Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
File: In6Vgaaaz4EZMg4TeYV6UTvSONs.mft (raw, json)
Hash identifier: H35Y38JBeZhy9/n4yanlKCdmPh5NouPmOv+DnTGHN1E=
Subject key identifier: DA:C5:AF:82:5C:00:BE:A0:B4:6F:87:C6:84:DC:8B:CE:BE:70:3C:32
Authority key identifier: 22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
Certificate issuer: /CN=227e9581a69acf8119320e1379857a513bd238db
Certificate serial: 0194C3BE7D217E9DB5E6FF9B9272D8D2448F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
Manifest number: 142F
Signing time: Sat 01 Feb 2025 23:00:28 +0000
Manifest this update: Sat 01 Feb 2025 23:00:28 +0000
Manifest next update: Sun 02 Feb 2025 23:00:28 +0000
Files and hashes: 1: In6Vgaaaz4EZMg4TeYV6UTvSONs.crl (hash: k6Z/7wF2GFTrWfJsWpMFbmAP6FuaBA/J/vMomMEfoJY=)
2: zDiyPljIfQJSHZqDPkKU2sChvrg.roa (hash: y+GAtv4wxCnxVitUPOmEF1JPji3zVCOq+ijeYGfAYfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:7d:21:7e:9d:b5:e6:ff:9b:92:72:d8:d2:44:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=227e9581a69acf8119320e1379857a513bd238db
Validity
Not Before: Feb 1 23:00:28 2025 GMT
Not After : Feb 2 23:00:28 2025 GMT
Subject: CN=dac5af825c00bea0b46f87c684dc8bcebe703c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:2d:c6:0b:42:fe:2b:04:6f:49:5d:78:ae:
9a:3a:ff:3e:82:ff:07:c2:1e:ff:9a:11:8c:6d:97:
1d:2f:97:a2:d4:09:25:2b:48:f7:f5:1e:8e:73:2d:
f0:5d:7f:06:75:86:67:4e:db:d2:4a:0b:7b:5c:38:
1a:d5:d6:ca:8c:91:44:39:e9:f8:a1:9f:41:91:de:
b4:bf:cc:62:35:c1:fb:1b:3a:53:a2:8a:57:f5:b5:
c7:cb:84:34:76:f3:71:b1:09:b7:5c:ba:d6:a0:7a:
86:cc:22:b0:ac:c2:94:dc:0b:84:9e:c6:15:c9:ff:
c7:62:a2:91:71:81:26:0f:72:ae:69:53:56:b8:22:
7f:a9:11:d3:dd:a1:9b:e2:5f:6f:52:55:9e:95:b6:
af:c7:6f:b0:5d:ad:67:6a:79:dd:8b:df:01:9c:15:
e7:8e:32:04:83:31:b9:d1:b8:63:9f:a1:01:2e:d5:
e5:3c:78:4b:c2:1f:bf:05:c7:3d:c4:33:72:2f:b9:
1d:77:78:1f:56:39:44:18:9a:d7:00:8d:2b:a5:9b:
2f:d9:0e:30:31:fc:f2:9d:be:8c:12:ff:df:93:65:
48:e5:88:6c:5d:d2:2b:20:8f:fd:b3:79:f8:4e:38:
78:34:06:d8:ac:27:fa:37:be:ba:cf:f9:45:b3:c6:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C5:AF:82:5C:00:BE:A0:B4:6F:87:C6:84:DC:8B:CE:BE:70:3C:32
X509v3 Authority Key Identifier:
keyid:22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:89:4a:20:b7:07:43:36:06:11:c2:1a:58:17:21:8f:dd:c1:
7f:be:7b:03:f3:11:2f:27:6e:8c:da:c5:98:8f:81:69:f0:de:
c4:de:d8:3b:dc:40:ed:ba:6e:fb:eb:da:d0:bf:01:a7:90:75:
fe:5f:7c:55:fd:96:13:c0:64:42:e9:d4:e0:57:6d:7a:80:96:
03:49:50:cc:62:62:62:a5:fe:89:ea:37:b6:c8:bb:ce:db:dd:
77:61:ac:48:77:82:7e:f0:35:64:fd:d6:ae:21:83:86:07:d3:
f3:1c:8f:7d:de:08:a5:b7:3f:f6:2d:d8:61:a6:d3:de:27:1b:
67:a5:ef:51:c0:14:ce:f3:23:20:ae:d3:2d:58:b2:4d:28:bb:
c3:92:9b:81:a8:61:bf:59:34:bf:52:fa:40:de:91:95:96:e6:
f2:3f:fb:0d:0a:0f:ad:b0:61:f0:db:b6:3e:5b:62:ed:26:7b:
3d:41:a2:5d:da:8f:41:3a:cf:27:24:13:23:81:f3:26:30:0f:
5d:9a:eb:cc:99:d9:c5:82:b2:a7:29:5b:b6:7e:08:ad:8d:b4:
3b:0d:a7:c3:5b:a8:c5:3e:e0:f6:e7:1c:ba:2e:2e:ba:fd:f5:
9e:ea:82:3b:36:ad:7d:17:11:4e:dd:01:f9:6b:eb:da:96:fb:
d5:d0:50:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:50 2025 by rpki-client