Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: mT6G/sWBk1abAFaD3zRFd38H2Zyi7Dpj199xdZPmWxQ=
Subject key identifier: F7:2B:5E:EB:C1:39:39:C7:E2:D3:C7:E1:E9:10:1A:D9:90:2C:39:AE
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 019511D9566F8772A0FAE5D8BDE51DF645E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 0F97
Signing time: Mon 17 Feb 2025 03:00:10 +0000
Manifest this update: Mon 17 Feb 2025 03:00:10 +0000
Manifest next update: Tue 18 Feb 2025 03:00:10 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: 7a4IUzDRLpszs/B9DynD73dRHnsYHEzH9hYNkkXvT3Q=)
2: _Sn3RhfY--fiVliyrSpcw_Dpx8U.roa (hash: 0DlsX3tbgemelzimR5EC4gu2Xnu0fF/hzb1n4QMYZI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:56:6f:87:72:a0:fa:e5:d8:bd:e5:1d:f6:45:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Feb 17 03:00:10 2025 GMT
Not After : Feb 18 03:00:10 2025 GMT
Subject: CN=f72b5eebc13939c7e2d3c7e1e9101ad9902c39ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:66:bf:95:74:27:f9:f1:97:81:a7:fb:a6:
75:d1:b6:81:13:85:8e:8c:07:a7:d2:b9:1e:25:8d:
21:a0:53:f2:ad:2b:b4:0f:ca:f8:64:ff:bb:27:dc:
31:b8:03:21:48:ef:34:bd:58:bb:7c:30:8b:01:88:
1b:ca:ba:a6:2b:fa:a1:ad:2c:b0:18:1d:28:a4:55:
79:b1:b3:44:94:15:25:35:f4:f8:67:22:d4:c0:fe:
38:ad:1c:1f:09:ce:a8:4f:aa:06:e4:74:78:45:7b:
65:7f:13:55:d3:2a:1a:5f:24:cb:7f:ca:cc:29:8b:
ae:97:62:4d:8a:5a:64:66:4c:95:a0:e1:d4:da:74:
dc:66:db:f0:09:dc:c5:c6:4d:38:52:4c:c3:1f:0a:
1c:55:71:72:9b:fc:2f:ce:9c:98:f1:f7:1a:18:5c:
1a:8e:fe:8d:14:9a:30:84:2f:51:c2:a2:3a:20:af:
bc:bc:56:a9:dd:a7:9d:48:ec:b5:13:6c:9d:02:31:
68:47:c5:be:e2:0e:41:23:9c:55:eb:52:68:a8:cd:
2c:1a:5e:1e:0b:a6:4c:37:8c:00:d2:a6:df:78:16:
e6:11:f0:4e:94:c4:a4:cc:0a:15:b0:32:7c:85:e3:
57:d3:62:f5:07:84:3a:74:6b:86:f4:51:b0:c2:3c:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2B:5E:EB:C1:39:39:C7:E2:D3:C7:E1:E9:10:1A:D9:90:2C:39:AE
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:11:17:61:56:e5:9e:ee:e1:3c:51:e0:13:14:d8:6c:85:cd:
cf:ef:a5:2d:3a:52:e3:f3:59:6a:dc:b0:b0:75:4b:98:0d:4d:
5c:24:4d:32:88:be:23:03:a6:73:c7:90:a2:6f:88:41:0d:19:
96:6f:ca:f1:5b:83:2d:9a:96:f8:96:65:9e:e0:00:4b:6b:66:
61:6d:d9:f8:f6:97:68:ad:f6:96:9f:e8:fd:24:52:f4:9e:68:
e3:9f:50:c0:b9:0f:f8:d7:8d:e5:b3:fe:dc:be:65:ea:15:16:
99:52:4f:3f:c8:54:54:8d:3a:f3:89:f8:e0:f1:c6:bf:2d:ff:
c8:96:b4:08:c4:c3:36:67:50:26:36:b7:10:57:1a:a7:2f:84:
dc:f5:70:72:e1:bb:37:4e:dd:c0:e5:c4:bd:22:b6:a6:33:30:
e2:83:72:9e:bc:b8:17:d1:7d:1e:d6:19:fc:ca:4d:bf:b2:5f:
26:86:37:6c:41:be:76:e0:ad:c6:27:fa:25:c5:a3:4d:2d:3e:
79:09:29:3d:92:33:98:48:97:9e:a5:e7:67:02:46:d9:bd:f1:
33:e5:20:15:e2:7c:c7:0c:e4:b3:f0:aa:25:c8:a5:59:a4:0e:
f3:ac:33:97:fb:9c:ba:e9:1d:17:97:f4:4c:e7:be:25:57:1a:
97:47:57:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:37 2025 by rpki-client