Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
File: 13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json)
Hash identifier: uNCHOvRPu6NCtbDvRXxwke6bP/wKbMV4tolsl5/AMAs=
Subject key identifier: 21:EC:50:69:20:26:33:F4:C0:64:BA:29:CF:55:F6:70:B8:5C:8F:5B
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Certificate issuer: /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial: 019512476F74E006583CEEBA97FE7EBDA136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
Manifest number: 123D
Signing time: Mon 17 Feb 2025 05:00:26 +0000
Manifest this update: Mon 17 Feb 2025 05:00:26 +0000
Manifest next update: Tue 18 Feb 2025 05:00:26 +0000
Files and hashes: 1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: kcCM8/dB/p2V1q0xr2sHZpRBo4BPdlDyIPWp6MpLf4I=)
2: Dcjqka0vRB55CJDqEWplWQ0em2k.roa (hash: QNtKb0wVTgOzXABHcHNsksEjhhvzQUkXJ+QzngWUeuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:6f:74:e0:06:58:3c:ee:ba:97:fe:7e:bd:a1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Validity
Not Before: Feb 17 05:00:26 2025 GMT
Not After : Feb 18 05:00:26 2025 GMT
Subject: CN=21ec5069202633f4c064ba29cf55f670b85c8f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:5c:95:81:6c:98:64:01:0a:26:f7:39:86:
60:c8:98:77:e1:f8:06:12:88:e0:e5:f4:ff:a2:d9:
01:0e:0b:5d:1f:dc:79:55:aa:8b:60:c0:b0:77:05:
df:2f:59:df:8b:e0:1f:b4:1f:06:f4:a2:67:8c:ce:
ce:36:66:74:12:ec:21:e0:13:5b:1b:2a:10:2d:54:
5f:82:a4:47:cc:ec:ca:61:cb:b1:08:c8:b1:a0:63:
ca:e8:9c:26:5c:c3:6e:bd:df:c7:25:91:74:52:5b:
b3:d8:4f:39:64:95:c2:cb:df:d5:08:6c:6e:b8:01:
47:21:81:0b:41:05:0e:13:29:24:c8:ea:c8:51:19:
26:b6:f7:73:da:cf:17:57:e5:6d:71:1c:44:3d:fa:
c8:2d:cd:5c:19:0a:c5:02:c7:f7:35:34:e2:ae:09:
98:af:b0:67:74:0f:5e:40:9d:a0:89:74:90:e6:ca:
3d:00:4d:25:e4:a6:25:65:9f:f9:bc:1c:88:50:38:
73:57:01:c9:25:fa:eb:f2:8f:1e:90:14:94:bd:6b:
e9:dd:6c:4b:7f:19:ee:dc:7f:7c:dd:ad:68:98:b5:
d0:ea:ce:4f:06:c9:a1:a3:06:d0:f7:c6:1d:3f:f9:
03:d7:7b:8d:86:bb:48:c1:e3:ee:d1:f0:43:31:c8:
49:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EC:50:69:20:26:33:F4:C0:64:BA:29:CF:55:F6:70:B8:5C:8F:5B
X509v3 Authority Key Identifier:
keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:04:32:11:2f:17:7c:d9:8c:1d:75:d1:45:ef:e7:5e:44:9a:
b7:a7:38:22:b7:b1:73:fc:0f:94:0a:47:8d:6c:7e:5d:7d:8c:
4b:2b:77:bd:e5:2d:85:13:e5:df:f0:9f:2b:64:af:d9:aa:cc:
5a:cf:a2:bc:23:27:b4:8c:4e:37:2b:28:22:7a:68:f4:e6:c0:
90:5b:75:98:62:be:05:6d:f5:f2:bf:42:5e:f8:0a:6d:c2:0f:
83:9e:2c:8f:c0:2b:8b:d6:fc:51:2c:59:ec:0a:01:e7:a5:ea:
18:08:4d:95:28:66:7d:6e:9c:bb:8e:0b:10:05:34:f4:f5:d5:
96:68:38:78:19:a9:66:7c:dd:a8:45:b4:16:55:2d:8c:b2:bd:
ba:b6:e9:8e:b8:98:11:cd:5f:f6:2a:ea:30:52:fb:5b:6c:8e:
99:da:e8:a7:d5:ca:87:f6:93:2d:63:82:9d:89:c8:7b:27:74:
8a:a1:17:f1:55:fa:b0:f5:e1:bd:a6:30:eb:d3:8a:4c:10:65:
1c:1a:19:c2:44:b7:bd:17:6a:e4:b2:70:fa:5a:c5:bc:98:66:
02:9b:3e:6e:5d:16:5f:2f:dc:90:95:51:23:53:10:1f:69:a8:
d4:49:3a:08:92:bf:87:3c:ec:6a:71:7c:bb:cf:81:03:2d:ad:
61:d2:e8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:32 2025 by rpki-client