Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
File: l79b5z8YIydEmN9So3U10T2lvmI.mft (raw, json)
Hash identifier: Afyy2a+CiGdjfdidvOYTlu4rVGgZnPIrjD2EtDMewwI=
Subject key identifier: 9F:DA:A8:26:6F:D3:CB:29:FA:19:26:72:92:0F:D6:53:B3:0D:24:6E
Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62
Certificate serial: 0195116BB2FFF510FD8CD86B5B39D49E97E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 01:00:25 +0000
Manifest this update: Mon 17 Feb 2025 01:00:25 +0000
Manifest next update: Tue 18 Feb 2025 01:00:25 +0000
Files and hashes: 1: HWzBieo8pIQmRXoRuWfRIehTEwE.roa (hash: JynDcSW3QZoBehAT3uFmeO42DtekqQpNN7+NxcQtvOQ=)
2: l79b5z8YIydEmN9So3U10T2lvmI.crl (hash: F5Dr7i0Br9x6LgTwiQ04y02t0//VjdUa4zyDV3EfdrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:b2:ff:f5:10:fd:8c:d8:6b:5b:39:d4:9e:97:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62
Validity
Not Before: Feb 17 01:00:25 2025 GMT
Not After : Feb 18 01:00:25 2025 GMT
Subject: CN=9fdaa8266fd3cb29fa192672920fd653b30d246e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:e5:3b:ce:7d:aa:a0:bc:2a:66:15:82:e8:
7f:41:1b:27:71:43:2d:0f:29:9e:5e:4a:45:c9:94:
66:31:f5:78:85:e5:31:c9:f6:6d:ca:cc:77:d3:17:
8f:84:d0:ed:86:aa:08:df:d1:71:6b:7c:8f:a3:48:
ca:a2:7f:24:b7:22:ce:54:b2:37:98:b9:4b:38:f2:
61:ba:40:d1:ab:4d:d4:3c:5f:9a:24:c3:04:3b:6a:
7c:84:5b:81:5d:a2:1a:e4:0c:be:13:a8:ce:83:01:
66:b9:f0:63:f2:56:9c:53:8d:99:72:50:41:c3:a6:
8b:fd:17:8b:be:c1:28:91:3c:b7:d4:b5:84:6a:a0:
94:94:33:36:b1:85:6e:86:62:fa:24:5b:6d:89:3f:
2e:e5:d5:6c:6e:60:a9:66:ff:0b:20:1d:12:b9:10:
90:75:32:1f:e7:5c:52:47:46:ac:4d:49:e3:95:ce:
7c:d8:63:cd:98:df:9d:f9:bb:3f:d7:80:3c:b5:25:
d3:a8:7b:90:cb:9e:64:34:64:38:2f:8e:2b:38:86:
c8:bc:47:28:a8:cd:71:2c:0a:bc:4d:57:ef:cb:8b:
6a:42:88:15:24:a4:e3:6c:b9:2f:7c:ea:22:2a:90:
7f:f9:db:e9:79:ac:c1:fd:bd:2f:3f:20:77:f6:fe:
75:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DA:A8:26:6F:D3:CB:29:FA:19:26:72:92:0F:D6:53:B3:0D:24:6E
X509v3 Authority Key Identifier:
keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:05:94:03:0a:62:ce:ab:9b:78:31:e4:61:6a:e7:8d:ae:6d:
49:5e:f5:16:61:99:a4:71:8e:b2:53:cd:b9:d5:65:c6:f9:15:
f6:46:fd:0a:ae:79:4f:04:95:ce:20:6c:36:c0:83:0e:79:f9:
aa:f9:1a:6a:6a:8f:e2:47:b2:40:7c:37:32:f4:b5:40:2c:ee:
de:e9:76:d1:5b:90:6a:75:26:7c:89:d6:2b:ad:dc:f8:b9:79:
45:92:85:c1:80:88:49:ae:aa:c2:ac:06:34:f6:cc:fc:85:fd:
e1:b1:69:e4:40:00:61:d2:c6:e8:87:91:c3:78:1c:a3:71:91:
e9:f0:5d:58:af:d8:a0:ee:62:17:e8:35:2a:03:56:f9:f0:99:
fc:98:41:ed:5a:3b:21:99:6b:3c:90:aa:2f:20:44:ab:1b:29:
d3:41:8c:62:b3:cf:4e:9e:21:e3:bf:95:30:a7:0b:4b:e5:0f:
51:91:79:64:24:3e:cf:04:b8:2d:9d:f3:fd:c2:f6:a5:05:81:
81:d8:91:cf:33:a3:42:33:30:06:43:d9:77:5c:4a:b2:ba:22:
c5:a9:f6:13:54:5c:97:38:78:fb:6d:be:b5:0d:04:1d:d2:3c:
82:4a:7f:d0:7e:21:54:12:7e:16:c6:a2:68:95:ec:30:57:15:
9a:bd:df:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:22 2025 by rpki-client