Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
File: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft (raw, json)
Hash identifier: cglTvn2KWvLmm+9gCPeFJxZH+hy1xJ9C8DvJCxeu2FA=
Subject key identifier: 1C:52:F2:27:4F:79:C9:B4:35:17:2E:68:F9:FF:48:EA:08:14:97:8A
Authority key identifier: B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
Certificate issuer: /CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Certificate serial: 0194C463BDC1B19BF4F81CC190DDF795D742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
Manifest number: 0344
Signing time: Sun 02 Feb 2025 02:00:58 +0000
Manifest this update: Sun 02 Feb 2025 02:00:58 +0000
Manifest next update: Mon 03 Feb 2025 02:00:58 +0000
Files and hashes: 1: N2y6-GMHKdnhwHw2qI2S6D9db-A.roa (hash: 3FLdtIoRp74dNi1D23oUnkHCD3n8shdafvj6sD2pzxY=)
2: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl (hash: bVXju23qEcivLSxH0E/vrbdlGPYiIfi4dnMXVYfm5sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:bd:c1:b1:9b:f4:f8:1c:c1:90:dd:f7:95:d7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Validity
Not Before: Feb 2 02:00:58 2025 GMT
Not After : Feb 3 02:00:58 2025 GMT
Subject: CN=1c52f2274f79c9b435172e68f9ff48ea0814978a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:2d:40:c8:fa:a5:3f:db:cb:60:af:bd:e4:
a3:e6:69:b7:fc:b4:60:1c:51:55:b0:9e:57:45:9a:
70:41:a4:8b:44:20:e8:95:68:da:94:06:63:6c:b5:
51:09:ef:a6:60:10:4f:39:1c:fc:d7:d4:c4:9a:04:
70:08:b0:c6:bc:e4:6c:6a:06:b2:7e:6a:9e:3f:84:
10:f5:94:b0:7d:b8:4b:2a:a1:6d:a7:03:33:70:e3:
b5:cc:4f:9b:7a:59:cb:5c:6d:7d:a6:08:da:51:99:
ef:93:75:cb:31:04:dc:83:da:da:22:1d:b6:30:27:
84:50:84:75:2f:71:de:11:17:08:18:e5:b9:d6:e7:
21:88:f6:a9:e5:b5:57:72:62:9e:c2:b3:cf:70:3d:
bc:ca:6b:d9:94:23:6b:ae:46:0a:9a:e8:98:7e:b9:
5d:4e:1e:54:a1:e0:2c:e1:7a:ed:77:f3:09:97:01:
8b:f1:6f:6c:bf:7f:2d:79:9c:c2:57:4f:a3:5b:7b:
07:7d:21:c3:28:ee:b1:36:6b:ab:67:2c:1e:7f:6d:
c3:ab:b1:2e:3c:aa:93:ea:41:d6:23:eb:c5:d4:46:
27:74:8b:ed:d8:bf:5d:1b:93:16:90:ff:2f:2d:9d:
2b:29:00:89:56:31:bd:bc:38:63:30:61:60:56:4a:
aa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:52:F2:27:4F:79:C9:B4:35:17:2E:68:F9:FF:48:EA:08:14:97:8A
X509v3 Authority Key Identifier:
keyid:B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:60:d3:a9:ff:c0:d3:4a:58:47:8a:7b:50:5e:13:0a:c9:58:
06:19:9a:aa:c7:87:3d:24:f5:44:06:75:e4:c8:ce:06:01:42:
13:b4:72:8f:0a:40:01:21:b8:ba:71:3a:8c:4b:aa:ae:9f:93:
99:14:db:d6:26:7d:de:03:eb:97:11:75:62:aa:d1:7d:56:cf:
53:d7:16:f6:03:7a:95:42:a6:b7:8b:03:03:4c:4c:90:39:77:
ff:dd:e2:56:6d:85:15:ab:0b:80:b3:e5:ce:bb:c3:d8:38:65:
32:d0:7f:53:1f:6a:29:b6:50:e8:4e:67:a9:f3:f5:35:d2:db:
a3:82:15:83:b2:98:cb:df:1e:4f:ed:b3:c0:9d:e6:8a:78:fb:
0b:e7:d4:c3:bf:33:b9:75:12:e2:b2:67:c1:e3:93:5c:03:aa:
37:19:ea:32:b4:81:a1:e4:ba:6e:14:70:ff:d2:28:ad:f9:95:
3e:af:db:17:5c:51:d8:33:06:51:13:e5:a3:26:76:69:fc:3c:
67:f6:6d:49:ce:46:c8:16:8c:11:c3:a3:cf:84:29:04:81:07:
ec:28:59:7a:fa:57:1a:6c:65:38:86:d0:aa:38:99:92:65:ea:
1f:70:51:b3:e0:d1:94:f1:12:92:7f:10:0c:f4:5c:4b:7c:c2:
93:db:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:31 2025 by rpki-client