Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
File: 553FQ1otyX42X_SVcMBNUT9vztI.mft (raw, json)
Hash identifier: GadV3Is4hzvqI+Bj5wso1nTjMhryKtOxMolBUOM1emc=
Subject key identifier: 32:FC:C1:61:EB:4A:97:B5:C9:14:02:D3:32:6F:00:8C:A5:A4:C3:E9
Authority key identifier: E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2
Certificate issuer: /CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
Certificate serial: 0195124799DA286AB2DCB2C0ABBD650AB954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
Manifest number: 0DA7
Signing time: Mon 17 Feb 2025 05:00:37 +0000
Manifest this update: Mon 17 Feb 2025 05:00:37 +0000
Manifest next update: Tue 18 Feb 2025 05:00:37 +0000
Files and hashes: 1: 553FQ1otyX42X_SVcMBNUT9vztI.crl (hash: ffxtl3GUEKHNsvY5ON6qPPKBOi3l8+SxtsCprLm2FQU=)
2: Ojwfa5xEijMvd_j_LAOzs7vnqW4.roa (hash: BXNYaUB0Zfc7mvCgmarWMLrgrg5dZOzYs8T6+u6yFW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:99:da:28:6a:b2:dc:b2:c0:ab:bd:65:0a:b9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
Validity
Not Before: Feb 17 05:00:37 2025 GMT
Not After : Feb 18 05:00:37 2025 GMT
Subject: CN=32fcc161eb4a97b5c91402d3326f008ca5a4c3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:87:71:2b:1c:c5:30:81:da:7e:80:fd:d4:
82:63:d2:25:3f:a7:9d:d5:2a:df:9a:83:a6:95:95:
8b:96:b9:42:1d:bf:77:f2:df:31:5d:8b:f8:bf:99:
b1:81:38:ad:e2:f9:0b:d6:47:da:8e:4e:1f:55:8d:
a3:97:48:2c:44:14:1e:cb:bc:ff:52:76:b5:39:25:
cf:de:09:67:b2:a2:fb:66:cd:f7:bd:1d:2b:26:13:
53:94:6e:02:af:77:2d:67:29:b3:44:1e:a0:db:82:
57:89:c8:19:e3:cd:a1:f4:b8:87:51:aa:d4:52:b9:
09:50:8d:11:aa:af:19:5a:50:77:69:70:a9:0c:16:
c0:8d:df:5b:96:6c:00:21:57:61:d7:9b:2e:44:53:
81:01:d8:d5:b8:ce:e8:9e:d1:11:85:da:e3:5e:33:
06:3a:8c:f1:b5:22:0c:c5:90:f6:fd:00:28:8d:4e:
68:9c:4a:be:87:68:53:08:be:91:13:91:2d:ae:98:
53:c7:33:a7:21:21:91:0b:84:c3:e2:a2:f9:96:2f:
28:16:48:4c:a7:4d:d3:96:c4:1c:c3:2a:2d:22:11:
1c:ff:64:39:a8:3d:2d:85:bb:48:5a:85:b0:9e:2b:
87:6f:41:8e:36:02:f8:9f:0b:9e:f8:90:93:49:41:
73:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FC:C1:61:EB:4A:97:B5:C9:14:02:D3:32:6F:00:8C:A5:A4:C3:E9
X509v3 Authority Key Identifier:
keyid:E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f8:f5:a8:87:7b:3f:1f:6b:f9:d8:93:8f:ea:04:96:37:41:
2f:0e:21:3d:17:3e:f2:1d:68:96:f3:f6:f5:1d:96:6f:80:c0:
a3:41:fa:4e:f8:e8:28:f2:ed:14:f5:5d:aa:c5:cc:21:78:f9:
d1:c7:24:d6:12:52:2e:48:8d:45:c4:7f:c6:e4:94:9e:c1:88:
17:c2:37:6e:84:d4:90:6f:13:63:e7:fe:fb:15:dc:3d:9b:65:
9c:5f:8a:39:d7:3c:cd:4b:f8:b6:95:45:30:a5:d3:f1:cd:ed:
ef:83:e7:17:4d:4d:9b:af:57:07:b2:8d:4b:4e:d3:de:e2:17:
02:d0:39:ff:b1:ac:f7:88:ea:13:dd:44:0f:3b:17:c6:b5:aa:
05:44:c7:2f:d8:64:a1:fe:65:b7:48:64:1b:7f:f9:88:33:52:
da:00:9d:43:b6:88:75:86:5b:4e:cb:15:2b:34:23:99:17:ba:
ff:9e:4c:bd:94:e6:c2:f2:7d:7e:29:af:98:44:ab:20:f0:de:
00:d4:9d:97:96:0c:15:6d:c5:c1:28:79:fc:98:46:d3:dd:20:
f8:08:66:5e:9f:7a:0a:68:46:82:ff:c3:98:87:46:3e:d1:b1:
f6:3b:1e:99:09:db:b1:0d:db:be:4f:e6:14:96:82:32:95:15:
0a:a9:1e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:22 2025 by rpki-client