Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier: wEPDROUeqMAwW0zZeRFZmy7ACbZQC8C4AAmgFoNEMvc=
Subject key identifier: F7:57:C3:2D:B9:04:3A:AB:F1:CF:7D:95:74:A8:19:DB:7D:0F:EF:B5
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 019511D9CF8EBB319A36A61078F4E4557AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number: 0D64
Signing time: Mon 17 Feb 2025 03:00:41 +0000
Manifest this update: Mon 17 Feb 2025 03:00:41 +0000
Manifest next update: Tue 18 Feb 2025 03:00:41 +0000
Files and hashes: 1: THr3g9OkPvsy14BHilEZG56BiqU.roa (hash: 3xhlPP170oH7ChTM2ZqRCOHhpB5jGmO+80m0RUL/u1M=)
2: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: cggh8slqFK3tnTMRFndph7nlq3DbXXOubQpfb6h/z+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:cf:8e:bb:31:9a:36:a6:10:78:f4:e4:55:7a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Feb 17 03:00:41 2025 GMT
Not After : Feb 18 03:00:41 2025 GMT
Subject: CN=f757c32db9043aabf1cf7d9574a819db7d0fefb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cb:4d:9d:c2:85:6e:88:a3:75:bf:f1:d2:f8:
8c:14:5d:a6:71:70:41:27:cb:2d:de:67:75:0b:7e:
3a:93:24:7c:e5:a2:dd:6c:3b:bc:3b:54:cd:96:d9:
02:00:fb:ed:6e:78:93:5e:32:b2:f1:db:09:19:8d:
98:ed:31:f9:f8:d0:6a:c4:6d:b1:8b:20:76:c0:34:
bc:a7:6d:7b:da:92:f3:a1:46:95:51:7e:9d:cb:fd:
e4:a1:f2:5c:73:14:67:f1:9b:8e:b2:ea:80:6b:6e:
3b:c3:cb:27:ae:fb:f7:5f:89:da:7c:ec:de:41:f2:
82:48:1f:42:c1:60:df:73:cb:83:4f:01:26:ba:aa:
9c:72:24:2a:90:74:bb:a3:f9:30:5a:9c:96:94:3f:
88:2b:d7:25:1c:54:11:3f:55:45:68:57:a5:1b:52:
fa:c7:b7:94:62:40:9a:63:10:1d:87:20:c2:ac:ac:
84:2c:3a:64:61:26:75:67:19:85:4d:2d:da:9c:59:
7c:31:c0:05:bb:a9:97:59:19:58:e0:28:3d:f4:fd:
33:68:3f:29:1d:dc:8f:db:ae:f9:43:5b:3c:1e:b6:
b1:d9:fc:65:fb:6c:92:6e:6d:63:24:52:ea:1b:60:
8e:76:3c:fe:70:1f:69:f9:be:0e:a3:20:54:8b:b8:
b8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:57:C3:2D:B9:04:3A:AB:F1:CF:7D:95:74:A8:19:DB:7D:0F:EF:B5
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f1:76:a3:f5:bc:4d:71:7d:97:0c:a1:c2:8d:b4:6b:b5:18:
0d:88:27:12:b5:35:e8:8c:47:54:a3:a7:a5:ab:1c:5f:31:b2:
3a:29:c1:dd:62:0e:38:0c:e7:36:13:6d:cf:8c:41:d4:00:31:
90:0a:1d:88:44:fa:23:d9:f8:0c:fd:a0:01:5b:93:39:01:cd:
a0:3a:c1:06:e4:36:72:fc:00:25:59:fa:ea:5d:11:b7:c7:58:
97:df:9f:e0:23:60:e0:7a:3b:e7:04:86:b7:27:80:f7:ca:70:
26:3c:a2:20:37:c4:85:fd:e3:3c:49:77:a5:2f:87:6d:db:22:
09:27:ad:27:cd:2b:ad:a0:a1:5a:b4:da:00:29:b8:48:8c:40:
8d:a3:7e:99:46:a9:05:71:22:08:9d:b7:b0:66:65:f7:c0:b8:
f9:41:52:5e:66:7e:b6:1d:94:d3:1a:ea:98:d8:d6:0d:02:43:
5c:20:36:de:a8:1f:56:13:6d:72:24:21:fa:70:9b:60:7f:54:
d3:d0:ab:04:16:b5:fa:c8:27:86:51:a3:c6:c6:94:b2:cb:11:
d8:1c:35:31:63:c2:a5:7f:96:6b:32:68:a8:65:14:1b:f2:0d:
06:cd:bb:e9:9b:8e:a0:02:0b:ce:e0:81:c6:4f:3d:b3:63:dd:
f8:cc:ca:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:53 2025 by rpki-client