Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
File: m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft (raw, json)
Hash identifier: WJsyQFZTJWjFLzJob6YXGeSxuZZEKOnBgajwnf1l75I=
Subject key identifier: D6:C6:74:92:27:CC:C5:5C:27:DF:C5:47:59:D5:23:3C:70:84:27:AD
Authority key identifier: 9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
Certificate issuer: /CN=9bc350bc613d05de910a8da26c91c297171078b6
Certificate serial: 0194C3BE52AE7C203DF69ABB43F753E1B451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
Manifest number: 112D
Signing time: Sat 01 Feb 2025 23:00:17 +0000
Manifest this update: Sat 01 Feb 2025 23:00:17 +0000
Manifest next update: Sun 02 Feb 2025 23:00:17 +0000
Files and hashes: 1: L3trElfXoCVLz1PtzkkdBJeOsww.roa (hash: YCjBwT8TXGDjubr28OCLsTgDEI+YuVxGgn8zV5rTLys=)
2: m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl (hash: hlp3QmPSmoGFh8MJp6ZHaWv/emzRjWlQWPw1aq52hYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:52:ae:7c:20:3d:f6:9a:bb:43:f7:53:e1:b4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc350bc613d05de910a8da26c91c297171078b6
Validity
Not Before: Feb 1 23:00:17 2025 GMT
Not After : Feb 2 23:00:17 2025 GMT
Subject: CN=d6c6749227ccc55c27dfc54759d5233c708427ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:f3:38:23:66:85:51:07:20:45:f1:c0:82:
11:11:39:d2:fc:ec:72:be:1c:d2:54:47:9a:d0:3c:
a8:5b:0e:12:00:79:99:b7:41:0d:21:82:23:fd:78:
41:29:33:8e:30:da:8d:7c:52:81:06:7d:7b:cd:c4:
99:2e:00:a8:9a:a1:e5:9e:b6:3b:78:07:e0:5e:6d:
7e:03:8e:20:91:f3:61:d3:57:0a:c9:bf:19:d5:60:
aa:1b:c3:b4:ba:ab:aa:0b:e9:21:5b:31:51:b0:c8:
60:1c:6d:7b:88:6b:60:ca:2d:d0:b3:22:b0:c5:9b:
d0:06:f4:38:b3:38:ce:82:ef:98:bb:7e:1d:66:ba:
87:ea:2a:fe:5b:0c:b8:63:91:51:58:be:4e:a7:d6:
c8:43:81:18:8e:0a:fc:7e:30:e9:a5:e7:f9:01:99:
a8:0c:d3:3d:0b:93:03:7a:a5:50:1d:ec:a3:9c:ff:
61:e4:30:fe:4a:b3:f1:43:a8:c4:8e:e1:e4:a8:e1:
4c:b5:bc:46:38:64:2b:aa:d7:1f:df:66:ce:f5:2b:
bf:38:a1:53:88:8a:3c:67:be:45:14:67:e5:d4:a4:
4c:66:23:ae:4a:0d:63:13:d7:50:a3:60:a4:ca:d9:
f4:d1:76:e5:8b:ef:76:33:cb:e9:e2:88:61:bc:98:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C6:74:92:27:CC:C5:5C:27:DF:C5:47:59:D5:23:3C:70:84:27:AD
X509v3 Authority Key Identifier:
keyid:9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a1:b3:55:22:4d:a3:3d:cd:26:2b:1b:bf:4d:87:3e:75:f8:
47:ba:1e:04:bc:f9:72:67:28:6b:61:98:e7:a5:09:65:91:14:
88:90:d4:c5:c9:20:68:2c:3d:23:32:51:e4:39:45:7c:90:93:
69:fd:2a:dc:2a:f8:f1:1d:90:6e:fd:2c:1b:5a:69:51:08:37:
a9:34:20:61:47:a4:91:d6:7f:78:63:d3:d0:69:79:21:a3:a7:
ea:90:30:3f:8e:ea:80:15:61:11:39:c4:fe:27:4d:24:9e:27:
ca:d9:63:50:c1:4e:06:94:78:c6:b6:ad:76:b0:b9:e9:cd:79:
5b:6c:82:26:e1:22:3e:b6:82:1f:1d:c5:2c:1d:7f:b0:fe:55:
e4:bb:e0:fb:7f:48:b5:c4:91:a8:d1:f0:42:3b:cd:92:3c:1e:
aa:11:6c:79:84:19:47:d9:f4:38:78:8f:1a:c3:d6:65:94:56:
c8:60:4f:80:df:04:e1:dd:91:b9:b9:07:59:09:64:6f:6c:99:
b3:26:f5:ea:b3:52:d4:e4:3e:3e:57:1a:9c:29:7d:bb:8b:43:
2e:be:71:28:ac:45:ca:bb:f9:28:c3:ce:4f:0c:07:2c:5a:65:
bf:21:95:a6:56:25:50:c1:d8:cd:1d:dc:92:31:d8:67:13:e5:
a7:f5:96:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:18 2025 by rpki-client