Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File: eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier: qGMw/73SAAIysdDGAcY4YfwtwEWcRZAZsNxP03Sy9qs=
Subject key identifier: 74:45:99:1B:F0:13:84:5A:23:F3:6C:4A:A0:98:1A:E0:02:2E:3D:8E
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer: /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial: 019512108CD34F92B677AFEAC27E7B177391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number: 0A15
Signing time: Mon 17 Feb 2025 04:00:29 +0000
Manifest this update: Mon 17 Feb 2025 04:00:29 +0000
Manifest next update: Tue 18 Feb 2025 04:00:29 +0000
Files and hashes: 1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: F/EYtiaqZU3XJM/cP0isZA1nM8dd35NPox9X+ZTHRLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:8c:d3:4f:92:b6:77:af:ea:c2:7e:7b:17:73:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Validity
Not Before: Feb 17 04:00:29 2025 GMT
Not After : Feb 18 04:00:29 2025 GMT
Subject: CN=7445991bf013845a23f36c4aa0981ae0022e3d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:ca:7b:75:0c:44:f9:22:71:45:39:82:42:
c3:97:a8:82:a7:f5:77:a9:f1:0b:6c:1b:f1:5f:76:
c0:de:53:38:4a:05:de:f1:4b:35:de:95:d1:f2:16:
0a:cd:a0:87:17:d7:62:81:28:6a:c3:7c:6d:c1:9a:
8a:85:6b:95:9e:6c:3c:98:17:ef:72:7c:3d:79:ee:
8b:fc:8b:09:70:c8:17:a0:b7:7c:32:d7:47:19:cf:
41:b5:64:fe:4c:bf:67:95:2c:ac:4c:14:b3:55:9a:
68:be:89:af:5f:38:5e:e1:9f:57:70:8a:62:f0:d5:
77:2a:22:2a:66:b0:73:ab:b9:b2:c7:80:ab:7d:c0:
65:57:de:62:ca:e2:3a:42:8d:ab:78:94:4b:c9:15:
0a:09:20:26:7e:6a:64:4b:9c:7e:57:4a:77:c4:c7:
a3:1e:ce:98:60:e3:40:ac:f9:2c:b9:84:e2:6d:3d:
80:63:c8:43:bd:b6:49:ae:8a:b3:4d:15:08:be:26:
9b:6e:f2:01:ff:af:c2:e9:55:6d:5a:0c:aa:f5:7c:
56:47:88:48:d6:aa:2b:65:1c:f0:2b:0a:3a:37:cc:
a6:11:89:01:1a:16:b5:bc:2e:cd:01:e6:24:03:2f:
2f:dd:28:aa:cc:e8:2a:18:91:3d:7d:3e:e6:4b:f4:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:45:99:1B:F0:13:84:5A:23:F3:6C:4A:A0:98:1A:E0:02:2E:3D:8E
X509v3 Authority Key Identifier:
keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:da:de:64:0a:0f:75:1a:da:f7:50:d0:46:e6:25:ce:b3:38:
e9:66:59:3a:f6:9c:5a:d7:87:74:1b:10:0e:ff:7b:bf:69:28:
e6:9c:4f:90:37:03:36:e4:03:43:b0:94:84:a1:1e:0b:4d:19:
ca:87:7c:c3:b3:20:aa:88:27:73:47:d7:40:d5:58:e8:40:39:
ba:98:46:24:43:bb:70:13:91:f3:c1:86:6b:f1:89:33:01:da:
9c:63:7d:8e:d4:15:93:ca:38:a9:e8:72:7c:8e:07:60:38:7f:
a4:d5:22:6b:63:cf:9a:ca:3f:a7:58:81:3f:d8:15:0f:a7:f9:
df:03:52:64:0a:16:51:43:4c:86:19:dd:1c:db:78:79:3f:50:
4b:3f:21:0d:7e:58:60:88:1b:eb:23:4c:3d:28:57:18:35:31:
a5:81:79:29:29:68:22:43:2a:c3:a5:26:f2:44:4e:f4:af:e0:
c5:6a:cb:9d:8c:3b:92:ec:57:88:24:3f:b7:03:92:ec:e9:c8:
23:59:d6:60:2b:c7:e4:a3:ec:3c:11:b0:0e:98:27:b2:1c:ea:
23:98:dc:5b:31:d0:7f:5a:a1:89:ea:78:a7:ff:af:75:03:53:
1a:38:3b:cf:00:4b:ec:ab:39:62:bd:90:02:c3:33:78:95:cd:
bf:99:c7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:22 2025 by rpki-client