Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
File: Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft (raw, json)
Hash identifier: MqOHpDwb6teLB2QRFFwFscClaLn0U/Vk6pvxk2PZ1kU=
Subject key identifier: E0:89:4C:D3:18:E9:98:91:77:BC:A3:8D:44:3C:41:1A:9D:01:B4:8B
Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
Certificate issuer: /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Certificate serial: 019511A24E6A424B878822111E694466AF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
Manifest number: 01FA
Signing time: Mon 17 Feb 2025 02:00:04 +0000
Manifest this update: Mon 17 Feb 2025 02:00:04 +0000
Manifest next update: Tue 18 Feb 2025 02:00:04 +0000
Files and hashes: 1: HuIbCcMZ3U5fal8WQko5r7hmFPE.roa (hash: gsiwtZ3Lpg7UUxzfKZ1xNGJGO5Bt4L0AcldZ67+uEoo=)
2: Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl (hash: f0jR0qym3CXcOkxCW9XBjfBSytVvvZpubGn0pdtdGI4=)
3: fY7PiVaNASL9YPra9k_iCHjE_QA.roa (hash: o0Z+yqTEUGOR+lt86tr/WH+kJG6LQkAy74XbI2VEuOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:4e:6a:42:4b:87:88:22:11:1e:69:44:66:af:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Validity
Not Before: Feb 17 02:00:04 2025 GMT
Not After : Feb 18 02:00:04 2025 GMT
Subject: CN=e0894cd318e9989177bca38d443c411a9d01b48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:f7:aa:0a:b6:4c:3f:e1:3f:24:5f:ca:63:c5:
57:36:d0:5d:43:ba:20:33:5c:3c:29:a1:a9:b3:b2:
26:d9:6e:81:8b:c2:0a:98:a8:28:6d:4d:ec:6e:da:
4f:fe:4f:be:87:65:53:e4:ac:7f:d9:69:74:9d:7e:
c8:0e:91:eb:1a:92:2b:e1:97:60:c9:fe:a8:76:d3:
98:53:66:31:f2:6e:2c:81:ef:05:7c:3c:a8:88:ac:
f6:7d:e9:11:48:e9:4c:80:2b:46:eb:60:98:ca:75:
39:12:40:10:ab:2c:68:98:d7:ae:26:73:2a:b0:65:
33:ec:b6:2a:03:e6:fc:88:2d:db:36:98:00:b7:84:
df:cf:b2:74:d3:72:b3:81:70:8f:c9:5e:17:2a:fd:
5c:0e:f6:af:df:74:d6:58:78:c7:08:25:9b:fa:46:
96:27:2a:aa:c0:d5:20:87:2e:8a:29:94:4e:2a:a2:
9e:ae:98:ba:11:05:c3:02:00:dd:ad:d0:08:4a:e3:
3c:f6:af:c5:3f:df:68:60:9e:a0:f9:48:79:84:c0:
de:71:3a:c1:d2:2f:e6:51:3e:3b:5d:57:97:80:23:
8d:81:05:91:e5:65:11:23:99:e7:97:48:a3:5e:8e:
ff:bf:a9:fa:66:a7:ee:6c:56:8d:ff:b9:4e:0d:f4:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:89:4C:D3:18:E9:98:91:77:BC:A3:8D:44:3C:41:1A:9D:01:B4:8B
X509v3 Authority Key Identifier:
keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:be:2c:ec:1e:5d:ec:b2:71:8b:25:18:7e:aa:2d:f5:5c:88:
bd:6a:8b:da:17:82:a6:b4:a3:cb:2a:3d:8b:5a:a1:bd:8b:5a:
bb:5c:f1:5e:79:05:68:21:5f:a8:a9:e8:d5:50:fd:65:d8:bc:
15:01:6f:c3:2c:7e:1c:d3:2f:ee:27:cd:46:4a:66:b3:05:52:
f3:a4:47:58:7d:82:05:0b:98:41:c8:0a:a8:82:88:81:b4:68:
a6:52:59:7f:a8:c0:96:eb:d0:30:b6:0b:b6:1d:e5:b8:aa:d2:
95:0d:39:66:f1:02:aa:11:fc:c0:7e:f3:35:85:12:08:0f:fd:
1f:29:c0:a6:22:62:c7:11:e5:ab:bf:50:8e:54:71:f2:46:3a:
0d:b1:65:6c:50:dd:3e:32:57:a8:20:bb:a4:1c:5f:22:4f:ef:
63:57:b4:cf:85:34:87:96:b9:95:d0:f2:61:de:d0:14:ef:1e:
72:e3:ec:c3:26:d2:9f:81:02:cf:02:98:31:b2:c7:dd:29:0c:
d2:3f:b3:36:3a:2c:18:f6:3e:69:6e:9a:7b:b8:12:65:84:d8:
aa:16:d9:91:77:03:d6:f1:97:0b:59:6e:22:fc:04:f0:95:4d:
05:ee:22:2a:8f:a1:ca:2d:c2:09:b1:ec:4c:6d:20:d8:75:e6:
d1:b2:fd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:48 2025 by rpki-client