Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: mb+xhpnR+eS47rWxbZyOfHRPM9UouNAizbiYwImv+Sc=
Subject key identifier: 48:9B:68:20:2B:C3:9E:73:7A:18:87:45:8A:73:3A:64:DE:3C:FC:CE
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 0194C49A28876D5439D71882F66A31E51263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 03:00:24 +0000
Manifest this update: Sun 02 Feb 2025 03:00:24 +0000
Manifest next update: Mon 03 Feb 2025 03:00:24 +0000
Files and hashes: 1: KfdFKMsjdHv-q7t8wKVB68imJFI.roa (hash: /pY/O4QXO7BvEAN+9S1nVpoPg09znAHFBvFlWdPOJZg=)
2: bChpq7eC8HUZiOWdmJZzTGK-ZCk.roa (hash: Sf8LAE4WGl0MHG0bbn/YLP58QNfCYpZtLL1+SAh0T/A=)
3: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: UTWrV8uL/iHrugoqrYAPIHM9qINNEh1Vj2JxMj3lPq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:28:87:6d:54:39:d7:18:82:f6:6a:31:e5:12:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Feb 2 03:00:24 2025 GMT
Not After : Feb 3 03:00:24 2025 GMT
Subject: CN=489b68202bc39e737a1887458a733a64de3cfcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d9:9b:bc:51:3b:d4:d1:63:8e:5b:8a:0a:b1:
55:c1:b7:b3:4b:f9:f7:9a:de:aa:fa:b9:ce:33:98:
87:a4:e0:c4:2e:78:25:a3:34:00:34:db:28:35:54:
d2:42:66:53:5c:6f:16:ff:2b:72:87:23:34:f1:29:
ac:a2:56:6d:c0:13:ef:03:29:15:0d:51:88:75:51:
4e:5d:df:28:c9:ad:c9:34:26:d9:ea:e3:f0:c7:ac:
0c:c3:72:ac:e6:f3:49:0e:0f:01:ef:9e:03:f0:4f:
3f:04:5c:f9:39:fa:db:fc:00:af:ca:6d:5a:d4:ab:
ba:3b:f4:48:71:89:d2:e5:83:4a:e3:8d:90:e2:ef:
e5:8c:a0:e3:72:7a:1c:b2:41:eb:3c:72:1d:12:f4:
2a:87:7a:66:89:ab:75:47:52:b9:39:cf:68:b5:d0:
9f:79:fb:88:78:18:69:fd:6b:34:28:ca:06:dd:c2:
a4:27:d5:7e:1b:84:e6:a5:6c:5d:dc:dd:eb:38:7e:
8a:8f:7c:55:6a:8a:91:2e:c8:f6:30:41:8e:df:e2:
b9:1d:19:be:9f:69:39:19:e4:fb:1e:62:f2:f0:e5:
64:ed:7e:b8:93:2e:88:c5:2b:d5:47:0c:eb:d5:94:
de:8f:41:e1:ca:05:21:d8:2d:3c:93:c8:82:06:2f:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9B:68:20:2B:C3:9E:73:7A:18:87:45:8A:73:3A:64:DE:3C:FC:CE
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ed:15:7f:12:fa:17:c9:df:5b:ba:60:84:25:a1:ba:84:bf:
5f:09:c6:1d:8f:36:d1:a5:08:8d:6f:bb:d9:06:5e:c2:15:91:
4b:db:61:65:d2:b3:60:e2:bf:7c:e1:55:dc:35:56:60:92:c1:
90:d9:bb:2f:c0:82:46:16:08:6f:f9:26:83:de:b5:5c:ab:c9:
a0:d5:87:83:4c:09:a1:4e:b0:83:2a:8f:be:55:28:74:3f:58:
21:8e:cb:c1:71:26:35:e5:10:22:13:ad:cf:9b:d9:51:24:a0:
b5:f3:bb:f4:98:5e:27:9b:2a:16:de:01:1c:77:fb:8b:a7:80:
68:53:c8:28:e2:23:7a:56:93:5a:cb:2f:a0:e5:0a:4d:82:a8:
e4:21:62:c4:0a:d9:1e:99:01:01:0b:9c:c3:4c:41:37:ca:6a:
a7:e7:c4:28:eb:f7:45:81:66:96:ea:39:49:c8:cd:e8:00:83:
10:25:fd:82:33:2c:44:a8:00:c7:e8:dd:4d:8b:63:aa:6e:28:
1e:3b:70:c6:93:ed:e6:90:e6:fd:92:2b:b7:f3:4e:cc:bb:ec:
6a:42:fd:51:68:71:a3:86:14:46:8c:23:f2:cd:83:c8:05:84:
68:17:2d:d3:60:9d:34:5a:7e:93:bd:7e:8b:8e:30:87:f4:6f:
ba:13:c5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:07 2025 by rpki-client