Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
File: uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json)
Hash identifier: hJpTOHM/f23yZmzQcQEInTuXwqedEygOGbGCp/6+/Po=
Subject key identifier: 46:AE:33:60:39:C4:D4:F2:07:A2:2B:FE:73:C0:3E:4C:85:7C:7A:D6
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Certificate issuer: /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial: 01951210A30804A1BAE1FD398E12D92A1EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
Manifest number: 1469
Signing time: Mon 17 Feb 2025 04:00:34 +0000
Manifest this update: Mon 17 Feb 2025 04:00:34 +0000
Manifest next update: Tue 18 Feb 2025 04:00:34 +0000
Files and hashes: 1: 1-K85qD4oivLUF1xQTVdq9r6NP7E.roa (hash: nx/kf+a12fPw7UIC5V6RoawXCPrhI9ndmVDlY4gQn1s=)
2: U-t-KYuIcMt9Lh-EEvDxBNSehA0.roa (hash: fNtqhAHoXJ8NAQIhvkEaB4dv9gnWdklcvBIBzltM3i4=)
3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: 4huo0q1HnSibj2jiRRwmL4uZdIHWG8cQqHrclKw7+Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:a3:08:04:a1:ba:e1:fd:39:8e:12:d9:2a:1e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Validity
Not Before: Feb 17 04:00:34 2025 GMT
Not After : Feb 18 04:00:34 2025 GMT
Subject: CN=46ae336039c4d4f207a22bfe73c03e4c857c7ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:f2:83:97:3b:a0:84:cb:e1:23:3a:0f:a1:
28:80:12:1b:68:32:d6:9f:df:78:30:5d:d5:40:d4:
2b:85:e0:2c:44:c8:3d:4a:84:35:d5:14:a6:e2:8c:
7a:4c:d4:dc:84:1b:61:ea:4a:43:4d:6d:59:2a:f0:
17:24:d3:80:f9:e2:2b:89:88:5e:fd:09:e4:72:0f:
d2:76:68:50:9f:6b:02:f4:35:d6:e0:62:43:fe:46:
e3:a5:f0:05:8a:5d:52:27:aa:fd:69:ea:38:e3:9a:
fe:a7:26:24:d2:0f:b4:23:53:85:e0:57:2e:ce:e9:
fe:d3:55:e6:1e:d2:44:4b:25:69:a2:62:7c:76:10:
1d:2a:14:94:91:b6:a5:d0:70:52:2e:b0:89:12:0f:
6d:2f:25:84:74:7c:8b:55:e5:0a:81:ea:3d:e9:e1:
20:a0:b7:6c:16:a1:78:ed:39:ad:02:28:e5:da:05:
da:96:2a:f5:1d:f9:13:1a:47:6d:3d:4f:3f:da:35:
7d:dc:39:45:0e:37:c3:ac:6d:4f:25:fd:a7:b5:8a:
96:3d:00:08:4f:83:f4:69:64:e5:2c:2a:07:4f:31:
5c:7d:88:bc:a4:23:70:f7:53:3e:2e:16:ba:14:28:
fe:4c:a8:46:85:6a:1c:f8:a6:bf:c0:19:b3:41:06:
40:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AE:33:60:39:C4:D4:F2:07:A2:2B:FE:73:C0:3E:4C:85:7C:7A:D6
X509v3 Authority Key Identifier:
keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:94:f2:22:b6:9f:18:85:8f:78:30:c9:33:61:d9:78:fa:f6:
34:f2:55:3c:1a:e2:99:86:75:ca:ff:33:aa:b0:35:4f:ad:ea:
0a:7a:c5:36:d2:2f:9e:cb:61:6b:90:70:e1:9c:26:f4:f7:1e:
10:6e:d8:e5:1a:b6:cc:d5:f2:8e:27:10:a0:e2:4c:fc:ae:93:
f6:82:9a:c6:72:4e:16:73:46:6b:4e:81:26:9e:c3:51:e8:e0:
46:9e:38:ea:0c:b3:a6:6c:98:05:4c:f8:b2:34:24:a9:45:df:
0f:14:45:c6:c0:12:4a:df:5e:dc:36:16:22:05:ee:69:85:dc:
92:a0:c5:14:4c:7e:fe:e7:66:6b:f9:d1:28:45:e1:f8:cf:ef:
0f:bf:45:76:5c:bb:58:8a:51:40:df:ee:9c:c0:f5:64:2e:e1:
2f:e0:a3:13:32:e4:bb:37:c1:fa:f9:2f:04:6a:c1:1e:a9:97:
85:06:4c:2a:7a:8c:de:36:da:a4:bb:9b:74:3f:d5:df:37:2f:
26:a4:c6:00:47:4d:48:4b:98:05:2f:2e:16:c4:4f:0e:2d:9a:
e7:4c:cb:fa:29:15:9f:9e:ad:60:31:1f:2e:dc:53:21:a7:fa:
fb:75:a1:fd:61:d2:96:c7:4e:68:09:ba:64:46:96:0c:12:10:
a4:1c:44:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:17 2025 by rpki-client