Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
File: 73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json)
Hash identifier: lsbyY2en1j72FrHrTvLiumurvZaREDJ2QguQJsoCUz0=
Subject key identifier: 90:C9:49:97:07:8D:A4:54:17:0D:F7:F1:56:63:08:1F:60:7F:EF:FD
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial: 019510FDEC6B0532F619B454D3E9B6F03ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
Manifest number: 1457
Signing time: Sun 16 Feb 2025 23:00:31 +0000
Manifest this update: Sun 16 Feb 2025 23:00:31 +0000
Manifest next update: Mon 17 Feb 2025 23:00:31 +0000
Files and hashes: 1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: Eeya7vWhnLeBXsjLznV1jM4u1RMKHjEi7byJOU5jWsA=)
2: 8ofg2JoTyb5e1GIiVqV2PdSesOU.roa (hash: z/SuBS1vMLBWp74A2t3I4/K0L71UAtSRqfDU9yXXBww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:ec:6b:05:32:f6:19:b4:54:d3:e9:b6:f0:3a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Validity
Not Before: Feb 16 23:00:31 2025 GMT
Not After : Feb 17 23:00:31 2025 GMT
Subject: CN=90c94997078da454170df7f15663081f607feffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:c6:68:7e:20:68:f5:89:2f:bb:06:f5:60:
7a:7f:81:d7:87:8f:65:91:34:95:ed:93:a6:7f:0a:
a4:f8:82:3a:93:17:e8:9e:13:bc:26:77:07:44:89:
e5:97:61:f8:97:5b:9b:9a:7e:30:38:85:0d:61:15:
ce:91:76:f8:9d:27:75:02:c1:40:be:d9:32:d7:78:
e6:f0:c7:f4:d5:eb:6e:25:b8:37:b7:12:1e:73:54:
89:d9:d0:82:2d:39:a6:49:d5:7b:69:99:e2:44:7f:
e8:af:62:00:a6:39:05:16:f8:66:7d:c7:d0:b2:35:
f6:d5:0d:64:a6:5b:71:a2:8e:04:28:1f:ca:53:81:
91:4b:37:b6:2e:f2:c8:3d:01:2c:c1:d1:8c:c4:be:
15:b6:2e:70:d2:10:74:20:70:87:92:7f:68:92:e0:
17:76:28:a9:67:ca:21:1c:55:cc:7e:07:6d:ff:7f:
2f:f5:16:e9:a0:be:f0:8b:06:ad:97:d0:f9:e1:35:
76:79:d9:1d:ca:06:86:88:05:1e:da:22:40:92:0e:
5a:6f:05:e6:c7:01:ea:04:e2:c0:96:86:64:6d:ef:
f3:54:58:09:d7:9e:95:1e:32:54:e9:0d:7a:6e:8a:
06:f6:78:a2:4c:f4:76:7c:b6:33:bd:05:a7:30:ed:
3d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C9:49:97:07:8D:A4:54:17:0D:F7:F1:56:63:08:1F:60:7F:EF:FD
X509v3 Authority Key Identifier:
keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1a:0d:10:c8:44:da:d5:89:a4:d8:05:9c:13:4d:b6:49:e8:
3e:05:07:f5:45:e2:59:8e:ab:43:49:46:08:40:58:8e:4b:d2:
47:ee:3e:55:cc:57:05:cd:8e:d6:f0:33:22:48:ad:3b:3c:9a:
86:07:20:a1:f9:17:57:4f:29:4d:63:2a:6a:15:67:c3:8f:1e:
e8:76:b8:31:df:8b:7b:c8:dc:0f:1d:d7:38:59:8c:0a:dd:fb:
3a:c9:e7:6c:15:94:a5:15:00:1b:38:c8:b1:be:87:89:d8:dc:
8d:15:98:4f:b0:0c:5f:01:12:7a:08:93:98:7b:8a:a2:85:15:
bb:f6:27:da:e9:c2:e7:2a:bb:01:84:2f:dd:4d:10:5f:24:2c:
3c:ed:b3:e1:5e:7f:34:9e:e8:be:38:be:7b:3d:43:d4:23:22:
42:ed:e1:88:2c:ee:ee:69:d1:5a:27:e8:f8:9d:35:33:a7:36:
3c:6c:59:1d:28:8d:65:ee:e0:f5:43:5e:65:9a:36:44:10:eb:
7c:6d:11:e1:47:f0:33:e1:bf:fb:d7:38:11:bd:45:cf:3c:86:
41:78:0d:27:16:50:53:91:e1:3e:bc:2a:97:1b:72:f3:4c:95:
c3:2a:96:1d:ac:46:7a:56:51:d3:60:67:59:ed:e0:a4:13:00:
8c:c2:a1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:29 2025 by rpki-client