Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
File: tCV3H5kv1037Bzbmla61nGr2fpM.mft (raw, json)
Hash identifier: i5hTe1DE4xoMjHiZfHqoLZl2bLcTMEaG7twpkia/vzI=
Subject key identifier: 25:35:BD:BF:05:18:DC:48:50:60:76:EC:F1:0A:52:FA:59:93:15:F4
Authority key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
Certificate issuer: /CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Certificate serial: 019510C793F906DEADB75237BC1ADE4D3297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
Manifest number: 0526
Signing time: Sun 16 Feb 2025 22:01:09 +0000
Manifest this update: Sun 16 Feb 2025 22:01:09 +0000
Manifest next update: Mon 17 Feb 2025 22:01:09 +0000
Files and hashes: 1: Vw2yLSQ3LTxqIY-0jpawdHHYRZc.roa (hash: iTSHI+c9vyvdBq9ojdYKL9zsD6xY6XyH0HTCqL60iXA=)
2: tCV3H5kv1037Bzbmla61nGr2fpM.crl (hash: 9I11G7wB3izWQ2r9yNCa3t8yU35+7XuGn7EVhYrhIEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:93:f9:06:de:ad:b7:52:37:bc:1a:de:4d:32:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Validity
Not Before: Feb 16 22:01:09 2025 GMT
Not After : Feb 17 22:01:09 2025 GMT
Subject: CN=2535bdbf0518dc48506076ecf10a52fa599315f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:72:bd:4c:9f:8a:6d:73:ca:fc:4f:2f:14:8e:
9b:83:43:55:6b:ca:aa:2a:f5:eb:47:d6:7c:1a:fd:
8b:25:70:06:2e:be:75:c7:fc:78:dc:f4:44:39:b6:
13:f5:c6:c4:99:bc:4e:99:5c:d9:15:dc:1f:3d:ee:
86:f5:12:32:b6:49:2a:65:2d:6b:cf:07:2d:62:c1:
aa:43:93:bc:3c:34:88:a0:de:23:e8:c9:eb:cc:85:
ef:0d:f4:0f:0e:3a:50:7c:3a:de:72:7c:0a:d5:7b:
42:df:f6:71:d8:a7:e6:2d:68:0f:51:ae:03:f7:5b:
ca:47:56:38:1c:07:24:2c:55:42:ab:0f:3e:04:fc:
a8:ea:c2:33:50:e7:ae:52:45:de:1b:cf:e2:ce:cc:
d3:b1:b9:86:9a:3c:66:8c:0c:d3:97:37:d3:b0:64:
8d:45:2b:39:0f:04:a4:22:fb:51:80:f3:c8:c9:a9:
00:da:c1:60:88:07:d3:d6:eb:ef:83:19:1b:24:73:
69:c3:f7:1d:04:7d:23:ef:0b:ca:dd:73:70:80:d8:
8f:7b:eb:d9:fc:7c:4e:6a:2d:2e:0d:bf:1b:76:29:
ff:d8:44:71:ce:08:b4:88:7b:8d:eb:95:28:ed:dd:
ef:62:77:5c:9d:b8:28:87:b2:dd:ae:4f:15:6e:4d:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:35:BD:BF:05:18:DC:48:50:60:76:EC:F1:0A:52:FA:59:93:15:F4
X509v3 Authority Key Identifier:
keyid:B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3f:3e:94:2e:34:8c:de:4c:42:17:6b:e7:99:be:2f:a3:c4:
e2:8e:b3:79:7c:15:03:68:ea:b1:b8:14:7f:1d:ac:28:92:36:
b0:b4:ab:18:cc:4f:88:2d:96:65:20:52:fb:f6:5f:bd:5e:4e:
af:35:7f:a0:53:f2:aa:a1:fc:9c:56:8a:35:7c:88:de:fe:9e:
f1:39:6b:08:35:a2:61:25:a0:73:4e:fe:01:4a:9c:bb:46:62:
e2:98:53:35:2d:d7:bf:0a:1c:78:4b:11:bf:b2:42:8b:b8:2e:
1a:17:3e:e6:04:43:73:1c:ee:dd:40:04:49:fa:81:70:b1:01:
f6:bc:f1:18:25:e3:77:86:72:4e:72:cb:be:31:ef:01:c8:4d:
4b:14:fd:a0:bd:21:fc:2d:3d:9a:77:ec:9a:a2:4f:ba:85:79:
5a:08:c3:71:95:3c:bb:df:11:2c:1c:73:cc:96:64:9a:36:33:
6f:83:83:88:a2:a0:d9:6f:27:26:12:f5:7c:34:11:3e:42:82:
8a:7f:6e:1e:0c:14:a2:97:a8:c0:aa:b6:c2:74:b6:aa:b1:e3:
c8:ec:fc:49:76:4d:a9:c5:5a:93:ad:29:e4:2f:e0:7e:9e:bb:
cb:a9:da:0e:b1:f8:67:35:1c:fb:22:f8:8b:27:56:e6:95:93:
6c:95:d8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:44 2025 by rpki-client