Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
File: RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json)
Hash identifier: Wxohwy6Q10+GbeXUOx8NblTIdzsHymYxoUETZ6BV4Go=
Subject key identifier: D8:A5:98:F2:D9:C6:A1:D5:BE:9C:F5:44:C2:75:A2:C5:3B:33:0D:0B
Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Certificate issuer: /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Certificate serial: 019511347DA2CCCD255EC18EA9FDF9662132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
Manifest number: 085B
Signing time: Mon 17 Feb 2025 00:00:07 +0000
Manifest this update: Mon 17 Feb 2025 00:00:07 +0000
Manifest next update: Tue 18 Feb 2025 00:00:07 +0000
Files and hashes: 1: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: GzJT44cmg7xHRVn79gleNEYEssoN9keZu2MrerIdoug=)
2: Z2Ec6FKFCMROAvsvU_-EjGHw4ww.roa (hash: 422PPfALRjVpASZNjTqWvSXQqN/bAdN9tO/keC7QHEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:7d:a2:cc:cd:25:5e:c1:8e:a9:fd:f9:66:21:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Validity
Not Before: Feb 17 00:00:07 2025 GMT
Not After : Feb 18 00:00:07 2025 GMT
Subject: CN=d8a598f2d9c6a1d5be9cf544c275a2c53b330d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:50:fc:d2:64:e4:dd:01:de:86:4a:56:c5:
8f:67:23:76:05:cc:c3:0e:de:cc:47:d6:82:b6:82:
e7:cc:c6:ac:39:55:63:af:43:62:f7:af:2f:00:8f:
69:1b:68:d4:b7:1d:79:40:b0:5b:ee:7f:0c:22:a1:
fb:bd:ad:17:8c:66:15:0d:32:dd:79:32:f1:27:7a:
5a:f0:f8:46:06:74:1a:bc:6f:0a:81:0b:c5:8f:db:
ec:dd:43:d1:77:55:82:75:b0:a2:14:ad:c2:66:e2:
c8:11:f6:ea:c8:e7:bb:a9:ee:bf:c4:a8:53:b8:cd:
9a:b5:39:b4:d6:17:57:84:ff:68:63:e7:d2:48:73:
50:d4:48:e5:42:ea:7c:ce:11:ae:0a:75:d7:c8:e6:
fd:fd:38:17:d4:f0:7c:3e:6c:01:8f:e8:05:87:72:
6f:32:17:95:d8:ea:3a:9d:f1:d1:af:a0:1b:ab:1f:
8a:d0:9f:3f:f1:27:bd:88:5b:99:7b:b9:47:3a:60:
1e:49:fe:d6:77:9e:9e:aa:a8:4e:9d:3e:47:ed:51:
b7:e9:d1:96:32:b3:60:85:da:db:e9:2f:88:5e:07:
ac:9d:27:1e:73:79:11:8c:fe:40:f7:05:ae:09:68:
71:63:bc:6f:21:4d:18:e7:ad:1d:66:05:ce:45:70:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A5:98:F2:D9:C6:A1:D5:BE:9C:F5:44:C2:75:A2:C5:3B:33:0D:0B
X509v3 Authority Key Identifier:
keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:bf:97:96:90:54:df:cb:4d:b0:f1:bb:df:f4:17:9d:f4:2c:
a3:4e:6b:91:48:27:43:af:18:a0:27:04:1f:85:41:01:5c:c3:
78:48:44:07:9c:9c:6c:e5:9b:0a:36:26:6d:b1:bb:be:51:3f:
a0:53:6f:63:3b:b0:34:5e:3e:03:48:02:94:95:6e:38:ef:4e:
2c:03:14:9e:4f:05:50:c4:c0:28:9c:07:0f:8b:df:3c:1b:ed:
f9:40:3b:73:8d:5d:82:4b:ce:5d:d8:6a:d5:11:52:be:54:ab:
6a:7e:6d:49:75:d1:99:c3:59:2a:f4:61:25:86:7c:07:54:68:
fa:51:dc:a6:d9:ea:3c:18:c1:7f:33:88:f5:3b:29:07:fa:60:
9a:13:a3:ec:75:af:22:96:23:c6:31:8e:01:64:69:dd:cd:ab:
60:5d:55:d2:b5:92:8d:c9:7d:4c:36:d3:7a:01:5f:79:49:19:
61:e8:00:28:dd:cc:c0:4c:65:d7:9d:5f:f3:6e:0f:ce:0e:59:
b2:d9:df:fd:03:78:68:cf:0a:d3:98:b4:5b:0a:77:d4:2f:b0:
34:73:88:7f:57:8a:eb:04:47:60:b6:bd:b5:7a:e6:16:dc:7d:
ce:a4:df:0e:5e:da:fb:dc:6f:29:49:bb:7c:67:33:fa:df:17:
64:f2:04:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:22 2025 by rpki-client