Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
File: rpSIkT1zR5eD2nv1axZOXITU_Go.mft (raw, json)
Hash identifier: 15TfvMsDQMwzvXHgPa25bHC49fogK9GJo3REH15nnuk=
Subject key identifier: BF:F3:DC:EC:67:CB:0F:DC:64:6B:35:FD:69:8E:06:49:56:8E:4B:79
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 019511D9BEFFA5B8FC86FA9BA81C73844E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 03:00:37 +0000
Manifest this update: Mon 17 Feb 2025 03:00:37 +0000
Manifest next update: Tue 18 Feb 2025 03:00:37 +0000
Files and hashes: 1: AYRRAczcbq7u60pHgYeS1szSrpI.roa (hash: HzlS835dTUJE//lhH5z57Uv4DsWgC3yZXjv319hgV3I=)
2: rpSIkT1zR5eD2nv1axZOXITU_Go.crl (hash: vX3aL2+RBo35eC3OKFLvEsb9QDppui3t0peT/EQNLOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:be:ff:a5:b8:fc:86:fa:9b:a8:1c:73:84:4e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: Feb 17 03:00:37 2025 GMT
Not After : Feb 18 03:00:37 2025 GMT
Subject: CN=bff3dcec67cb0fdc646b35fd698e0649568e4b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:cc:0c:1d:9e:bb:9d:c4:f4:ca:2e:3f:cd:
49:32:36:7f:f5:00:f9:fc:c3:e9:e1:5c:0f:07:fe:
f3:e5:61:1f:e7:8b:59:1e:b7:2a:ae:5f:40:e5:08:
c4:20:11:62:a4:6c:d9:c4:e7:55:de:a8:39:ef:1b:
28:e5:a2:9a:a8:3c:a2:49:47:c9:91:d7:92:58:01:
c6:f4:00:29:92:99:b6:ee:51:6d:37:a3:4e:01:58:
21:82:9f:cf:ba:6e:c3:84:9c:30:2b:61:07:4a:c5:
08:da:35:61:3a:97:a4:09:c4:d8:a9:8d:ea:3c:15:
60:30:6e:9b:1b:43:9f:94:8e:57:2d:46:fc:96:c0:
5d:e7:e9:de:7f:16:ad:75:95:c3:bd:25:ce:b7:c8:
45:36:71:b0:08:ee:a1:28:ee:00:c1:3f:d2:6e:7f:
a2:eb:44:6c:0b:fe:d1:d9:3f:3e:62:9b:97:ea:db:
f5:8a:7c:87:f8:e4:2e:ec:20:a4:2e:d1:97:71:9f:
38:d6:70:54:66:8f:15:62:7b:bf:0a:f9:75:6b:a4:
d3:1f:12:ca:9c:15:f4:1c:dd:86:c0:74:92:d1:93:
6d:6e:51:2a:e2:84:55:92:c7:ac:f8:ab:b1:d9:d3:
b3:60:f8:97:65:06:98:2f:a1:79:6d:68:f4:37:eb:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F3:DC:EC:67:CB:0F:DC:64:6B:35:FD:69:8E:06:49:56:8E:4B:79
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d7:93:76:00:7c:d1:21:2f:ed:41:4e:f4:2b:f6:f1:d1:95:
34:27:9b:d7:54:2b:6e:23:44:9f:0a:d2:34:17:85:3d:45:12:
77:41:11:27:47:5f:c0:cd:c1:1b:e9:9b:64:fd:9e:bb:b9:5a:
96:d6:50:f0:91:62:80:2a:5a:22:86:4f:41:01:f0:b4:fd:16:
bd:f5:ec:14:d4:5f:13:40:df:31:63:ce:38:c4:b3:14:82:0e:
cd:8d:0b:a5:43:bd:ee:13:97:be:df:33:c6:f2:58:43:c2:f4:
a6:58:76:de:bd:07:95:4d:8c:7d:d3:2c:9e:89:0d:2a:5a:75:
64:0e:12:92:4d:28:87:4e:3d:f0:a8:8c:47:7e:d2:2c:a5:ac:
68:73:64:03:b0:6e:aa:4a:17:2d:eb:86:e2:5c:20:18:7b:93:
08:4b:3d:52:db:65:cf:f6:83:05:83:45:20:52:9c:54:f2:0b:
02:e5:f7:45:ab:48:08:c1:16:a1:c0:9b:ca:a4:a7:15:68:30:
13:48:b4:a8:9c:b1:5d:9d:62:ac:e1:8b:92:17:17:53:39:31:
a2:ae:da:f7:d7:cc:a3:d1:fc:38:bf:4b:da:2e:94:71:ff:5b:
b4:fb:9b:2c:a6:2b:2c:42:4f:e6:ed:33:72:3d:44:8d:55:dc:
79:13:85:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:28 2025 by rpki-client