Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
File: rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft (raw, json)
Hash identifier: 813Hu31/p4CNV6YSgoFPJ7P988isc31bRfB6PjUK7cc=
Subject key identifier: F3:C2:82:66:28:D9:BE:71:73:E1:98:AD:CF:7C:AF:DA:27:C1:96:B6
Authority key identifier: AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
Certificate issuer: /CN=acebf396c9adf94f84dc901656e255ce6d50660c
Certificate serial: 0194C350DD9D794703BDAD898C7BCBF90ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
Manifest number: A4
Signing time: Sat 01 Feb 2025 21:00:44 +0000
Manifest this update: Sat 01 Feb 2025 21:00:44 +0000
Manifest next update: Sun 02 Feb 2025 21:00:44 +0000
Files and hashes: 1: C4fkDspID27_2W7uJ0bDWTiMbsI.roa (hash: IPmvbCiP1dYquC+xxAe/aHEwDNf0L9S57sM644oyMl8=)
2: rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl (hash: jyIwW3yhuxJVroS3xlJNhqzyFq2f+gfe69Kn0WYO5gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:dd:9d:79:47:03:bd:ad:89:8c:7b:cb:f9:0a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acebf396c9adf94f84dc901656e255ce6d50660c
Validity
Not Before: Feb 1 21:00:44 2025 GMT
Not After : Feb 2 21:00:44 2025 GMT
Subject: CN=f3c2826628d9be7173e198adcf7cafda27c196b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:29:f0:90:41:57:32:78:e4:49:3f:73:70:
62:6f:13:a9:dc:0d:5e:54:8c:ee:35:1a:37:b8:65:
d9:3f:de:40:8c:79:8f:41:b3:43:74:af:77:d8:ea:
f5:a9:48:3e:6e:82:97:b2:26:6f:25:0f:68:2b:2e:
3e:f7:c8:7e:ef:70:79:37:ca:2a:40:77:98:90:bc:
cb:28:2f:ce:cd:34:19:6b:76:1d:bf:6c:9e:52:3e:
cc:55:91:8d:f5:2e:c6:88:fa:5f:46:33:65:49:cc:
3c:e0:f4:b1:18:52:44:5a:20:1e:b5:3c:dc:6b:82:
96:95:bb:f2:79:7f:a1:df:98:4a:4a:da:18:24:05:
20:4b:2a:71:23:f2:78:9b:12:12:ab:a7:d8:36:94:
98:a6:4c:05:e0:02:a4:17:de:15:1a:53:f8:8a:70:
30:f4:84:bb:82:45:29:0a:94:d7:75:f2:46:54:c1:
b2:55:0c:58:02:18:7c:66:41:fd:7a:6c:82:e5:af:
6a:b1:a7:bc:71:e8:69:67:18:f2:7d:f6:4b:2f:be:
39:c3:85:14:ff:40:78:42:93:e7:9d:90:87:9b:d7:
ad:ae:a8:88:05:36:03:25:9b:d6:74:64:a8:20:f5:
2e:12:39:80:8d:16:ba:dd:27:5d:8b:14:fd:b2:66:
df:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:82:66:28:D9:BE:71:73:E1:98:AD:CF:7C:AF:DA:27:C1:96:B6
X509v3 Authority Key Identifier:
keyid:AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c7:e5:a0:7e:f4:63:20:16:ab:25:b7:5c:0a:2e:02:1c:0b:
ae:4e:2b:2c:ce:ea:47:55:79:31:9f:77:6d:6c:0e:e7:5c:9e:
1d:db:bf:39:b3:c5:ec:5d:64:50:46:5f:ae:82:44:c1:a6:91:
ed:20:0b:c8:20:ad:61:88:29:d6:ad:62:ee:38:b0:2d:ed:15:
7f:a6:86:51:55:8c:1f:63:80:f2:82:5c:12:d2:49:63:4a:68:
68:e8:2b:8d:7d:5c:04:a2:1f:4f:97:34:ee:7c:cf:7a:6e:fb:
2b:6b:84:a6:f4:41:6a:fc:18:b1:83:e1:5b:ef:76:16:56:1a:
34:72:37:e3:56:5b:c6:45:d4:8f:02:e2:a5:e0:53:d9:69:05:
b2:92:06:22:95:33:82:6a:cd:70:65:5a:94:a2:94:80:48:aa:
57:e4:ed:0d:d5:49:7b:26:ff:1f:3a:22:62:d4:3d:25:fd:20:
00:c0:57:77:fa:90:04:43:3f:4f:ed:9e:b2:42:be:24:2c:79:
1d:88:56:f0:a1:0f:23:20:14:bc:4a:73:03:21:54:bd:9f:4f:
d9:f7:97:80:7b:06:ba:93:61:c3:b6:04:68:31:1a:ca:dd:d6:
24:de:d1:a7:b9:96:ee:2f:d5:18:6d:d5:3d:6f:23:4c:a6:02:
0a:19:a1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:32 2025 by rpki-client