Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
File: g9Nuy69V5GTgCzmH2lJktq8tz4g.mft (raw, json)
Hash identifier: 2waBcDSgTRkp4n6jLCwVIP6Prj+4SjBAvWmDOoD73Yc=
Subject key identifier: F5:CD:F8:6F:96:B7:94:31:CA:90:37:AD:0E:8B:93:B8:6D:82:92:AF
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial: 019511A2CA35346936FB6F92A6FAF0ECEC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
Manifest number: 0943
Signing time: Mon 17 Feb 2025 02:00:36 +0000
Manifest this update: Mon 17 Feb 2025 02:00:36 +0000
Manifest next update: Tue 18 Feb 2025 02:00:36 +0000
Files and hashes: 1: Ep6x42DXRSqizolUteEfvKxUcLA.roa (hash: R7QtcNnXyeV8OJfFTG/3xT0jdYWPM+BRX6IIEmRZyXk=)
2: g9Nuy69V5GTgCzmH2lJktq8tz4g.crl (hash: e8342TIU0jeMqgnNzDjWRksgq8NtEQxro4lgmb84B68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:ca:35:34:69:36:fb:6f:92:a6:fa:f0:ec:ec:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Validity
Not Before: Feb 17 02:00:36 2025 GMT
Not After : Feb 18 02:00:36 2025 GMT
Subject: CN=f5cdf86f96b79431ca9037ad0e8b93b86d8292af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:2d:09:99:9e:a5:09:3e:d2:ef:40:d2:6e:
ca:34:10:f4:e8:aa:46:4a:4f:14:53:a4:4b:16:f8:
19:b6:a0:1c:f4:b1:19:45:f3:19:b6:7b:3b:72:42:
24:09:0b:ea:56:e3:d0:94:7f:c4:2f:f2:11:67:6a:
c5:4d:81:f5:39:55:f9:31:cb:84:3d:02:4d:f8:c8:
ee:d6:b4:a9:a4:92:5e:75:8e:52:c1:7e:7d:ce:40:
00:4e:24:5e:05:a8:e8:d4:c8:27:be:fc:e5:14:96:
5e:78:6b:a4:e5:53:82:32:ca:14:20:20:d7:4e:2e:
d6:3d:da:b2:f8:b6:66:d6:3a:d1:45:be:2c:39:a1:
50:e6:ac:3b:85:fe:7b:31:26:dd:8a:c2:e9:12:0a:
8e:5c:aa:e6:ab:38:e4:ca:28:56:c7:fc:0e:04:55:
40:3d:db:d3:ef:26:d1:49:a3:87:7f:f6:87:34:9f:
d1:1d:00:35:df:6d:a7:f0:3d:1a:a6:86:ef:81:bf:
ac:82:f1:6c:2d:d8:d7:16:99:de:14:1a:aa:d8:79:
04:0c:6a:a4:49:8a:13:61:47:61:03:1e:9c:e8:e5:
c2:3d:2f:b7:63:a9:4c:85:4f:98:08:31:20:02:6b:
ee:dd:77:e0:a7:9e:0c:04:a5:e0:fc:99:f6:c3:ea:
4c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CD:F8:6F:96:B7:94:31:CA:90:37:AD:0E:8B:93:B8:6D:82:92:AF
X509v3 Authority Key Identifier:
keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e6:73:79:08:c9:ca:c2:27:4a:69:58:ba:7a:82:12:3d:c3:
e7:ec:1a:7e:35:b0:36:fc:b8:e7:b6:fa:14:92:37:a4:6b:c5:
e9:cc:c0:32:e9:42:1c:31:08:22:ab:5a:5f:8b:71:be:96:99:
db:08:df:5d:69:97:9e:0b:aa:6d:14:af:6f:2f:e8:64:92:68:
24:66:91:db:49:d5:2d:5c:f8:d0:07:9c:93:6c:a3:74:26:34:
70:8d:49:40:2c:f1:6d:2a:c9:f3:68:1b:6e:ca:95:a5:b6:f6:
61:38:21:90:0b:c1:e8:41:a9:ef:d6:24:3b:6a:e5:f7:e4:e3:
30:f0:e7:22:53:27:28:69:67:4e:52:da:a9:40:1d:53:cf:ec:
0e:57:1a:31:6d:8d:cc:ba:4a:e4:b0:29:b9:b0:dc:70:48:d7:
a8:b4:5c:3d:5a:27:86:16:27:29:c7:4d:68:fa:bc:fb:de:c9:
25:c0:5f:59:db:2a:f7:9b:4b:0d:09:7a:a3:c4:4f:53:ce:6c:
a1:3f:d3:d0:a1:c3:45:ad:c0:95:6a:c4:3e:5b:dc:c4:c6:6c:
04:24:ca:d1:18:2f:7d:6d:a9:3a:d1:15:a2:20:c7:61:0f:cc:
9c:3d:7e:20:ba:d4:a4:56:4c:60:77:30:9a:5f:bf:b9:58:83:
28:47:f9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:33 2025 by rpki-client