Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
File: spvHpkk9OBeN1_XpxJDI7zqKWYs.mft (raw, json)
Hash identifier: xcz4T0eYzsK6S3GXh8Y9nKq7gteQ9bOQNfmka+AgYtI=
Subject key identifier: 57:97:36:23:9D:EB:82:BD:EF:A0:FF:51:A9:2B:2B:BC:69:E7:7D:76
Authority key identifier: B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
Certificate issuer: /CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Certificate serial: 0194C4D13B92C07942CC20EB9570F14845EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
Manifest number: 31
Signing time: Sun 02 Feb 2025 04:00:34 +0000
Manifest this update: Sun 02 Feb 2025 04:00:34 +0000
Manifest next update: Mon 03 Feb 2025 04:00:34 +0000
Files and hashes: 1: _a9iaZrjBk-wbx-ww9Y6UH5mTzg.roa (hash: 5gzPI03HllGyMTQY0xFdUnePky078f9CBw1LIzGaktA=)
2: spvHpkk9OBeN1_XpxJDI7zqKWYs.crl (hash: zs6cYL6Vbd+lB1vXS4Aj9GAV5MZO84eBZGbmr7+Bzk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:3b:92:c0:79:42:cc:20:eb:95:70:f1:48:45:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Validity
Not Before: Feb 2 04:00:34 2025 GMT
Not After : Feb 3 04:00:34 2025 GMT
Subject: CN=579736239deb82bdefa0ff51a92b2bbc69e77d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:26:c6:89:c2:99:c2:e3:be:91:fd:c7:41:
48:a3:10:b4:aa:3e:87:1c:41:96:dd:63:b5:dc:fc:
a3:02:ff:ad:fb:bb:d5:3a:fd:6e:0f:9a:b6:57:2e:
06:80:37:3e:06:c0:cd:27:fe:f4:5e:77:25:39:fc:
2a:a3:7c:98:91:f0:d8:22:10:48:26:98:7c:5a:68:
b9:d1:5e:c0:15:f6:c4:4d:67:28:e2:f2:78:dc:86:
dc:d4:00:74:32:ea:8b:07:82:85:b8:d4:4a:71:f1:
2b:02:a5:e9:57:4b:3b:93:4a:1c:1d:a7:96:df:06:
b0:8f:be:5b:aa:cb:81:d8:bd:cb:b8:75:46:a3:e7:
26:b2:cb:67:ca:53:b3:b0:4d:50:6e:81:c6:21:ef:
e2:19:69:57:9f:20:2a:68:0b:1c:da:35:11:33:11:
88:00:de:af:a7:8e:54:f5:c1:7a:76:c3:be:d4:fe:
f6:1f:06:76:b7:01:16:79:11:1a:86:76:69:a1:09:
84:6d:ad:66:6e:72:90:93:0c:5c:74:a6:94:b8:03:
47:ae:e1:41:18:98:f3:91:43:b2:aa:f3:1a:aa:fb:
be:e2:66:65:73:d8:05:94:d1:c2:94:88:81:52:90:
18:42:6c:54:30:21:7b:87:c0:37:08:7e:3e:52:77:
9f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:97:36:23:9D:EB:82:BD:EF:A0:FF:51:A9:2B:2B:BC:69:E7:7D:76
X509v3 Authority Key Identifier:
keyid:B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b0:0d:07:90:4e:66:8d:3e:51:5b:f5:31:87:fb:ae:70:e0:
e8:74:02:c8:ce:62:7f:94:ca:d3:25:52:95:31:9c:aa:91:2a:
02:bc:59:97:f4:ba:4d:85:6a:81:33:33:5f:52:98:c0:96:59:
ee:f1:96:a2:56:42:a5:1f:c6:32:4c:b9:21:40:8e:7d:62:28:
62:ca:0c:20:fd:fd:09:10:a2:14:e9:71:99:8f:3e:dc:6b:4c:
6f:cb:87:7c:db:0d:ec:5f:a3:d4:7e:36:09:21:2f:aa:c6:c9:
11:bc:79:a6:18:dd:1a:da:ab:6f:92:e8:fd:9c:74:2e:3e:3c:
c6:a6:51:a8:a9:64:16:c2:30:9a:75:25:dd:fd:7c:4a:cf:09:
4d:2b:72:ff:e8:d2:97:bc:7e:09:65:90:31:12:46:76:51:5b:
53:76:f8:02:26:4d:c7:c3:7c:43:46:87:5b:0b:5e:d6:5b:5f:
f1:fc:8a:e5:cf:97:5f:58:d9:58:02:a6:bd:44:52:09:f5:97:
3c:e2:97:69:4b:b5:e1:35:13:03:e3:ef:1e:34:d5:11:52:7d:
44:1c:3c:e0:8e:dd:88:eb:3c:20:f7:5a:2d:a9:7a:7a:67:65:
8d:4f:37:5b:84:b9:ac:80:4e:f5:37:9e:d1:60:0b:d9:93:fd:
7f:09:6e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:23 2025 by rpki-client