Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
File: uUhRCuQauFZ3msGG8EcJkfWipQ8.mft (raw, json)
Hash identifier: gHiVLEzemW9Zv0TAKqI3/KTumK2MeK3zeYm6tuShgfc=
Subject key identifier: 94:46:97:35:7D:54:E0:57:1B:E4:2F:B7:7E:F0:FC:A5:80:C6:E1:E8
Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
Certificate issuer: /CN=b948510ae41ab856779ac186f0470991f5a2a50f
Certificate serial: 01951247616A02EFD75441C2B620CE3F86DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
Manifest number: 0A98
Signing time: Mon 17 Feb 2025 05:00:22 +0000
Manifest this update: Mon 17 Feb 2025 05:00:22 +0000
Manifest next update: Tue 18 Feb 2025 05:00:22 +0000
Files and hashes: 1: ZyJpNgXETgUAoMGW4Tc1fNHY6Xc.roa (hash: d0r/X5GHVSm+6B+uw9WbyoANujmYXCe7JpWPWgRCmfA=)
2: uUhRCuQauFZ3msGG8EcJkfWipQ8.crl (hash: P6+D/vt3lbjLT+LYmcfkli6wO718s2uXT7k0TbfKUHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:61:6a:02:ef:d7:54:41:c2:b6:20:ce:3f:86:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f
Validity
Not Before: Feb 17 05:00:22 2025 GMT
Not After : Feb 18 05:00:22 2025 GMT
Subject: CN=944697357d54e0571be42fb77ef0fca580c6e1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:ec:db:88:aa:da:b7:02:ed:98:e3:39:0a:
73:1f:ea:18:77:be:b2:0c:83:4d:f2:c6:06:b6:cd:
77:c9:6f:fa:08:9b:c3:e9:30:0c:1d:9c:04:a3:98:
f1:23:92:f8:b7:6d:99:14:b4:3a:c3:4b:59:27:5c:
cd:ee:65:ac:d4:f5:b8:f6:7e:41:f8:07:45:4c:47:
60:8f:1e:f5:fc:2d:a7:6b:63:53:90:bb:50:13:0e:
a6:49:73:1e:43:48:a4:8b:19:44:e2:50:7e:7f:64:
d1:d4:c1:f5:de:f8:be:20:fe:e7:da:67:51:55:ed:
fe:bb:c3:d9:a3:b0:8c:a6:f3:e3:e9:53:0d:c0:f5:
72:94:2b:bc:5f:9c:d7:7a:69:a0:94:f5:e8:7e:24:
21:85:e8:52:12:52:89:0e:cf:e3:9e:7c:f3:1d:cc:
5e:07:22:54:21:66:7f:18:10:37:5f:44:16:ef:c0:
27:c3:86:52:e7:7f:03:cb:48:29:9c:35:5a:33:ee:
7a:c6:05:eb:6a:90:69:4b:c5:f9:a8:c9:5e:0a:67:
87:1f:d5:7e:57:48:b9:3a:f5:d1:35:4a:6b:26:1e:
31:57:08:3c:36:1d:87:ae:47:aa:ae:c4:1e:50:4e:
3a:b0:0d:5f:22:24:dd:e7:24:d1:d3:04:03:83:51:
ee:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:46:97:35:7D:54:E0:57:1B:E4:2F:B7:7E:F0:FC:A5:80:C6:E1:E8
X509v3 Authority Key Identifier:
keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a0:cf:25:85:2e:8c:1f:27:b6:66:ca:bf:c5:6b:c1:a9:1d:
22:22:fb:be:e6:7b:6f:a5:b3:9a:4f:df:a7:71:58:e4:9a:77:
42:5f:9e:d3:a2:a0:49:79:6b:1d:36:a8:0a:6c:8a:fb:6f:8b:
fb:4d:05:40:2c:34:d0:29:ef:d1:97:4e:ac:c0:49:08:77:6e:
12:ee:26:9e:3e:78:da:e4:6c:b2:9a:6c:07:b2:43:96:b8:ae:
50:b2:4b:38:53:59:1f:29:dc:1b:28:ad:fa:c6:58:49:84:00:
aa:2a:a7:dd:1b:66:95:57:d6:75:d2:6b:57:82:6d:a7:8f:25:
05:55:e9:d9:17:d3:4b:90:91:87:d0:02:e4:8a:2e:b1:7f:8c:
76:b8:0c:ac:d2:00:34:64:73:73:87:f2:a1:20:da:61:b5:9b:
47:2c:85:92:42:a6:13:97:2c:95:92:31:38:2a:a0:12:52:df:
b9:0a:75:71:69:2a:a7:c9:46:3d:a5:f1:46:f2:d1:bd:4e:bc:
ce:ab:94:f4:cf:0b:e8:47:d8:9d:de:9e:e6:9d:37:a5:47:c5:
65:9c:a6:d3:b5:a4:90:a9:d9:4f:42:8c:ef:c8:72:b9:65:23:
db:95:1e:69:55:9b:a3:dc:57:01:1c:46:1f:cd:00:4b:96:65:
9a:61:59:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:16 2025 by rpki-client