Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
File: ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft (raw, json)
Hash identifier: hZ186kFWJX51Svm8s9DaMRGMcfTkL4jcIg1/Wxe4oGM=
Subject key identifier: 4D:62:9A:DC:D8:64:40:4F:F8:9A:F7:40:0E:7D:CF:69:88:60:95:B4
Authority key identifier: 7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
Certificate issuer: /CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Certificate serial: 0194C463A59EE15FFE552E215A7843754FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
Manifest number: 134C
Signing time: Sun 02 Feb 2025 02:00:52 +0000
Manifest this update: Sun 02 Feb 2025 02:00:52 +0000
Manifest next update: Mon 03 Feb 2025 02:00:52 +0000
Files and hashes: 1: 9sc_Z6wsh2xqSgSi_D7ZTYMetBM.roa (hash: ysO7qNEauUD+3RJnhREGXDUT/3d77gpAizI5YbhTLSM=)
2: ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl (hash: 3YOFZUShErgtveYuUAdZA+pBZxyZzP43zfwedVbt63s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:a5:9e:e1:5f:fe:55:2e:21:5a:78:43:75:4f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Validity
Not Before: Feb 2 02:00:52 2025 GMT
Not After : Feb 3 02:00:52 2025 GMT
Subject: CN=4d629adcd864404ff89af7400e7dcf69886095b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:77:e9:c1:f1:d3:34:23:ef:fa:e9:ca:c4:72:
cc:75:8f:af:dd:2c:2d:8b:54:49:41:78:55:8b:b3:
c9:00:40:b6:b1:00:ed:fc:39:01:db:28:b3:9a:52:
60:4a:e3:ec:08:f9:29:fb:5f:85:e5:bd:4b:a5:75:
32:1d:c4:a0:35:10:12:ca:80:2d:54:af:b8:0e:6e:
2c:7d:3a:63:68:78:a4:82:ee:4a:5e:37:54:4f:5a:
c4:c6:3b:3f:57:e2:ea:08:28:b0:4c:a7:b4:66:d3:
d2:ce:b7:e7:4e:e7:3b:46:2a:d6:f1:dd:37:da:42:
3d:9a:43:c8:5d:99:d5:c2:08:59:25:77:14:a3:79:
95:59:cf:03:9c:33:1a:02:63:34:66:65:1d:18:19:
58:e2:1d:06:aa:8c:d2:fb:ba:be:08:e5:e0:a3:7a:
ce:e8:2d:ab:c0:97:d8:27:0c:3c:fb:67:6d:29:5c:
6d:b9:4f:5d:fc:27:39:6a:e2:48:88:35:f8:29:8e:
8d:1e:d4:f0:1b:62:5d:32:61:2e:43:45:9e:fb:40:
21:e0:75:66:15:28:b9:f8:28:ee:da:c0:b9:30:0a:
8c:1a:ea:72:10:33:3b:16:c5:20:65:49:2d:f7:c3:
c1:f3:04:83:e0:3f:1a:73:9a:09:5a:08:f8:f6:75:
e4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:62:9A:DC:D8:64:40:4F:F8:9A:F7:40:0E:7D:CF:69:88:60:95:B4
X509v3 Authority Key Identifier:
keyid:7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:78:63:42:73:79:17:45:8b:27:98:07:c4:0d:cf:27:3f:c6:
b1:13:94:07:85:15:e0:d0:93:d4:00:7a:c1:0a:9d:9d:ea:b8:
82:ac:4c:07:66:54:da:95:7f:f3:0e:ec:02:54:dc:25:c0:d0:
04:1b:91:75:88:b0:15:33:fd:53:72:a2:2c:4b:69:07:36:08:
29:89:69:be:c3:f4:00:53:88:c5:70:93:67:73:64:85:87:9f:
be:80:18:ec:1e:13:62:f5:b3:68:39:84:dd:d4:ab:56:6a:ef:
63:8a:72:15:f1:43:79:0e:63:e9:93:ea:0c:28:c8:cc:57:56:
68:e9:a1:ba:bb:4b:37:7d:18:60:0b:19:c7:d0:ec:73:9e:f8:
0e:13:cc:0c:df:a8:8a:46:3a:e1:98:c2:63:ca:22:6d:67:ba:
aa:17:fa:05:94:02:94:bc:8a:48:e0:53:1f:49:db:2d:ab:9c:
d2:5a:7d:8b:5f:8e:7d:48:0a:b9:ab:af:dc:5a:f7:4f:68:06:
6c:de:3d:6a:32:7b:34:a0:86:11:da:f3:8b:25:41:26:91:8f:
a8:92:9f:d8:7e:98:a7:c0:d9:7e:5f:b4:1d:7a:43:75:73:5f:
6c:93:c3:ed:0c:b6:29:da:79:60:e8:80:f9:25:e4:fc:62:a7:
55:76:61:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:27 2025 by rpki-client