Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File: t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier: /m887qtnzinaww8V+HD+XLLb1p2NwGQJ2Owb2qglwAQ=
Subject key identifier: E0:4D:1E:94:9C:35:A7:30:C2:55:5B:4A:41:6A:6E:5A:B9:79:0F:20
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial: 0194C3BE9012D47AB8D15E0C399D05B406BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number: 0E7F
Signing time: Sat 01 Feb 2025 23:00:33 +0000
Manifest this update: Sat 01 Feb 2025 23:00:33 +0000
Manifest next update: Sun 02 Feb 2025 23:00:33 +0000
Files and hashes: 1: YBLZGJHJKH4DoV9XrJh7KrLAY0g.roa (hash: L0o/zjJZLOmk6cpaT73kurdvyrzNoMlbhiuzTQLNAKg=)
2: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: NGz91GVYyUNXWNl7qnwk41hOVO88OOm27VivHrbdKpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:90:12:d4:7a:b8:d1:5e:0c:39:9d:05:b4:06:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
Validity
Not Before: Feb 1 23:00:33 2025 GMT
Not After : Feb 2 23:00:33 2025 GMT
Subject: CN=e04d1e949c35a730c2555b4a416a6e5ab9790f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:83:18:73:54:5c:ad:ae:1f:dc:a6:9b:1f:
d2:d2:24:70:e3:31:f0:9c:db:a5:93:4b:5a:3b:16:
00:69:3a:a0:e6:cb:bb:bc:a8:4c:e5:ca:c4:de:fe:
02:ee:dd:3a:de:d1:d5:a2:6f:82:db:c9:24:bd:ce:
b9:55:61:d7:bc:6b:c4:d2:3b:42:de:46:f8:69:3e:
25:19:ae:13:71:8a:04:23:57:0b:7f:48:6a:f4:6b:
13:72:c0:ac:d4:09:0c:ad:09:93:82:1f:ca:10:1e:
2f:24:0a:22:d3:ff:1d:63:fe:b1:62:ba:ea:92:94:
64:e8:0e:bf:49:47:69:45:4d:fd:f5:13:60:18:b8:
23:fb:ef:b5:98:98:8a:ff:a7:7c:9e:64:06:02:9a:
ff:a8:93:b5:56:c9:08:f3:b1:7c:3e:e7:a1:80:49:
fd:c6:2c:0c:ba:bb:b9:44:84:00:0c:15:1e:f0:b2:
58:7e:d2:ae:31:3b:2f:17:e0:7d:42:25:59:8e:e6:
da:24:b6:66:72:5b:e7:bd:42:65:cb:61:37:0d:42:
06:f2:83:77:b0:2b:c0:84:13:06:ed:0e:0c:36:0c:
85:3f:61:14:4e:4f:d2:ff:6e:d1:f4:a5:af:60:bb:
79:32:65:1e:1b:e0:c0:5c:e6:4e:30:0b:8e:61:b3:
f4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4D:1E:94:9C:35:A7:30:C2:55:5B:4A:41:6A:6E:5A:B9:79:0F:20
X509v3 Authority Key Identifier:
keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9f:1b:ec:8c:56:c2:de:b4:69:4d:ac:3d:11:0f:06:12:5f:
4a:07:ef:48:c5:a2:39:aa:81:d8:3e:62:a0:1d:17:ce:08:73:
d1:7d:f3:63:77:9d:72:83:36:d0:bb:4c:b1:e8:c8:c5:ac:e2:
58:91:77:2f:8a:be:e8:49:34:71:d4:34:d7:63:72:c6:f1:cf:
99:eb:94:21:34:20:e4:4d:1d:ea:59:f6:96:5a:a1:30:f6:46:
ac:e2:01:28:91:a0:aa:d6:ec:bd:a9:05:ea:65:08:38:78:ad:
a1:92:5c:eb:23:08:e8:c0:ed:f3:28:a9:21:f7:89:25:f3:d8:
24:05:68:b8:8b:f1:bf:e8:f2:be:c9:82:16:87:19:c2:28:7b:
61:0c:9e:8f:d7:e2:87:8b:49:0f:08:2a:8d:c2:ba:d0:8c:f1:
ab:65:c6:3a:cb:35:bc:cd:88:91:83:a7:f3:7a:ed:2f:cf:2d:
f9:4e:31:38:aa:41:fe:ed:27:52:e3:85:53:28:df:37:20:d0:
3c:b9:bd:c9:f7:ab:42:3f:0d:62:96:9b:6d:8e:aa:ad:1b:52:
63:a6:26:ba:da:ce:17:76:35:e4:18:98:6a:ab:55:99:88:f7:
b7:5e:42:62:38:64:bf:60:9f:73:ed:d5:9e:67:df:5f:19:94:
03:73:4c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:28 2025 by rpki-client