Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
File: iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json)
Hash identifier: Pi91bDX5iEa0jP6uHMWT01RhI3Rru5wsxpvR4vser30=
Subject key identifier: 04:5A:24:77:77:77:9C:B1:67:29:3E:02:71:17:BC:4D:E2:63:B1:56
Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22
Certificate serial: 0194C463007A7703EA45FACB8AA8A9C03B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 02:00:09 +0000
Manifest this update: Sun 02 Feb 2025 02:00:09 +0000
Manifest next update: Mon 03 Feb 2025 02:00:09 +0000
Files and hashes: 1: 8InkRh5Wj50wupapEt3xMMDv2FM.roa (hash: FzSOMTztxVGNTuOuFeKpaH88eAgODwYDPG7DI36h4Cg=)
2: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: Kp0nIoSrStBTToAfBfHIlMpOamB0d5C+Zvlj2ou3HLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:00:7a:77:03:ea:45:fa:cb:8a:a8:a9:c0:3b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89703a9823512b18d176e362ea023ca824784d22
Validity
Not Before: Feb 2 02:00:09 2025 GMT
Not After : Feb 3 02:00:09 2025 GMT
Subject: CN=045a247777779cb167293e027117bc4de263b156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:43:a8:5d:c9:2f:bb:57:6e:65:4f:77:52:
28:f1:f4:9e:3e:2c:13:f0:c1:7b:6a:4e:bf:c7:a0:
99:23:d6:01:64:b3:1b:1a:68:da:97:10:84:16:f4:
eb:cd:e2:ea:47:f8:63:8b:13:2c:b6:fb:7b:84:61:
b6:61:d7:87:f2:c5:8d:e9:cc:c6:25:f7:9a:f6:b5:
0e:6d:af:77:ef:d3:20:58:38:1e:9b:16:23:94:22:
d0:83:38:a0:ea:b8:8f:53:8a:92:94:31:99:0d:74:
89:90:bf:c0:f9:d9:1c:ad:bf:02:09:9f:48:57:58:
40:77:91:3f:ad:50:b3:d9:fc:18:fd:49:1a:37:f6:
ac:cb:f1:ee:93:60:66:77:4a:8c:cb:7e:b8:14:b5:
c8:ae:52:d2:20:0d:f6:ed:37:eb:ff:39:49:f5:d8:
96:7b:44:93:7b:13:f0:4e:bb:94:a3:2c:95:c0:c2:
b8:4c:41:49:4c:0e:95:9a:76:45:51:d8:81:ff:a8:
ab:bc:c2:5b:6e:08:5d:13:5a:5b:4c:7a:82:e4:92:
ed:f1:2c:2c:ad:f4:77:a2:22:c9:21:d2:02:65:b4:
b9:d8:0d:71:58:96:33:9f:45:f3:e3:11:8b:e0:2d:
7e:9b:c6:39:2a:23:9d:d3:29:e2:7a:ec:40:66:a6:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5A:24:77:77:77:9C:B1:67:29:3E:02:71:17:BC:4D:E2:63:B1:56
X509v3 Authority Key Identifier:
keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:03:96:b4:87:be:c3:0e:07:23:6c:70:56:3a:d7:22:ff:cb:
f4:ed:a8:3d:96:9e:13:9a:e6:74:04:c0:bf:ab:34:9b:a3:8e:
a4:7d:5a:67:88:d9:a6:1b:9e:f3:e6:6c:7d:c0:64:27:8d:05:
d9:2e:c2:e5:0c:b7:fb:61:fb:73:4d:8e:81:2e:c9:93:77:9b:
9c:63:46:57:62:ea:e1:46:2d:44:05:f3:e4:4c:09:5e:0b:5d:
c8:01:68:fb:96:e3:df:c1:f4:ac:48:fd:03:24:b1:48:c5:0c:
09:cd:aa:db:65:d1:52:5e:a7:c0:82:26:1a:1d:71:56:be:24:
dd:d2:3a:f2:81:30:7a:59:37:3e:e5:a9:0c:05:6d:ba:6a:16:
91:b2:62:74:df:3d:a0:c2:d6:61:bc:7a:0b:35:5e:08:10:ac:
7a:07:e5:4d:cb:6c:ab:1c:38:89:f4:88:eb:dd:a2:bf:27:f5:
00:e7:4e:cd:64:b4:e6:ca:f4:25:cc:00:06:f7:35:f6:1f:02:
8c:03:00:a1:1c:09:79:9f:f4:c1:36:6e:fd:90:38:db:00:74:
fc:ec:e7:60:4c:ce:c8:da:e8:e1:22:32:be:5b:e1:b8:b5:3a:
9e:33:71:e1:58:b9:a0:ee:ce:d1:99:0d:1c:0e:0e:ce:c7:28:
a4:ab:88:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:43 2025 by rpki-client