Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
File: tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft (raw, json)
Hash identifier: ijscWgMKHVu13R3dVKYZ92e5KFkMgiqp5LQWxjjwCcM=
Subject key identifier: AC:08:73:BF:41:75:20:7D:F8:46:4A:A3:2D:91:E7:01:C6:42:6D:D2
Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Certificate serial: 0195127E2883A8D5B3350EE19D682C3E660D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
Manifest number: 0A1C
Signing time: Mon 17 Feb 2025 06:00:12 +0000
Manifest this update: Mon 17 Feb 2025 06:00:12 +0000
Manifest next update: Tue 18 Feb 2025 06:00:12 +0000
Files and hashes: 1: sEcAqep2NyLTkuYW41YUgHA9f4w.roa (hash: 3/7vZf5AuYQ6PDHss1zXReAWYubN+OUgtUWtMk8fZcY=)
2: tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl (hash: hyOM4TB7itO6U7i8gtWNOwF4oRjblwDSXlie+/QhhsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:28:83:a8:d5:b3:35:0e:e1:9d:68:2c:3e:66:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Validity
Not Before: Feb 17 06:00:12 2025 GMT
Not After : Feb 18 06:00:12 2025 GMT
Subject: CN=ac0873bf4175207df8464aa32d91e701c6426dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9d:6b:ff:a1:19:52:84:94:1f:0d:ee:0b:68:
f1:c0:20:9e:82:c9:f9:ec:eb:b7:1e:be:f0:a3:2f:
f9:ee:b6:52:5b:5d:23:88:3a:58:59:f7:bf:46:a4:
48:2f:7f:23:11:6f:ee:20:1e:a2:d1:33:7b:2b:22:
19:76:7d:d9:1d:58:27:98:53:57:90:c7:0e:b2:b2:
d1:4e:08:4f:a4:3b:7f:2b:4f:f4:b1:63:31:20:73:
62:3a:92:9a:0c:70:26:25:5c:a8:c7:b0:cf:46:f5:
12:ed:f5:e0:e6:9b:3a:c4:46:d7:43:84:69:57:30:
51:fe:5a:3c:a6:ee:50:ee:bf:41:25:2d:f3:bd:dd:
e1:65:a9:2b:99:f9:40:69:ca:72:10:e5:8e:dc:a1:
56:4f:f8:8d:42:99:d2:1e:fc:54:c7:b1:47:ee:97:
78:b2:d5:9f:6f:4a:0f:0d:d4:cb:c4:05:81:2b:5a:
39:30:46:3d:24:d2:11:55:f1:ea:43:c2:3d:d1:6a:
38:c1:de:2c:7f:d7:f5:ff:4f:a5:1b:78:ee:cc:39:
30:12:bb:e6:4c:b6:7c:32:82:7d:d3:c7:58:10:96:
81:5e:21:4c:a1:a2:91:c2:82:37:c1:e8:bc:ea:00:
e6:bb:1c:75:de:2b:9a:44:47:a3:ac:14:aa:f0:08:
28:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:08:73:BF:41:75:20:7D:F8:46:4A:A3:2D:91:E7:01:C6:42:6D:D2
X509v3 Authority Key Identifier:
keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:54:7a:dc:f8:3c:9c:a5:68:af:54:54:80:4b:a4:7f:b3:8d:
35:96:e8:9e:04:84:32:31:0a:1d:c4:5b:04:ea:46:3e:a0:c4:
d8:7c:6b:72:c4:c2:60:c1:7d:c0:0f:39:96:95:ad:7d:5e:0e:
51:70:2c:e7:94:e2:db:64:fd:69:ce:55:d2:8e:bc:3e:8f:16:
22:96:f4:58:6b:5c:30:8c:c7:78:89:21:b6:6b:f5:35:16:68:
c4:d9:77:f7:fb:e0:59:23:84:d4:96:e0:08:b5:5a:0c:3a:16:
6f:00:a4:ba:97:28:fe:ec:93:ab:ac:f4:ad:7d:4c:f1:ce:31:
b7:2e:00:8a:7d:c2:56:32:00:7c:16:cc:16:00:b9:0d:cb:83:
33:31:94:77:91:bf:d3:52:7c:3a:0c:a6:0b:a9:87:11:11:fc:
94:ab:dd:51:95:7a:39:3d:85:79:c4:2d:e2:b1:3a:f5:ce:14:
f5:45:56:10:8b:03:15:50:33:d4:0e:d1:9c:97:8b:82:25:2b:
5d:23:d7:9e:6c:ec:b9:0e:fe:7a:30:f9:02:5a:92:c4:c2:68:
1d:8d:ae:b3:c7:04:47:7a:6a:59:ed:1c:a8:66:05:98:6f:36:
33:12:2e:aa:65:91:8a:28:f2:8c:db:61:e0:1e:88:20:32:ab:
3f:fe:04:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:55 2025 by rpki-client