Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
File: EIr56cVlKzWESy5dS1N-n81EUvM.mft (raw, json)
Hash identifier: UlHRZ1JbtfhjB5ayZ2zPFF8P0mKHcUAgjjRX7r80P14=
Subject key identifier: 05:4B:93:E2:2B:6A:50:76:FD:45:A3:3B:BC:DE:F0:EF:8B:54:C1:49
Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
Certificate issuer: /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Certificate serial: 0195116BEF1D745B5AE65A81C71A9549DA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
Manifest number: 0FEC
Signing time: Mon 17 Feb 2025 01:00:40 +0000
Manifest this update: Mon 17 Feb 2025 01:00:40 +0000
Manifest next update: Tue 18 Feb 2025 01:00:40 +0000
Files and hashes: 1: EIr56cVlKzWESy5dS1N-n81EUvM.crl (hash: 1Ceb8k4bTLwjp2c3Ug06vxDOVbxVSFek0wiIjanaLXI=)
2: dIVATvBSzX3-SNfEUJlU8mxDvDM.roa (hash: /zYG/pdQ9E5dfKf9N6xTzPoRPhdVlqRDaAGUUjW4u0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:ef:1d:74:5b:5a:e6:5a:81:c7:1a:95:49:da:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Validity
Not Before: Feb 17 01:00:40 2025 GMT
Not After : Feb 18 01:00:40 2025 GMT
Subject: CN=054b93e22b6a5076fd45a33bbcdef0ef8b54c149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:7c:91:92:8c:1d:ba:2b:38:83:4a:f6:dd:
0c:a8:56:b2:b5:3a:07:69:71:1c:cb:bd:7e:92:cb:
b7:a9:97:24:20:ff:63:57:b6:77:e3:18:24:11:c1:
7d:bb:25:57:e9:ec:41:56:0e:08:d0:de:7a:02:e5:
be:a6:f7:c1:7f:2e:5f:75:89:f9:84:e3:4c:4b:dc:
d8:86:20:57:90:78:8b:d2:f1:1d:2e:ca:16:4a:51:
b0:3d:09:0d:8d:e6:d2:b9:12:8f:5e:75:7b:f6:01:
71:4c:01:aa:c6:91:29:80:6c:15:0a:12:a6:f7:98:
f9:77:a8:a8:0a:5d:0c:31:0e:fb:b5:9b:3a:b2:a7:
ac:5f:35:93:b0:12:70:50:2d:a2:1d:77:0f:39:13:
0d:e4:17:a0:a3:40:d7:03:d8:f5:f9:bf:ac:35:2d:
ab:27:3d:9f:bc:65:03:e1:d4:20:b7:93:b0:e1:3f:
03:67:64:64:ef:de:02:63:6f:5b:ea:04:35:76:aa:
e2:d1:99:58:78:93:a5:ac:c9:8c:8b:6d:b5:c0:cf:
51:2d:2c:95:78:7c:81:18:df:ff:dd:db:70:a0:e4:
40:27:e8:8a:4a:00:9a:7c:28:b2:f2:bb:b4:85:ea:
83:2a:4f:ed:1b:31:f5:c1:4b:82:e7:10:52:7b:d8:
87:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4B:93:E2:2B:6A:50:76:FD:45:A3:3B:BC:DE:F0:EF:8B:54:C1:49
X509v3 Authority Key Identifier:
keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:37:86:98:0b:23:ce:ee:bc:74:e0:59:1f:fb:3b:4f:16:30:
9c:88:72:40:a8:40:50:a1:dd:a4:15:37:10:2b:68:d2:c8:3c:
b9:28:58:f2:07:a0:65:8e:76:21:78:f5:29:53:9a:a4:f0:ae:
b6:8d:46:0c:c4:83:74:b2:b2:39:85:e6:44:8d:a6:d3:8d:08:
04:9c:22:24:1a:c9:14:fb:1c:b7:7f:1e:90:29:9c:26:fb:78:
8e:70:73:fa:31:fd:fd:3d:49:b5:13:65:b1:91:98:88:a5:9a:
da:68:88:30:10:4e:8f:49:61:8d:93:c5:f4:67:f0:9a:b3:c1:
b3:2f:89:26:11:36:be:cd:55:10:f7:ca:8a:1a:8c:d5:da:48:
09:47:d0:83:55:c0:ab:a5:49:e4:ca:f9:76:c2:40:11:ea:d9:
3a:1e:93:17:a3:de:8e:6e:61:59:f1:59:4d:ac:a1:aa:0d:4b:
01:5e:83:f3:4e:72:c0:df:0e:22:de:ad:cd:e1:18:4d:94:5d:
9b:03:2d:09:aa:f4:67:64:71:bc:c0:1f:a0:b6:b7:e1:22:48:
58:df:9d:7d:3b:08:67:40:16:1b:d3:b9:df:30:51:11:ce:13:
13:c8:4e:d5:1b:83:ae:0c:d9:f1:d0:7c:50:42:50:d9:53:16:
4d:8f:e8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:50 2025 by rpki-client