Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
File: EeWvTHKGkglTmxGUWXsD-jpKVUo.mft (raw, json)
Hash identifier: 3TIEetrK44xWygpf3uTz2ic/oEjKqL2cs4MneRyV2r4=
Subject key identifier: BE:45:04:63:D5:44:03:14:75:14:37:6A:F6:A0:9D:60:58:78:95:3B
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Certificate issuer: /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial: 0194BABB685299AD44557DB95E3E988875D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
Manifest number: 0D28
Signing time: Fri 31 Jan 2025 05:00:31 +0000
Manifest this update: Fri 31 Jan 2025 05:00:31 +0000
Manifest next update: Sat 01 Feb 2025 05:00:31 +0000
Files and hashes: 1: EeWvTHKGkglTmxGUWXsD-jpKVUo.crl (hash: AldL2jKKwTH5YFE1Q36Ea0jLZaleXZQCDVGZmNaJzEU=)
2: Jzm46CCydGnaow81u1_xNN5mK1k.roa (hash: 6dqJE3+wgexU/DPorZ1i735/Z7zxtOoeBz+MZoeVtcw=)
3: M7RGBrVeR3KtQIYcHYRjTMd4sP4.roa (hash: ISb1VwFVgG+G0QkVMeOYR3KKNz/PbEusd5lSF/7EVsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:68:52:99:ad:44:55:7d:b9:5e:3e:98:88:75:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
Validity
Not Before: Jan 31 05:00:31 2025 GMT
Not After : Feb 1 05:00:31 2025 GMT
Subject: CN=be450463d54403147514376af6a09d605878953b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:21:69:dc:ea:95:e9:67:a3:e5:a4:02:e9:
04:0c:33:21:6d:9c:8f:d8:b7:7f:c5:57:7f:b7:b8:
62:67:06:44:7a:5b:e0:78:0f:35:8d:ac:0b:87:5e:
96:e3:0d:41:57:4d:b5:f6:14:7c:f6:90:fb:c9:aa:
3e:89:e7:03:10:3e:c2:60:84:23:c4:e0:e3:2f:fc:
c8:57:79:3e:f2:cb:e5:c7:22:1d:26:14:05:f6:d7:
8d:7d:04:9d:a3:3e:60:f3:a0:b1:17:91:43:0d:c7:
27:c7:72:3b:de:4e:ef:2b:c3:78:02:09:93:64:9e:
c6:88:96:d8:63:36:f2:64:32:e6:87:7b:9d:60:8c:
d5:83:36:9b:b3:c1:3f:74:44:2f:f6:8b:7f:63:0d:
4a:b1:c7:94:71:45:10:26:ab:ad:58:98:a6:0c:1c:
28:55:45:02:64:83:d5:5f:08:e9:85:16:7f:2b:8f:
e6:ff:60:41:bc:c5:73:a0:9a:2d:95:7a:e7:9c:0b:
81:72:0e:d1:bd:91:4c:22:aa:37:df:2d:cd:4b:97:
b0:0c:41:1f:60:8c:5b:d6:33:50:85:0c:2f:1d:5a:
42:af:12:f8:dd:be:df:48:a7:bf:ff:14:f3:b3:b8:
0c:d9:48:31:df:4f:b0:bb:93:b4:a0:1a:e4:6b:06:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:45:04:63:D5:44:03:14:75:14:37:6A:F6:A0:9D:60:58:78:95:3B
X509v3 Authority Key Identifier:
keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d4:99:07:2b:d4:60:0d:df:8e:3d:cd:1e:4e:a8:50:f1:49:
15:5b:a7:e7:a2:4c:f6:d8:86:a8:89:f0:55:f5:a6:1a:49:73:
be:d8:e8:e7:eb:aa:2c:05:c3:b5:90:43:28:46:b4:30:3f:46:
f2:b7:60:68:b2:6b:fa:a3:ee:00:46:70:27:be:af:30:fd:75:
b6:7d:fd:31:6f:c1:ba:ec:c3:4e:7b:b3:66:05:35:77:ae:08:
d1:d8:c4:bf:0b:0d:dc:40:30:f3:f8:d2:ca:a7:d2:80:4d:a7:
b6:aa:6e:92:4f:e8:3f:d9:fc:55:d9:cf:7f:45:c0:75:24:90:
b0:45:79:22:f7:24:99:e2:c7:99:db:14:63:bc:a5:cc:e4:99:
1d:d2:ab:be:c0:25:ae:63:db:db:ff:60:87:2a:94:0a:cd:d5:
c1:dc:2f:a4:f5:2b:33:22:af:e9:0c:ea:82:a7:c1:6d:c8:02:
0a:27:b2:a3:6d:cc:3c:f6:fa:69:45:72:c6:fa:46:04:d9:aa:
3f:7c:7b:78:2b:6b:4f:a7:46:99:69:30:a1:dd:74:cd:82:28:
58:55:64:a5:15:2f:81:5b:4b:07:aa:2d:72:1d:3a:a0:de:79:
ec:6c:1d:9b:5c:c1:57:d9:05:0e:b5:59:e6:97:a1:d4:8d:c9:
02:ef:45:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:59 2025 by rpki-client on console-fra.rpki-client.org