Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft (raw, json)
Hash identifier: IkffFniNttasMzIu9z9Ms4PEBDF6f30QHVARWb/WwcE=
Subject key identifier: 37:F8:34:46:75:83:F2:A2:D4:69:7C:7D:AC:A1:D2:19:EB:BE:64:E7
Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
Certificate issuer: /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Certificate serial: 01951134CFBD31CADEC5247EC9E68C08AE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 00:00:28 +0000
Manifest this update: Mon 17 Feb 2025 00:00:28 +0000
Manifest next update: Tue 18 Feb 2025 00:00:28 +0000
Files and hashes: 1: DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl (hash: DN7PWfAiGeKVDj6nLOC4d0IQqMXddxdW8/R5NZl+QMc=)
2: JKIB76zKkkKrBoUXjR0hAQtGTdM.roa (hash: ykn0vkdS9mLj16yNgBoFWQshZXTgOTHfF/eRZDldNCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:cf:bd:31:ca:de:c5:24:7e:c9:e6:8c:08:ae:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Validity
Not Before: Feb 17 00:00:28 2025 GMT
Not After : Feb 18 00:00:28 2025 GMT
Subject: CN=37f834467583f2a2d4697c7daca1d219ebbe64e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:3c:1f:73:2c:57:69:7e:7c:c1:58:58:7b:
be:93:06:fc:c7:b1:ab:d9:0f:d4:bd:8b:83:57:de:
da:53:a0:ef:b3:23:4e:5b:a1:ab:22:7c:85:1c:4b:
51:f8:98:7a:9d:0b:ac:98:1b:f9:f6:da:62:11:61:
62:b3:e2:09:65:09:8a:8b:d0:d7:5a:e3:38:13:5b:
7b:74:cd:38:33:93:c0:c8:2e:93:a6:c6:69:d2:b1:
0c:66:db:2f:9e:26:d3:3f:7f:7f:02:26:f2:7e:5c:
37:1e:66:dc:c9:b7:03:32:86:ba:94:7c:ee:7e:7d:
8b:36:b5:cc:9c:e6:23:f2:db:85:59:30:bc:23:a0:
05:bf:f0:d2:37:1a:d3:74:a1:3c:0b:91:49:d9:dc:
37:3f:f2:92:80:b7:8c:4c:b1:6f:2b:7c:b2:2d:cd:
93:de:fe:e3:b3:d2:04:2f:b8:1a:b6:9c:d7:09:cf:
ac:94:ac:c9:26:66:14:b8:67:df:65:80:42:36:d1:
57:fc:83:2e:a3:af:51:a0:2f:d9:78:d0:d7:6c:2b:
3c:c3:b6:d9:a3:27:f2:97:c8:78:81:e2:c9:fc:52:
bb:bb:e5:6d:94:92:86:c9:d9:48:ac:12:f1:5a:bf:
5a:d6:d6:c3:3f:b3:2b:be:21:f9:bd:08:b3:e5:33:
8d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F8:34:46:75:83:F2:A2:D4:69:7C:7D:AC:A1:D2:19:EB:BE:64:E7
X509v3 Authority Key Identifier:
keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:48:ec:96:55:a3:72:6e:1b:6b:77:99:42:8c:0b:71:17:17:
55:0a:88:56:b5:4b:f2:44:9e:ec:6d:c0:7e:57:d3:4a:b7:41:
48:73:20:ea:c6:af:6c:9d:3e:ad:a3:30:54:04:54:49:17:ed:
28:f7:25:0a:bf:f3:cb:09:d2:fc:95:7b:fe:c7:ff:7c:d5:f6:
37:7e:be:74:c2:1a:19:68:66:01:47:db:4c:bf:86:a6:37:cc:
b3:07:ae:fe:11:8c:47:ad:cd:43:e4:f0:91:3a:1d:c1:08:e3:
9d:91:2c:9e:8f:59:8c:22:cc:e5:24:d0:d1:b2:b2:83:a5:62:
e1:44:57:e6:74:2b:4a:41:d5:b5:34:ca:cc:af:1b:57:cd:60:
02:5c:b1:b5:4c:ac:34:12:8c:6a:8f:35:a6:b3:02:04:22:b0:
11:14:29:ac:3c:90:49:14:70:4a:f6:6e:94:f3:c9:88:25:59:
92:2a:4a:11:9d:36:29:38:3a:9d:b9:5c:6a:af:97:f1:da:5f:
e4:eb:a7:85:7e:4d:5f:0b:b1:e9:3e:f0:64:6a:c8:49:66:fe:
8d:a1:7e:48:09:fb:ef:ca:73:7d:76:c3:3d:8c:9e:38:de:45:
e5:f4:e6:f1:48:02:97:71:27:68:22:de:8b:5a:05:36:2e:f1:
4b:9e:1d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:04 2025 by rpki-client