Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
File: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft (raw, json)
Hash identifier: rOWOwZ06bl6sqiJ8KMHL4ZK5CSRETC4ZxoFLBMyyVZM=
Subject key identifier: 02:47:3F:EE:1F:E0:AA:C9:CC:FC:62:B2:42:45:01:7D:1F:6A:2F:93
Authority key identifier: 69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
Certificate issuer: /CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Certificate serial: 019510FDE21988C66709AD20E56CFF9BF4A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 23:00:28 +0000
Manifest this update: Sun 16 Feb 2025 23:00:28 +0000
Manifest next update: Mon 17 Feb 2025 23:00:28 +0000
Files and hashes: 1: YixLFlfODucpz3SmvGUoO943czQ.roa (hash: U+vdy0unHKQkRcci4HnKyZFl5mHyggPlDsq3RNujwyk=)
2: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl (hash: McOLfLoOInHIw81oPyYM1UxEgg1eUyioX8RKsIIUuZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:e2:19:88:c6:67:09:ad:20:e5:6c:ff:9b:f4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Validity
Not Before: Feb 16 23:00:28 2025 GMT
Not After : Feb 17 23:00:28 2025 GMT
Subject: CN=02473fee1fe0aac9ccfc62b24245017d1f6a2f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:c3:a1:b7:e9:fd:68:f3:75:6e:7c:9d:af:
5d:79:23:d1:06:39:2b:89:79:ca:4f:b8:c0:f7:a8:
46:98:cd:38:9f:96:2f:fa:0b:4a:82:56:7d:00:97:
5b:f5:cb:ac:dc:78:0c:92:75:05:ee:8d:24:70:4b:
51:f7:97:b3:c2:5f:c4:42:2f:0d:09:32:61:96:e7:
e4:d8:74:06:ab:2c:fc:63:8c:d2:a3:46:ea:9e:7c:
c7:a7:a8:ec:15:3a:25:28:11:06:88:81:7c:c6:c7:
6e:18:6a:ab:a4:44:f4:db:b3:fa:af:02:e2:55:39:
e7:bc:89:d0:12:d5:39:77:26:ae:ce:97:61:70:25:
f7:26:46:33:78:9a:32:da:1a:6c:2f:88:d4:fe:2e:
91:07:ac:9c:8d:b4:af:e6:8c:7b:df:97:ee:c2:a6:
e1:f2:7a:e7:1f:12:a7:60:7d:c6:5a:4b:3e:d2:d9:
97:7e:08:c3:b1:c8:fc:36:4c:07:af:a5:e0:bb:bc:
f2:85:bd:fa:c3:b9:58:f5:c5:cb:fe:5f:60:f6:85:
ba:e7:53:c0:fe:cc:1c:74:4d:9b:b5:e9:de:09:4d:
89:93:19:fb:d7:ad:da:be:21:c8:e9:fb:29:48:97:
94:9b:03:1a:b3:5b:f1:a4:a0:18:4a:62:31:12:4e:
43:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:47:3F:EE:1F:E0:AA:C9:CC:FC:62:B2:42:45:01:7D:1F:6A:2F:93
X509v3 Authority Key Identifier:
keyid:69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8d:be:c2:ac:1f:cf:a2:33:2e:91:c9:3b:6c:31:a0:d7:d3:
3c:c4:0e:cc:79:ec:37:3a:fe:a8:e9:43:05:09:64:c2:fe:33:
36:12:14:25:e0:6d:d5:73:f5:81:13:60:2a:50:6f:30:6b:83:
90:c6:3f:98:68:10:75:02:13:9a:2d:78:c2:d3:13:f3:54:f5:
2c:0d:6c:f9:e1:cb:eb:09:9c:94:bd:95:22:44:4c:4c:c6:66:
74:1e:f7:8f:59:40:89:92:cd:82:ac:52:dc:2d:c3:d9:06:eb:
d9:25:4f:6f:27:41:ef:13:99:c6:da:1c:43:62:6a:f2:ad:92:
50:0c:9e:01:bb:85:b0:74:a9:73:b3:f4:19:94:62:4f:80:38:
28:6c:11:49:f7:eb:51:f0:54:49:6a:f1:d4:2a:1c:b1:8f:7f:
11:ec:0c:d4:82:97:04:32:f2:af:6d:7a:b0:6d:f6:cc:0b:60:
87:3f:61:93:a9:56:3e:66:20:d6:44:55:01:52:31:27:e0:2c:
27:ac:e7:a1:fc:fb:e5:a5:4c:ed:48:27:91:1f:a9:76:5d:11:
b3:ad:4a:96:32:52:84:5f:cc:d2:5a:2d:aa:cd:2f:e7:8f:49:
95:61:65:17:d5:b3:c4:70:0b:65:1c:52:3b:0b:7e:b2:43:aa:
c9:57:17:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:19 2025 by rpki-client