Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: 3RMwnblZAiidZzKFskmS04mpNn7gwfTBZ6imCehkR04=
Subject key identifier: 1E:DC:AC:14:33:67:F5:78:77:F5:4B:ED:68:37:EA:BE:2C:D9:09:AD
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 01951210647542854DBC42760389224C3816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 04:00:18 +0000
Manifest this update: Mon 17 Feb 2025 04:00:18 +0000
Manifest next update: Tue 18 Feb 2025 04:00:18 +0000
Files and hashes: 1: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: gHbKiZNw33yt8Rt2QSkW9TPHbCA00bP/7ighTjwlMzY=)
2: pu3w7UCd4Jix5FHNDyD1wbsxi8M.roa (hash: J6M/UUbbX9rFSK6+ULPDexwZqprBkdzi2+HoEA2BwBc=)
3: rLSgQK3eROYoGVjeEkatzbeLiUo.roa (hash: cRiivZzTe4i6byml8FTWqC2r60f1JUGBkptLQN0rfQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:64:75:42:85:4d:bc:42:76:03:89:22:4c:38:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Feb 17 04:00:18 2025 GMT
Not After : Feb 18 04:00:18 2025 GMT
Subject: CN=1edcac143367f57877f54bed6837eabe2cd909ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:c4:17:d3:86:ac:5c:0b:ba:49:0f:7e:c4:
51:56:b9:7e:da:b4:29:78:e1:94:79:b5:9d:54:c3:
60:7e:c4:70:d4:e1:a1:d8:6b:e1:54:a6:4b:d3:01:
1c:98:83:39:07:7f:cf:6b:37:37:03:d7:84:47:25:
60:7b:47:15:45:99:9b:3a:79:93:3c:00:7f:0d:4f:
ec:13:a6:4d:b4:b4:5c:75:17:ac:40:8c:92:5c:ca:
2d:d4:6d:d8:6e:49:50:c6:36:d4:e1:23:d4:7a:22:
70:9b:5d:ab:86:ea:f2:bb:6c:50:ee:50:ec:99:eb:
4c:32:ce:d8:f9:99:fc:fa:6a:22:77:39:61:d3:b6:
9e:0b:52:01:88:a2:7f:c8:f0:a7:37:39:38:26:87:
ce:34:21:4c:f4:b2:2e:07:bf:5b:c2:77:d5:77:79:
1a:39:fd:76:78:a2:8d:3e:c8:d6:f4:33:89:0a:a0:
ef:2c:89:a7:72:0e:14:8e:ef:88:c4:6a:75:aa:3f:
2b:f9:8d:84:cb:7c:a9:0d:8c:c5:41:17:d2:e7:6c:
d6:f0:b7:80:2a:b3:71:7a:ed:37:c7:ab:d7:31:36:
56:c1:13:ee:7b:70:83:1c:90:02:f5:c7:92:bb:4f:
b6:5d:1a:24:b7:dc:d0:f0:57:e2:80:d2:99:93:f5:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DC:AC:14:33:67:F5:78:77:F5:4B:ED:68:37:EA:BE:2C:D9:09:AD
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4b:5c:a5:bd:e2:76:c6:8d:95:ce:94:f3:cc:9d:52:ed:83:
bd:92:a9:07:8a:5f:74:dc:e2:6a:c2:1e:58:3f:a1:c5:5b:c6:
75:00:6a:7f:9f:bb:31:c2:d2:ac:21:5b:c5:4f:a9:bb:39:5d:
0d:4c:bc:a1:96:fb:ad:f4:67:4f:d4:b8:31:fc:1a:aa:9d:88:
2e:5c:29:83:5e:e8:86:e9:bb:9b:74:cf:0e:58:9b:a8:b0:fc:
5b:f0:51:53:c0:88:5c:19:56:5e:06:52:fa:01:e4:23:9a:fd:
31:62:b0:64:f9:51:05:df:c3:37:18:d9:5c:1a:83:dd:ba:ba:
b6:22:2e:7e:69:c4:a8:9c:8e:54:59:3a:04:a9:45:45:63:6d:
1b:4a:fc:77:41:70:53:9f:b1:9b:5e:c3:44:9e:44:9b:15:bc:
f9:53:49:16:14:a1:bd:fa:47:0d:32:3d:3e:07:89:98:db:b1:
08:75:09:b5:f9:39:24:d3:f9:2e:98:c2:e1:97:67:ad:a8:32:
92:17:67:91:99:a8:69:89:84:d0:13:ba:3c:63:2b:d1:14:f4:
d4:e5:fe:c5:88:00:f1:e3:85:c4:e2:8f:da:19:52:17:7b:fb:
1c:b3:94:b5:e1:f3:dc:99:c9:f5:92:a6:11:f5:18:e0:14:4a:
6d:e6:ba:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:32 2025 by rpki-client