Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json)
Hash identifier: RnM7XvJGcWWi3a35xBjrWipwRMq1XJLZoK3128/DbXQ=
Subject key identifier: 89:52:0D:A0:B2:49:CB:8F:74:C8:6A:5A:49:41:AD:A1:6F:05:85:91
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial: 01951134BD2B859E9651F6E8C19EB869E15E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
Manifest number: 0E91
Signing time: Mon 17 Feb 2025 00:00:23 +0000
Manifest this update: Mon 17 Feb 2025 00:00:23 +0000
Manifest next update: Tue 18 Feb 2025 00:00:23 +0000
Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: XkRf/PUEx9xIADhOmWufY7cMyfhYm3qbwrczjnBLdoc=)
2: s0kyiXR6V1bkt2ciUZ2EpXqYq0U.roa (hash: BMvoEX7a6X6vFfIWsQqEPuUPXNmqfef7qS8aBYQEmho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:bd:2b:85:9e:96:51:f6:e8:c1:9e:b8:69:e1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Validity
Not Before: Feb 17 00:00:23 2025 GMT
Not After : Feb 18 00:00:23 2025 GMT
Subject: CN=89520da0b249cb8f74c86a5a4941ada16f058591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:14:34:81:3b:53:3d:77:32:3f:2d:6a:fb:
4e:32:55:32:22:7b:7f:38:7b:bc:9e:e6:63:27:6f:
72:c7:42:03:0c:dc:f4:bf:77:31:bd:31:2f:87:d2:
87:30:0a:a5:c2:db:90:fc:34:92:3a:03:5e:f7:0b:
0f:a0:d3:25:a1:35:32:81:f8:1c:04:9a:89:55:38:
76:44:ac:8f:a1:9a:2d:2f:da:0e:c1:13:a3:f0:5a:
cd:30:45:f2:fe:17:1a:76:58:42:80:26:99:92:81:
4c:3f:41:d8:b6:af:7c:26:9b:c1:3e:3f:28:3c:7d:
cf:12:bc:15:8f:f1:f9:eb:30:11:bb:13:7f:82:98:
18:69:b0:5f:b7:1e:ad:50:69:95:31:cc:c4:ec:87:
a4:00:b3:f9:30:d4:d5:3f:52:2b:63:9f:99:07:02:
62:ab:7e:cd:8f:52:12:eb:51:14:57:38:f2:0f:a3:
34:d9:57:d7:71:fb:1b:d5:9c:c1:e4:1b:4c:36:75:
77:2e:3b:2b:8b:7a:40:66:55:77:ce:e3:80:83:af:
dc:24:07:64:ae:fb:23:dc:6d:a4:7b:45:62:5b:e4:
8e:5b:9e:13:33:0a:25:8d:f0:f1:6e:e4:71:45:56:
85:3c:36:47:27:68:16:3e:50:27:03:2a:1b:07:9f:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:52:0D:A0:B2:49:CB:8F:74:C8:6A:5A:49:41:AD:A1:6F:05:85:91
X509v3 Authority Key Identifier:
keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3b:1b:c7:a6:04:07:87:1b:35:95:55:1e:8b:30:34:7d:dd:
b0:ce:42:48:33:de:be:79:f3:3b:51:bb:09:1d:13:62:03:7e:
31:25:bd:45:67:67:db:29:1f:f4:4f:71:c5:ff:fb:c9:da:59:
87:6e:df:86:dd:e2:d1:86:3d:9d:c2:96:c2:8d:5e:e4:ea:46:
40:c2:61:7a:52:f8:46:12:14:82:70:8b:fa:4b:35:7a:9a:98:
91:e8:db:4f:8f:d9:19:5d:5f:3d:84:e5:4f:4e:e8:65:fc:f7:
33:26:c3:db:83:fb:81:e6:8b:2a:16:34:07:7c:81:2a:0d:6b:
95:50:30:55:65:6e:36:8e:e0:1e:23:47:68:79:40:d3:94:08:
22:47:47:b6:ab:9f:b7:88:9d:05:d9:66:09:44:56:ad:e8:cd:
53:11:44:3b:d0:24:68:2d:37:73:08:e8:ba:e7:b5:21:01:07:
27:de:18:69:b1:d9:08:0b:20:72:12:1c:77:b7:8c:56:3f:7e:
4b:70:9c:9b:b1:72:06:70:84:ce:4e:4a:51:33:8c:c4:e3:c3:
8f:45:fd:cd:c6:88:9a:e1:4a:7d:0d:2a:c6:ff:be:5a:7f:94:
b9:ea:fc:d4:fe:d9:1f:10:67:fa:4e:a1:56:d9:c2:b8:05:9c:
49:2d:90:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:42 2025 by rpki-client