Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
File: st8cE314lMzbp2jOuXHE099Z_pY.mft (raw, json)
Hash identifier: wXf+AqVO3LPLE0GzHjeFT+N3cbdqvYxWcpjA585bed4=
Subject key identifier: CC:49:69:2A:7B:37:85:E5:C7:5F:2D:4A:0E:BC:45:56:73:00:45:23
Authority key identifier: B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
Certificate issuer: /CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Certificate serial: 0194C499FEAD83D0D586C276EB5A6D86A384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
Manifest number: 1431
Signing time: Sun 02 Feb 2025 03:00:14 +0000
Manifest this update: Sun 02 Feb 2025 03:00:14 +0000
Manifest next update: Mon 03 Feb 2025 03:00:14 +0000
Files and hashes: 1: st8cE314lMzbp2jOuXHE099Z_pY.crl (hash: MFvXBV29AXap6OhQUBGLxIah5bAdBhFbuFxNR/5AWhE=)
2: utentqqy5GUX6xjOO70Zx55fsK0.roa (hash: Z4JeWyzB0L9+u00qmx46AQ9h8ajUGAFCIAhK67ja97c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:99:fe:ad:83:d0:d5:86:c2:76:eb:5a:6d:86:a3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Validity
Not Before: Feb 2 03:00:14 2025 GMT
Not After : Feb 3 03:00:14 2025 GMT
Subject: CN=cc49692a7b3785e5c75f2d4a0ebc455673004523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:31:c1:fc:73:e4:a4:91:8b:2e:17:11:30:56:
5c:fa:45:e1:f3:a1:a1:5c:86:66:15:22:d7:2e:83:
79:a6:69:f9:66:08:c7:44:a4:b5:ff:22:fe:e9:02:
ed:3d:b6:58:57:4e:c0:4f:f0:13:69:c2:52:4f:a0:
e1:8d:91:96:27:ae:58:e6:2f:17:5f:c4:1b:f8:4f:
5f:ce:b3:92:d3:fd:56:95:be:bc:36:4f:06:9e:08:
77:19:2a:6f:1e:bb:c2:00:2f:5d:a5:e2:46:38:19:
61:bf:3d:5b:5a:2a:65:72:e3:81:8b:3b:29:ab:53:
55:4d:f8:a7:6e:7c:43:20:c6:ad:54:af:a1:9a:21:
8c:d3:a6:98:c3:9f:6c:e9:b5:de:e0:5c:c9:2c:73:
0e:11:32:c5:31:e1:7b:f7:ab:5b:33:e0:5c:69:94:
c8:e2:3a:7e:f9:28:aa:18:6f:de:4f:71:6e:8b:0f:
10:ac:a6:fe:41:2f:10:09:dc:a5:5a:52:8a:51:28:
5e:9b:87:83:31:e7:82:da:25:47:0b:1f:bd:0f:31:
ed:64:75:ee:ab:e3:6f:32:e2:4d:e1:50:8c:b9:b2:
30:77:cf:6d:e1:51:de:87:48:59:ed:a4:71:a2:db:
ac:29:4c:a0:97:a6:2b:b6:71:90:57:df:94:bb:0a:
c9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:49:69:2A:7B:37:85:E5:C7:5F:2D:4A:0E:BC:45:56:73:00:45:23
X509v3 Authority Key Identifier:
keyid:B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:cf:e7:ff:56:aa:ee:1b:7f:38:62:78:22:9f:c5:10:e8:ea:
7f:7a:21:a7:64:2c:e4:9b:dd:b1:d9:f4:b0:4b:64:b9:c1:53:
58:f0:ed:0a:61:b6:5b:a9:38:cf:c0:8c:3c:7f:6e:68:db:97:
95:56:29:c2:24:63:da:92:77:2f:81:38:dc:22:87:d3:04:e3:
c6:e3:2e:8e:f3:d4:71:ac:96:8d:52:f9:89:84:84:5c:80:4c:
bb:a2:93:ad:59:53:d7:71:8e:7a:e3:a8:84:ba:b1:86:ef:f0:
98:ac:c2:5c:b8:fb:74:00:35:f8:19:3d:a1:26:39:f1:13:0b:
fd:ee:33:19:86:e9:64:e1:e3:b2:eb:10:24:7f:23:db:90:56:
75:42:dd:a7:b4:98:96:ad:3e:9d:d3:fe:42:42:bf:4b:22:52:
13:49:0e:ae:85:2a:8e:f8:7c:c6:09:cf:d2:60:d5:74:29:09:
51:da:b4:f6:90:6d:b5:a3:58:1a:ca:8a:97:64:bd:e3:f5:0e:
07:0b:6e:a1:5c:b3:60:7a:11:4d:48:f5:ce:b9:01:f2:03:f8:
f0:9a:f5:be:ec:e4:24:9d:e6:d2:7a:b6:f5:82:df:72:dd:ed:
86:f3:65:aa:76:fb:e6:6c:0d:f1:ef:61:47:77:7a:09:9d:c1:
e1:b8:d0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:08 2025 by rpki-client