Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
File: SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json)
Hash identifier: EiH5AC5fu9RRhOfUBOFD2sUs5CFzAPh1HH4dtMvwaZc=
Subject key identifier: 37:10:B2:5A:B9:B5:A6:DB:DE:8B:F7:2F:3E:8F:C9:96:FF:AC:6E:5D
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 0194C4D15D99E92D1E7D4F3B1774B7EA36F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
Manifest number: 0B9F
Signing time: Sun 02 Feb 2025 04:00:42 +0000
Manifest this update: Sun 02 Feb 2025 04:00:42 +0000
Manifest next update: Mon 03 Feb 2025 04:00:42 +0000
Files and hashes: 1: 2FAwhQu6ok9bOg22C73ws6AzeTA.roa (hash: NjIG5kr55nDYslaJlr/UrfkcBYGbRIfRwF+wfXlzJDo=)
2: 2JWsXELeyx7EyyyZ3YWZM719O70.roa (hash: FZod/ic6qTKIkUVMr3hWJLyceYOdcHo1fQ2FEaICWK0=)
3: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: xMCBPOkpZFKuxGhHzYLYOLBWOhvx+vBq0j2Gk6oHSgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:5d:99:e9:2d:1e:7d:4f:3b:17:74:b7:ea:36:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Feb 2 04:00:42 2025 GMT
Not After : Feb 3 04:00:42 2025 GMT
Subject: CN=3710b25ab9b5a6dbde8bf72f3e8fc996ffac6e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:dc:bc:fe:99:6c:1f:19:2d:d1:6f:6f:4e:
a3:11:96:78:c0:78:e4:82:d2:23:66:be:57:d0:ee:
89:d9:8c:62:92:a1:0a:cc:ca:8e:55:bf:0f:92:c1:
3e:1c:64:a4:7b:4b:49:86:da:f7:e6:1a:09:3f:81:
da:bd:9b:31:10:76:ed:47:2e:3d:d2:e9:21:f2:bd:
66:03:1a:11:65:b8:93:93:51:79:c2:8b:e5:d7:be:
0e:d3:1d:7c:d7:f3:67:b9:88:ac:2c:35:e7:6b:ba:
b4:b7:ae:2e:d2:0a:ca:08:e7:ea:7d:2f:4b:79:8e:
6c:d4:f3:b3:cd:94:84:f7:29:60:08:de:83:3a:b4:
cc:ca:da:40:ca:7e:97:69:c1:94:0f:2c:57:30:92:
7c:dc:21:d2:26:a8:03:4f:6c:17:d1:ef:05:3b:c7:
e3:49:fa:e1:b6:65:33:7c:a3:a9:94:bc:9f:25:c7:
57:81:93:2e:f6:4c:ee:0b:6f:a5:b4:8e:ab:ed:3b:
12:31:6f:95:06:94:c8:3e:b5:d2:06:99:3a:71:cb:
a9:f2:a7:11:38:01:59:51:61:25:09:2b:c5:56:02:
73:c6:bc:b9:ec:0b:fe:e6:d4:7d:78:ed:d3:97:39:
e8:ac:b9:7e:28:d2:d9:70:d0:87:a9:12:4d:1f:ae:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:10:B2:5A:B9:B5:A6:DB:DE:8B:F7:2F:3E:8F:C9:96:FF:AC:6E:5D
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:58:19:2c:ac:dd:ed:85:70:68:ce:32:3d:36:b9:c7:1c:f8:
be:79:77:fd:5a:98:28:65:e8:f0:a4:10:22:0f:40:74:bc:d3:
7c:0c:3c:d4:0f:b0:32:dc:81:7e:80:98:ca:d4:42:45:ca:4e:
c4:35:c8:5e:25:9d:80:29:24:8f:b7:01:f7:5b:2b:56:0e:56:
51:69:4c:ff:3b:9b:46:03:d8:a6:f2:9e:99:93:63:00:8e:7e:
43:0a:1e:af:81:a6:dd:5e:e1:57:27:d7:16:5a:9d:d7:1e:c6:
ed:aa:d9:f2:9b:d8:5e:97:13:6f:fd:75:a7:24:ba:a3:db:a7:
f4:75:51:3c:ac:6f:ad:38:c0:82:09:32:28:ae:88:a1:5e:dc:
b5:4b:ad:4d:10:f2:08:12:fc:13:ba:ed:e3:e4:08:6e:85:6f:
84:e6:0a:f2:54:92:86:ac:a8:e8:2f:8c:93:36:5b:4a:9e:c1:
12:a1:32:10:92:f2:15:5d:d2:f8:02:88:12:00:94:5e:99:73:
39:70:49:48:32:4c:82:00:b6:3d:d1:c6:a7:5d:96:ae:89:95:
e4:c3:dd:aa:20:f5:4d:e6:da:3b:65:6e:23:86:2d:75:19:5e:
68:5f:1c:f4:fe:69:90:f9:77:ee:2f:55:e5:3a:ae:a4:56:0d:
3a:36:d1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:22 2025 by rpki-client