Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
File: dODVhfGshfVEks_JXh3OD8L3lw8.mft (raw, json)
Hash identifier: K5teWLCEo5zDm18q2WuM5Jnnk7MjIBvbhbQ9GfoAVuE=
Subject key identifier: D2:83:B7:52:5E:34:98:49:F8:19:1B:A3:A2:FD:99:67:19:E1:79:46
Authority key identifier: 74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
Certificate issuer: /CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Certificate serial: 0194C350C729700B1E5540D7BF695B230B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
Manifest number: 76
Signing time: Sat 01 Feb 2025 21:00:38 +0000
Manifest this update: Sat 01 Feb 2025 21:00:38 +0000
Manifest next update: Sun 02 Feb 2025 21:00:38 +0000
Files and hashes: 1: ZK2-Yf0vyUn-1yqVZSeh59hAASc.roa (hash: dJFWEY6bKtkQB9DqJ5/i3H6PU+2US3ATnt6WwIQ5YmQ=)
2: dODVhfGshfVEks_JXh3OD8L3lw8.crl (hash: u6k/8fZMsP/6hE3Gud5/tAKx+x+0tyP9f3onRTe9Nqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:c7:29:70:0b:1e:55:40:d7:bf:69:5b:23:0b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Validity
Not Before: Feb 1 21:00:38 2025 GMT
Not After : Feb 2 21:00:38 2025 GMT
Subject: CN=d283b7525e349849f8191ba3a2fd996719e17946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:38:37:e9:51:86:48:94:65:dc:db:94:fd:4b:
37:f5:1b:29:45:24:16:d9:61:7d:7a:88:49:07:16:
aa:9f:65:9c:dc:42:3f:66:13:ab:67:0a:aa:79:17:
59:c0:21:95:ec:1d:ec:16:3d:0b:ec:43:61:10:02:
e3:de:f1:fd:8e:ad:aa:f2:34:4b:d1:27:7e:6c:bf:
d5:12:a8:b9:0f:8c:f5:ae:a5:8b:6c:b7:28:07:d3:
8d:f5:68:0c:1a:4f:22:02:5d:85:48:63:e8:da:16:
9d:ff:1c:bd:8a:43:26:fd:66:39:a6:6d:d4:c6:dd:
98:3b:68:c2:09:93:e7:22:71:26:ca:1c:25:e6:32:
e9:85:5f:9e:4d:b8:fc:6d:e6:d7:15:fd:55:56:80:
cc:9e:5f:6e:5f:09:3a:54:1e:90:fb:93:ba:3b:5e:
57:a2:e0:cb:81:8b:2d:4e:19:db:0e:7a:4d:f9:25:
b5:aa:d1:34:34:38:67:ce:92:27:e8:ee:6e:ab:42:
f8:cf:bc:0f:c8:20:9d:73:5f:05:83:e7:7d:32:ff:
54:13:28:0e:22:66:67:29:18:4b:1c:5f:37:4f:c8:
e8:77:4f:74:7d:5a:e2:90:a9:ad:93:d6:9c:95:5e:
98:19:7f:63:24:cd:a8:78:b9:0c:a8:56:f9:bf:8d:
b9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:83:B7:52:5E:34:98:49:F8:19:1B:A3:A2:FD:99:67:19:E1:79:46
X509v3 Authority Key Identifier:
keyid:74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:86:4f:01:9d:e7:d2:bf:e9:ea:6f:f9:6a:2a:b1:a4:79:5c:
04:e1:d7:36:78:76:25:9b:06:c7:da:8e:7d:30:5d:8d:aa:c6:
8d:43:bb:6f:72:30:b7:50:05:8e:29:45:e0:8d:05:b3:6d:06:
1c:62:8d:b6:99:d4:d6:e1:7f:99:b3:ac:d1:c3:98:d0:4c:9d:
08:15:93:3c:bd:77:1f:cc:48:88:4f:94:18:90:5d:75:0b:7a:
18:22:84:d4:6e:0e:eb:0c:46:a5:98:96:f3:a3:51:c8:6a:78:
e5:eb:25:da:e0:75:27:82:9b:88:58:36:e4:4f:fc:4e:af:8f:
20:63:b6:ae:f5:bd:d5:f6:52:36:d9:1b:e3:1a:a7:cc:59:82:
0f:11:ff:b5:36:c8:ed:ea:c8:77:26:93:af:8c:09:24:29:9e:
87:f2:2f:32:e9:64:38:38:f3:ce:98:b1:92:eb:a8:ce:9e:25:
50:b7:3c:ca:be:c3:95:a1:8c:49:41:2c:72:4f:64:4a:ba:40:
df:fa:33:e8:fa:af:f1:a7:0f:65:ae:8c:44:2d:df:af:4d:70:
bf:dd:6d:77:3e:03:02:8e:98:8f:06:cb:85:86:00:b6:f2:8b:
64:29:6d:8e:45:af:32:2d:e5:25:ae:84:35:2e:54:26:11:b2:
f6:f8:8e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:43 2025 by rpki-client