Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
File: k059UV3emgPC3Ic4mi_KTn1YxOw.mft (raw, json)
Hash identifier: QRNjJANW1JfFyzygOXoU0bQoIIGCTFDM3yCr0v2KuDU=
Subject key identifier: F0:DE:A9:04:73:A9:29:67:D0:AE:D5:90:B2:6E:AF:CC:DC:EF:DF:2A
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Certificate issuer: /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial: 019511D9D103D2E738D4E74DB18AC4FC1B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
Manifest number: 1151
Signing time: Mon 17 Feb 2025 03:00:42 +0000
Manifest this update: Mon 17 Feb 2025 03:00:42 +0000
Manifest next update: Tue 18 Feb 2025 03:00:42 +0000
Files and hashes: 1: Xv-bUtmsrHjQ28dXxWqb3uBJRDg.roa (hash: 0bOsSKKdGKKiMo/FFhxHgHDZgsrzyzkqrbIyGUoQTCk=)
2: cL-keBkm4oIskLWJO5aafKhJ0jo.roa (hash: s9gkn4aSVId/ngfYN3hJphayygttMpgwEt/RQqhzDWs=)
3: k059UV3emgPC3Ic4mi_KTn1YxOw.crl (hash: QuRk7sUGiFpOEbuMwTcvYWz5IOpEBhgmDDeypQaG6Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:d1:03:d2:e7:38:d4:e7:4d:b1:8a:c4:fc:1b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Validity
Not Before: Feb 17 03:00:42 2025 GMT
Not After : Feb 18 03:00:42 2025 GMT
Subject: CN=f0dea90473a92967d0aed590b26eafccdcefdf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:f6:a8:01:1e:bd:84:16:0a:09:40:9b:a2:
24:b6:ff:5f:c6:3e:ca:b0:3b:cb:1f:33:e8:44:c1:
7c:c2:ec:e0:32:7a:d5:03:db:da:19:1a:1d:36:f5:
bc:2f:32:bd:dc:29:2d:51:a9:f5:c3:a7:c4:a9:59:
01:cc:17:cf:a9:f9:73:6e:98:5b:fb:00:6a:03:1f:
94:0a:53:95:4c:9e:a7:d4:98:ca:e0:ee:26:7b:95:
1c:50:11:97:7b:42:6e:c2:e3:d3:86:7c:a8:15:81:
1d:96:12:ca:39:4e:60:aa:62:67:6e:02:5a:e3:62:
d6:34:26:d3:83:fb:05:f3:9c:49:d2:31:3d:f9:a3:
32:bc:d1:1f:89:b6:76:4e:1c:db:c5:d8:ed:18:dd:
95:3f:f2:00:bf:18:a0:2b:6d:89:29:f5:79:fe:d8:
68:9b:c6:8f:f3:85:e0:3d:44:fb:1e:19:6b:45:cf:
02:88:b7:d3:d8:dc:c8:b5:1b:01:f4:26:31:36:fd:
c4:28:99:32:48:a4:e8:80:08:6b:8e:8e:af:12:cb:
bd:79:a8:17:13:04:cc:b7:0b:6d:93:61:20:2c:81:
e1:42:b5:0c:a1:11:08:de:3c:af:13:7e:78:b0:48:
cf:e6:86:05:cf:bb:5f:5f:ac:78:bc:ad:b3:88:56:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DE:A9:04:73:A9:29:67:D0:AE:D5:90:B2:6E:AF:CC:DC:EF:DF:2A
X509v3 Authority Key Identifier:
keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d7:b4:32:d3:c8:d8:00:73:8d:4a:17:91:e1:74:c9:07:a0:
63:10:17:b6:15:c7:37:08:57:a0:a0:c6:db:1e:19:a7:63:d9:
56:21:88:b3:e7:ff:7b:da:bd:00:96:b1:3d:66:e3:95:6d:18:
27:aa:9d:48:e7:f7:3e:f3:e3:97:a7:14:4a:8e:52:3a:c7:75:
55:34:fa:74:7d:6b:36:12:40:a1:51:cc:1b:f1:41:11:6d:3d:
34:36:5e:5e:06:e9:01:55:75:17:90:d0:5e:1d:cf:75:9a:55:
33:81:6f:9b:8a:b1:2b:06:15:bb:21:f0:db:de:ca:f2:cb:3c:
3e:09:31:93:83:c8:f3:68:55:a2:9d:6b:4f:34:ad:aa:a5:41:
b0:31:bc:57:e1:be:dd:f2:00:fc:de:e9:8a:14:13:20:91:1e:
b2:8e:12:44:83:6a:55:26:2c:8a:13:3b:d1:a1:3d:fe:76:32:
16:8a:39:19:9f:3b:2b:81:ee:80:fb:32:45:3e:17:1a:3f:61:
ea:20:a1:1b:dc:2d:2b:e6:4c:ad:78:51:42:0c:d3:69:60:74:
e4:66:b8:3e:13:b8:47:43:39:c2:a0:77:84:6f:b1:96:7a:bf:
0f:ca:3e:b1:67:e9:04:46:ca:ed:41:fc:49:9c:a1:68:2a:37:
31:28:e3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:12 2025 by rpki-client