Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier: Ngy0wtIkacRSWGooa240I/OwHpFio3yRa/dJenHFzbQ=
Subject key identifier: F0:AC:01:AC:85:CA:84:C8:9C:08:C4:D9:A7:CA:3D:CC:0C:AD:6C:FA
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial: 019511A2ECE601A84BF009AD575F2AE17707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number: 145B
Signing time: Mon 17 Feb 2025 02:00:44 +0000
Manifest this update: Mon 17 Feb 2025 02:00:44 +0000
Manifest next update: Tue 18 Feb 2025 02:00:44 +0000
Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: 61gxdB8qkBY1oKPGr6l7f+HtbtOVUNS1nEzy9OrOE+g=)
2: Vj26lr7hbbX_fCXK7w3hESEooM0.roa (hash: gGIWp8lV6uKwDTfCg2XsPsepLLQekr1mHTq2CjmnAag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:ec:e6:01:a8:4b:f0:09:ad:57:5f:2a:e1:77:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Validity
Not Before: Feb 17 02:00:44 2025 GMT
Not After : Feb 18 02:00:44 2025 GMT
Subject: CN=f0ac01ac85ca84c89c08c4d9a7ca3dcc0cad6cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:ac:84:2e:0a:d5:b6:7b:f4:bb:14:20:99:
28:86:c2:03:b6:76:24:30:d5:f0:6e:37:10:37:d3:
96:50:0c:0e:7e:19:e7:a2:8f:2e:1d:99:dd:dc:90:
f6:5e:fa:65:c0:e9:77:da:5a:51:16:50:be:7e:cd:
8c:4c:43:89:bc:1f:78:c1:43:d2:3c:e0:0d:33:2b:
62:d0:19:05:20:bf:e8:96:51:55:e7:cf:9d:e2:da:
96:42:0f:ef:a2:07:b2:f2:20:76:e5:ab:6d:5d:24:
a2:1c:08:dc:c0:d8:22:59:3f:a1:52:53:e8:76:4a:
44:24:4a:01:c7:e5:49:0f:0d:18:8c:63:c3:f0:27:
01:ad:82:02:2e:21:31:87:79:7d:9a:94:a2:6c:04:
b8:60:46:be:9f:56:0d:35:fc:8e:8c:a7:9a:e7:5a:
f1:89:32:9c:73:24:87:56:d6:52:2f:3d:9a:62:2c:
64:4e:8a:d1:bb:e7:3e:da:16:d6:fa:24:9d:62:cf:
10:b0:a9:b4:17:93:aa:9f:2c:df:9f:e4:37:c9:2e:
b9:67:f7:a4:38:04:7b:ca:34:67:0e:35:df:14:f7:
1b:9f:bf:9d:1b:47:1d:76:1f:19:6d:d8:a0:98:5d:
73:a5:f2:93:15:eb:94:bc:eb:0a:29:72:72:c8:57:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AC:01:AC:85:CA:84:C8:9C:08:C4:D9:A7:CA:3D:CC:0C:AD:6C:FA
X509v3 Authority Key Identifier:
keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b5:8b:13:52:08:1f:80:98:f1:6e:9e:20:cc:f4:59:03:0e:
b2:d7:a0:0c:39:b1:9b:b2:b9:8e:78:db:5a:f9:ac:d3:9c:02:
7c:27:c3:7e:29:fe:34:9a:10:8f:4c:7f:c3:e6:81:52:9e:43:
a8:db:91:f2:ef:fc:71:da:7b:09:6e:f7:ea:43:0a:75:d4:35:
9f:23:e6:a3:18:1a:64:23:c3:0b:6d:d7:b8:fd:25:a1:c6:e5:
a2:ae:f9:38:59:70:32:ec:b5:10:2b:63:36:6f:7c:77:ad:25:
80:b9:57:98:a2:92:74:4e:d8:b6:09:78:e6:f8:51:91:66:67:
b3:eb:ff:da:5f:9f:c1:52:2e:d7:08:5e:92:4d:28:74:b5:c8:
59:eb:18:ee:a9:24:ce:d1:b7:d5:33:8a:36:c6:b5:cd:22:e6:
2e:d2:93:dd:57:84:86:9a:71:c0:fd:be:42:67:04:8c:d5:65:
8e:4d:79:95:89:5e:d2:01:3b:b4:0f:ee:47:2f:9f:9a:ee:79:
c6:83:93:00:21:86:33:3d:24:21:a2:ba:68:1a:17:46:7e:3d:
fb:34:7f:94:14:6b:b4:e3:07:fc:49:76:39:d9:85:95:4b:3f:
a5:9d:57:fa:00:e4:92:87:5a:24:e6:ed:c6:04:1e:70:a4:f7:
cb:3b:de:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:13 2025 by rpki-client