Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: EdWqYUdQW1+SaseP6PIJ8JwKONW83Ab8+fZLScLhdZY=
Subject key identifier: AD:24:AF:B7:61:70:0A:3A:5C:86:EE:B1:4F:54:4F:06:9C:B7:E5:89
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 0195116BAEEA789E5502E5CC741ED1D6032A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 09AA
Signing time: Mon 17 Feb 2025 01:00:24 +0000
Manifest this update: Mon 17 Feb 2025 01:00:24 +0000
Manifest next update: Tue 18 Feb 2025 01:00:24 +0000
Files and hashes: 1: 6b2ERBxknPAevOnYxSvxzu95eG8.roa (hash: 3kiDbks8aSmKxwaOLs+GDp7zBcCi628ZZOq/BNMJfnI=)
2: NOOroZsnjsQfsZH4dRjzbuju0Hk.roa (hash: Zg6ieQb4LhmgSd9bfRqKPOaZLXbcVzG7102ETjzQ1ro=)
3: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: ALI61r30LsqM3Lxw88aydNKqxhiEJFPc6ipQ4Vlkeh0=)
4: auS9-c0NKZclAN6n9ZeMxPqllbY.roa (hash: jmic3pbI/PzbYEfrYr0mHzcn9EBC12zQGVngarCFUoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:ae:ea:78:9e:55:02:e5:cc:74:1e:d1:d6:03:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Feb 17 01:00:24 2025 GMT
Not After : Feb 18 01:00:24 2025 GMT
Subject: CN=ad24afb761700a3a5c86eeb14f544f069cb7e589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:38:35:e1:f5:db:b0:50:c1:f0:f0:94:16:
69:a1:41:dd:61:43:99:0d:7d:36:90:eb:db:0d:dd:
f0:88:4e:28:ff:e8:78:6d:c0:68:58:d0:19:15:43:
f6:d8:79:59:a2:65:f7:c3:6f:e2:22:77:13:4b:51:
3a:34:77:19:7b:20:6a:13:a7:d3:22:e8:ad:85:aa:
e7:04:05:d3:f0:06:16:a3:bf:8a:4e:59:86:a9:f8:
bf:52:f2:0f:25:74:d1:ab:b2:2f:38:a4:17:8f:bd:
4b:c5:da:68:58:36:1d:f7:b7:8a:99:c2:33:29:44:
64:64:60:da:ba:c7:25:1e:60:65:9c:d8:fd:3a:3d:
0d:6e:7e:56:1f:95:fd:ad:09:96:83:cd:90:bd:6c:
4f:3f:1a:08:98:c9:4b:9e:89:27:35:f3:1b:92:7a:
4c:ef:dd:90:ce:52:cb:60:c7:30:3e:a8:f2:7b:4f:
47:97:c6:94:f1:df:4e:02:f9:31:e9:96:b3:4d:73:
5c:1b:f7:2d:e1:b8:1b:d5:88:0d:6e:bc:47:66:d4:
0b:a8:0a:8b:f1:7c:13:0e:2b:6c:a7:51:9b:09:51:
64:6a:38:25:9c:09:bd:04:81:f5:af:9c:bd:2f:bb:
b2:c4:d6:ac:fa:e4:fd:25:bb:0f:3d:ca:e8:70:35:
97:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:24:AF:B7:61:70:0A:3A:5C:86:EE:B1:4F:54:4F:06:9C:B7:E5:89
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b5:42:1b:93:b8:3f:eb:2d:6e:a9:5c:b5:5a:61:75:ff:da:
60:31:2a:5b:0e:e4:9d:6f:d4:38:90:65:34:16:28:d5:bb:59:
24:24:82:88:a2:03:88:6c:33:85:ef:b5:69:08:4c:e8:0c:a1:
4c:46:65:a9:dd:4c:12:ec:3f:75:8d:11:1f:10:2b:c9:59:56:
db:81:c6:bc:d0:8c:05:fb:43:d1:05:d5:90:69:4c:fe:55:a1:
99:68:03:9f:98:8a:20:ac:0d:6c:02:a6:eb:c6:ce:10:47:84:
c9:73:48:90:f2:35:a5:9b:e5:d1:bf:d9:44:e4:bb:72:3e:14:
a2:bc:e9:d5:f1:fe:fb:b9:0e:58:a2:8f:17:49:02:17:31:f4:
1f:05:99:e5:b3:f6:fa:31:81:94:1a:26:1f:04:e6:9f:f9:11:
38:42:fc:1d:3d:f4:7d:dc:3a:02:76:e0:b8:c8:2f:30:13:d3:
69:06:12:55:83:c5:25:40:c6:24:56:21:98:94:d0:31:d2:3f:
7d:16:bf:5a:41:af:f1:fa:86:16:18:74:48:ab:a4:4a:8a:4f:
28:43:3b:3b:90:d7:d2:94:7f:f7:8f:ac:68:48:58:65:ef:c1:
88:9f:00:fc:41:02:4c:ed:cc:b1:9b:d3:b6:f1:d4:eb:13:8b:
e5:2e:f6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:42 2025 by rpki-client