Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
File: rqruHwkj4UojcfJAVA_dIVSbFKY.mft (raw, json)
Hash identifier: 1LxiMgrXEJQA6vXHVLrjIVEqd3UUgcpo/5mtku768io=
Subject key identifier: CB:F8:47:6B:0A:6E:57:4C:0F:52:3B:08:45:6F:B0:DC:11:E1:1D:D3
Authority key identifier: AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
Certificate issuer: /CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Certificate serial: 0194C42CA939F55F58C9EB9BB54A4C1F1DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
Manifest number: 0E29
Signing time: Sun 02 Feb 2025 01:00:48 +0000
Manifest this update: Sun 02 Feb 2025 01:00:48 +0000
Manifest next update: Mon 03 Feb 2025 01:00:48 +0000
Files and hashes: 1: Prl9jiIf5yTV5DsYzdlJSoaKLUM.roa (hash: Z5P6WiB+sh7qt8RUQthul2w53RzYUIGwq58APY2ZYXU=)
2: rqruHwkj4UojcfJAVA_dIVSbFKY.crl (hash: bHGDZF411v+vlwqLHshekoSLcKJ8v7rmCfXL1KunNCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:a9:39:f5:5f:58:c9:eb:9b:b5:4a:4c:1f:1d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Validity
Not Before: Feb 2 01:00:48 2025 GMT
Not After : Feb 3 01:00:48 2025 GMT
Subject: CN=cbf8476b0a6e574c0f523b08456fb0dc11e11dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:8f:7b:5a:e6:76:8a:cd:87:7e:70:85:f6:
c4:d7:38:c4:f3:45:e9:5a:85:fb:c3:b9:c0:1d:88:
f2:d0:84:4c:e3:af:a2:20:58:d5:4d:ba:42:9f:08:
bb:9e:38:fe:7a:30:69:ab:65:3d:36:8e:40:66:72:
e6:cb:57:21:ad:e7:5b:83:7b:d5:05:db:5d:15:42:
53:f6:4a:2d:8d:f2:56:40:01:43:65:8b:89:ea:c5:
4a:1a:12:1e:cd:bd:69:20:be:c8:da:6b:6a:de:b7:
34:32:97:2d:29:f9:6b:8d:30:06:6b:a8:3c:9d:66:
c5:bf:19:8e:26:91:cf:3c:97:27:ee:24:59:e9:07:
a2:01:03:73:60:3a:0e:50:78:2f:1b:4c:dc:ab:c9:
c3:77:94:eb:55:f9:f5:c0:0c:cd:28:47:9e:4a:6a:
95:6d:bf:d1:6d:0a:ca:31:66:8e:6e:16:11:27:7d:
40:93:0b:6d:eb:34:16:97:11:eb:e6:a9:25:61:49:
78:2b:69:01:85:91:9a:c1:8b:32:43:d8:e6:00:1a:
ae:22:83:4b:74:1d:89:8a:38:f7:c3:78:d6:11:d8:
a7:ff:a7:82:96:fe:2a:d3:5b:a7:34:46:4d:cc:44:
6d:89:e0:51:78:81:db:9d:48:6f:41:6a:c3:f7:73:
8a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F8:47:6B:0A:6E:57:4C:0F:52:3B:08:45:6F:B0:DC:11:E1:1D:D3
X509v3 Authority Key Identifier:
keyid:AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:54:98:4d:79:4b:23:71:6d:ec:76:87:15:70:9a:bd:f3:3b:
e3:31:e8:94:7a:8c:f4:34:4a:f5:28:47:47:46:51:a0:5d:10:
92:eb:7a:36:74:2c:18:39:5b:2b:67:6a:e0:77:94:51:f8:6f:
48:d4:76:d1:08:d1:6b:b0:54:eb:5c:1f:09:d5:6d:91:e9:d7:
05:d6:0b:dd:81:86:e6:e4:9e:b0:01:5b:01:87:be:7a:bc:89:
cd:65:30:9f:f3:bf:2b:19:e7:1f:10:d1:26:98:35:4e:0a:14:
73:93:df:12:10:35:d9:83:6e:24:42:46:df:6d:72:cd:d8:66:
ec:69:be:49:16:85:0a:aa:23:b0:de:9f:6a:c5:86:9c:ed:56:
5a:fd:9e:00:c1:f8:e9:3b:5f:01:49:aa:40:8c:1d:8b:42:40:
f5:e2:ec:0a:54:8b:e4:d2:bd:ed:18:97:4c:3a:c2:8b:92:e4:
a8:fe:70:58:8c:4a:f7:0c:33:8e:fa:f8:26:9d:cb:1d:87:de:
0b:e0:63:f4:80:2e:69:6f:84:ba:c0:e3:8a:f5:78:b5:80:bd:
15:47:99:1d:26:fc:9d:35:65:3d:f5:1a:aa:cb:64:de:5b:6f:
c7:b1:1a:1f:56:c1:f0:82:32:e6:54:dc:75:dc:83:f1:48:99:
d0:28:be:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:55 2025 by rpki-client