Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
File: p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft (raw, json)
Hash identifier: ijP0vTDcvbV9YXHMdC2P6yMWE/3dxT4okSQhKa7Ezk8=
Subject key identifier: B3:CC:57:DC:FB:9C:D2:C9:F2:7A:43:F0:53:B1:89:80:60:72:27:89
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 01958C292FFE00131973BA9EFBC3BCF5AF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 21:01:04 +0000
Manifest this update: Wed 12 Mar 2025 21:01:04 +0000
Manifest next update: Thu 13 Mar 2025 21:01:04 +0000
Files and hashes: 1: I9i0WWS-frfVjqHawC8I642O_Mk.roa (hash: itGdqF9tI2l3tL7Dy0ty9ZBwR6g1Row8wxamV2kVAqE=)
2: p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl (hash: pVs8omHnvVcdCPcudWi0ieeWz5qmIDqKyLNfwYCgcSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:2f:fe:00:13:19:73:ba:9e:fb:c3:bc:f5:af:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: Mar 12 21:01:04 2025 GMT
Not After : Mar 13 21:01:04 2025 GMT
Subject: CN=b3cc57dcfb9cd2c9f27a43f053b1898060722789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:5f:4f:bd:7d:b4:22:85:b6:9d:71:ae:97:
ea:5f:78:26:7c:95:d6:4e:04:bf:34:ed:42:3e:85:
fe:0d:1c:31:ff:2e:f2:df:94:ca:84:cd:f5:2e:2d:
d9:18:67:18:76:e9:d6:88:3c:29:34:32:0c:31:8a:
26:96:8c:55:14:f4:bc:cf:9b:a1:41:aa:6f:67:47:
35:dc:27:c9:e4:aa:bb:d4:13:92:9b:b4:60:c6:e2:
8d:4c:c5:32:1a:69:cf:8b:8c:9d:15:37:96:a8:26:
f2:d1:32:e5:ec:f0:f1:1d:85:be:13:97:51:65:99:
05:cf:f8:b0:88:b6:6a:3f:36:cd:d0:61:53:10:1d:
1e:83:93:c9:d9:3e:74:e4:a3:f1:ba:86:6c:f1:3c:
a5:4b:99:64:21:7d:e2:0a:dc:d3:41:3a:0d:89:45:
a9:d9:f7:fa:82:0b:ac:22:14:2b:cb:d1:02:6b:a2:
25:04:e4:12:2f:5e:9e:9a:b0:b2:61:9d:08:df:be:
c8:b4:83:39:73:58:25:d6:92:01:cc:4c:b1:0a:03:
f2:2d:f9:e2:e4:38:7f:f7:49:6f:54:89:64:a5:21:
45:71:d5:74:5a:de:a4:e2:73:dd:cd:f6:5c:1a:b5:
92:1a:21:7e:c4:02:5f:11:43:cb:6c:32:e2:79:91:
ff:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CC:57:DC:FB:9C:D2:C9:F2:7A:43:F0:53:B1:89:80:60:72:27:89
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:59:96:a8:2d:f0:dc:2f:bf:75:7f:2e:c7:e1:80:ce:22:ab:
7b:a1:86:57:2e:5f:d4:7b:68:b0:f5:80:29:08:7a:89:3d:46:
a0:1a:be:e4:05:fc:34:2b:ac:26:7b:fa:b8:54:58:25:1f:1b:
cc:4f:6e:63:b2:07:43:13:20:ba:67:98:c3:f7:34:25:8b:4e:
81:0d:f9:fe:04:bc:0d:55:83:a2:e7:47:cb:e4:3a:75:5c:87:
4f:47:93:d8:84:a0:26:87:24:1c:1e:69:93:91:5f:bd:1d:03:
41:b4:29:d2:e6:17:0d:2a:63:22:f5:ea:ee:57:6c:74:43:2f:
00:96:a0:01:23:7a:9c:49:35:0a:40:28:7c:c3:1b:54:12:f7:
f3:e1:f2:ab:d3:88:85:6a:ef:66:c8:87:54:b6:95:f4:96:7d:
85:72:be:63:a9:72:a5:46:d6:5e:23:0f:cd:78:2c:b8:dd:6f:
b9:86:74:4b:a7:70:74:82:9b:43:cd:95:60:44:db:c1:79:54:
83:4e:ed:62:00:98:24:74:f3:8c:22:43:88:24:a2:6c:26:59:
88:3e:c6:91:da:0c:c8:9a:b3:d5:60:a0:36:46:48:ae:31:f9:
0e:d0:28:49:45:c4:db:7b:23:7f:3f:15:51:5e:14:58:10:1a:
f8:d7:60:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:22 2025 by rpki-client