Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier: zaRShcbCaul0yiJ8wZ0V6bucG7ykAr1e9EQVo5x1muU=
Subject key identifier: A0:04:AF:F9:66:9B:7C:F5:7D:56:DC:C8:4A:63:CF:E3:81:FF:F9:1E
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial: 0195116BC55F6DD74CEFE7EC5F6C23675BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 01:00:30 +0000
Manifest this update: Mon 17 Feb 2025 01:00:30 +0000
Manifest next update: Tue 18 Feb 2025 01:00:30 +0000
Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: e8Z3iQ4X1KpaOT4hr2KvH51ilE2PU8ITlJ8x9Kj1/98=)
2: KzggZS0_EU2z31ZVy2dRybNt5fE.roa (hash: 0/EVa9A1y2LsZKtv+12bHp3FGMOEZd7rpEDZ7/wagAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:c5:5f:6d:d7:4c:ef:e7:ec:5f:6c:23:67:5b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Validity
Not Before: Feb 17 01:00:30 2025 GMT
Not After : Feb 18 01:00:30 2025 GMT
Subject: CN=a004aff9669b7cf57d56dcc84a63cfe381fff91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:98:a0:5a:b8:df:c9:ee:02:9b:c1:bc:86:70:
1c:2d:10:ed:67:86:48:73:0e:1d:d7:45:de:7f:9f:
4e:49:a2:40:15:d0:97:11:e5:09:ba:4f:61:5d:48:
21:1b:4f:d4:b1:87:57:54:ed:2b:2b:ac:4a:08:c8:
0d:b0:ce:18:68:d5:9f:f3:a3:18:dc:60:34:3e:a1:
66:31:a9:57:51:d5:e2:d4:24:ad:53:51:12:ba:5f:
18:7b:53:9b:6e:18:80:e5:34:6f:d7:e6:56:90:ca:
f4:4c:f4:71:3f:08:3b:78:6b:61:17:45:77:f9:c0:
82:55:17:01:60:b6:8d:d9:e5:87:c5:7c:ce:14:c2:
2c:56:4c:e8:80:99:19:18:bc:91:a0:c8:4a:7c:35:
eb:19:4b:b2:5d:ba:5d:c3:a7:ea:c6:12:86:dc:a1:
da:4b:81:41:e8:71:de:f5:c1:51:ef:af:cd:ca:77:
44:33:65:9f:e5:1f:56:bc:72:1e:02:88:37:c3:71:
5b:ec:ff:51:7b:c0:72:3d:a0:cf:4f:8c:e6:83:90:
49:c8:b9:ac:e9:bb:01:a2:ea:a9:01:b6:8d:b4:0a:
02:ca:da:df:6d:a5:d9:d3:67:43:a6:32:68:70:36:
f9:b4:a3:07:eb:7e:50:bf:a0:81:e6:7d:68:42:88:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:04:AF:F9:66:9B:7C:F5:7D:56:DC:C8:4A:63:CF:E3:81:FF:F9:1E
X509v3 Authority Key Identifier:
keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1e:d1:b6:01:86:9a:ce:d5:d1:d3:8b:06:eb:19:24:06:4c:
5d:98:12:3d:67:e6:72:66:cb:5b:97:5d:b5:af:a8:ab:61:a8:
4b:1a:a6:a6:0c:cc:bf:84:a3:36:e3:ff:ad:29:51:a4:3d:cc:
1b:fd:6a:f0:6c:b1:13:f0:11:9c:77:fe:49:03:7f:57:71:50:
51:d1:f6:59:de:b2:db:5c:47:72:3d:a6:b9:da:a0:2f:aa:93:
46:18:c2:a1:6f:8c:e9:ad:b1:64:f7:4b:a4:eb:cf:0c:7f:c7:
e9:1b:d8:4a:1a:3c:90:32:08:2e:2c:cb:63:50:6f:07:05:2c:
54:55:dd:3d:1e:6f:18:df:dd:fa:f1:c6:20:a7:6d:46:00:08:
ba:4f:d4:87:93:91:1b:ff:f1:cc:1d:1f:f4:ce:8c:26:3b:8a:
8c:67:34:e9:1b:fc:c2:a3:35:69:c7:7c:1f:8a:86:95:06:27:
e6:19:08:71:66:25:04:bb:80:92:8f:85:15:cd:af:75:3c:0c:
de:70:83:23:fc:a4:f4:06:e8:8a:82:ef:ab:78:8a:c7:7d:44:
1c:0d:e5:41:ae:2b:ee:1e:82:4f:af:c9:a6:7b:a1:67:f9:ef:
89:8c:4e:b9:a4:4e:1d:11:fd:64:b3:c6:41:67:ee:28:4e:df:
0c:ab:16:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:09 2025 by rpki-client