:0c:6a:11:9a:69:
f3:fc:8e:99:60:19:f6:1a:19:eb:a0:a7:e9:18:5e:
5a:fb:bb:07:03:94:53:53:b8:5c:2b:ac:93:78:fe:
ec:4b:cb:b6:9d:79:f1:82:70:7e:20:f1:b7:b1:13:
ac:5b:69:13:97:b5:0b:9a:6b:d5:6f:99:db:38:dd:
e4:7c:68:aa:f3:ff:7b:19:af:a7:d1:ef:7f:be:f7:
d8:18:87:f3:17:f1:e8:fe:48:fd:9e:a2:d3:95:ce:
fd:e0:8e:8c:46:6f:5b:ac:d7:ee:c2:72:84:cb:7c:
7c:4b:d7:88:ad:1d:17:a2:15:10:59:d3:19:a8:82:
68:aa:e0:e6:ca:29:fa:e4:e7:eb:36:66:6a:e9:87:
a1:7a:64:5a:fa:3b:e3:79:b7:d1:9a:5b:02:fa:ed:
1d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:71:D1:BC:EF:9A:65:76:A5:BB:7E:D9:8D:CC:82:96:14:57:D2:F2
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f4:67:f5:be:fb:76:a5:3d:18:12:59:2c:87:07:57:3b:2a:
e9:57:49:5b:d9:12:65:6e:e4:c0:ec:a7:f3:b2:51:f8:59:c4:
43:89:4c:11:5b:19:35:1d:67:15:dc:07:c9:f5:bf:82:28:68:
0b:00:db:95:df:4e:3d:20:f7:a3:93:b7:c7:76:cc:e8:8f:85:
8b:30:38:a4:fc:60:14:1f:4b:30:d4:c8:12:6f:b6:58:88:c3:
aa:30:a3:6c:a8:24:6a:84:d2:84:c7:76:c2:38:20:3e:a0:70:
43:28:ab:46:7e:4c:09:e3:6d:d1:0c:07:a7:f9:92:f3:a5:d6:
64:b8:a7:2c:6c:38:2b:e3:aa:a7:33:e9:bc:20:0e:e9:9e:21:
2b:86:26:a1:0b:f9:1e:60:73:a1:3d:6b:7b:44:98:6d:08:85:
70:44:51:51:69:0c:6b:64:da:7c:30:3f:75:e0:89:16:ea:e2:
5a:0d:f7:5b:4a:d2:f4:c8:d1:f0:c4:a7:ce:85:07:31:04:87:
c2:46:fa:d3:22:db:ad:a0:3e:61:50:3a:7e:e0:1f:42:3f:99:
d8:ee:4e:4c:90:08:54:8d:32:20:07:c2:05:a4:0c:f0:7a:d0:
da:f1:2f:ad:a2:cf:21:f3:44:44:24:03:6d:ad:3c:4a:c9:65:
32:b3:14:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:09 2025 by rpki-client