Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
File: iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json)
Hash identifier: E3sryZAJoWbwfzpuWTgQUMCCxazn3rVZb7K/v7oDuBw=
Subject key identifier: 79:98:55:42:67:4F:17:20:0E:E6:4F:97:7C:96:43:A1:D5:18:61:A4
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 0195121093CFE8F5CD9EE0900E5F62D916EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 04:00:31 +0000
Manifest this update: Mon 17 Feb 2025 04:00:31 +0000
Manifest next update: Tue 18 Feb 2025 04:00:31 +0000
Files and hashes: 1: UvkgBounMtuI2EY4VakFPmSVVf8.roa (hash: B8b+cAv47Fq4zMohD+Ikbfg+w/maMgI605v1qgGvxbU=)
2: aMP60-6kIcycfPRX1mrnGq3rKu4.roa (hash: 3JfLcJd1nqn3CbGO/VzxfaF4cayveMgFQoD5eZc253E=)
3: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: cWGnJY+Z8SlC30hf9T4GHnRgfcd+7WZr0Cq9kPiRZeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:93:cf:e8:f5:cd:9e:e0:90:0e:5f:62:d9:16:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: Feb 17 04:00:31 2025 GMT
Not After : Feb 18 04:00:31 2025 GMT
Subject: CN=79985542674f17200ee64f977c9643a1d51861a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:89:b4:07:1a:51:44:93:74:6f:1e:3b:5e:
76:bc:be:30:aa:1b:62:fd:ee:80:85:39:9b:19:f8:
3d:8c:5c:87:44:07:bf:78:7b:66:36:1f:26:a8:73:
25:ba:7e:10:e0:36:af:c2:95:15:6f:ac:de:7f:b7:
33:14:e0:f1:a4:d0:54:9d:f8:33:ed:0f:df:be:0e:
de:29:96:e3:df:0b:03:92:be:af:d9:f1:21:89:0c:
ef:92:d2:51:c0:3a:be:e0:d4:a9:11:dd:57:8d:05:
e8:c9:ee:6c:54:a5:68:a3:b6:df:d5:18:82:d2:04:
d7:78:08:84:0f:f7:40:0b:ec:43:11:8e:f1:47:06:
66:c3:5d:b0:1f:1c:76:36:29:e6:6a:a5:25:6b:da:
1d:eb:fb:d0:44:09:82:b0:fa:bc:21:a6:68:10:08:
60:c2:a3:9b:7c:80:28:b5:71:d0:be:89:41:cf:06:
95:f0:ee:c1:73:bb:65:a3:78:59:fa:b6:4c:2b:27:
42:d2:75:f8:a0:b7:86:96:ca:46:19:56:e6:f1:32:
b5:e6:6b:17:fc:0e:f0:58:4a:21:af:f8:79:88:24:
e6:4c:c2:93:de:1d:0d:f0:c1:d0:fc:f9:2a:4b:e3:
35:4d:2d:ae:52:01:0d:16:04:cf:de:0f:47:0c:5a:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:98:55:42:67:4F:17:20:0E:E6:4F:97:7C:96:43:A1:D5:18:61:A4
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:69:c9:e4:34:b4:16:ea:94:f1:53:82:a4:51:bd:10:ae:ad:
15:5d:3f:ed:c3:12:d0:f8:18:6d:b8:48:6c:28:41:6c:73:d8:
86:e6:c3:eb:33:56:f7:ba:f7:1f:14:55:a7:92:06:5d:4e:c9:
43:43:52:a0:d0:7d:23:6f:9f:7f:dc:47:69:3f:e8:c0:43:e0:
9f:34:5d:66:af:2f:3f:9c:c7:10:0e:c0:12:b2:93:ed:89:9f:
5d:72:52:5c:60:5f:e6:17:0c:45:58:ea:87:60:87:8d:c0:45:
7c:64:44:8d:36:3a:2e:50:f2:4f:8e:4e:43:97:f1:fb:27:52:
5d:18:9c:f7:66:04:3d:ee:17:7e:de:c3:b5:ae:cc:19:4b:c2:
5e:6e:16:fd:d6:ae:74:1c:42:76:fb:9b:d2:49:b7:37:39:ff:
eb:92:d2:25:1b:64:21:cf:48:07:42:89:0e:76:e1:f9:44:13:
b5:03:ab:b3:33:5c:26:f7:57:95:99:70:3f:69:9b:b0:85:0e:
0c:f9:9d:4a:53:9c:76:dd:e6:b8:a8:98:ea:af:1d:03:dd:1b:
05:fa:cf:de:bc:5b:1b:9d:e3:86:22:81:96:96:b1:57:65:07:
20:8a:16:55:ba:86:3b:55:57:a2:c9:99:c6:75:ea:57:3b:f8:
5f:5c:8e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:25 2025 by rpki-client