Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
File: uREsgEp_SnTOWMxxyZT1qdVhIrE.mft (raw, json)
Hash identifier: 8YBDPW9YpBP2xR2IBXHeKWYYsfE98fnTc1zVpEuHJcU=
Subject key identifier: 1A:E1:12:40:78:0C:89:C3:E4:19:A1:AB:47:8E:08:6E:5D:50:B5:A5
Authority key identifier: B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1
Certificate issuer: /CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
Certificate serial: 0194C463365D411E8238AEFA0AEEB93EF6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
Manifest number: 0C8A
Signing time: Sun 02 Feb 2025 02:00:23 +0000
Manifest this update: Sun 02 Feb 2025 02:00:23 +0000
Manifest next update: Mon 03 Feb 2025 02:00:23 +0000
Files and hashes: 1: 1patb8mkVp0mJa0slQ7qQ-5WVBk.roa (hash: DsUMv9vQW0wvlxaSYrdoCYfaCKpNMHSpozAHeICWqOw=)
2: uREsgEp_SnTOWMxxyZT1qdVhIrE.crl (hash: rSxfDY5+uNnqduBVx/OmwNpwAjc9meEeE2wtzA6ChH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:36:5d:41:1e:82:38:ae:fa:0a:ee:b9:3e:f6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
Validity
Not Before: Feb 2 02:00:23 2025 GMT
Not After : Feb 3 02:00:23 2025 GMT
Subject: CN=1ae11240780c89c3e419a1ab478e086e5d50b5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:0b:00:22:39:20:23:31:e3:3d:f7:b9:1a:
24:40:cc:da:8a:47:c1:fe:7b:2c:78:ea:52:a8:b1:
39:a5:6c:7c:d1:66:c7:8c:e1:bc:e3:f2:7c:34:f6:
02:54:0d:1e:58:14:f7:1e:87:8c:a5:c4:63:77:c7:
d8:e2:37:bc:57:45:e0:81:05:ac:36:ce:80:54:e6:
f4:b9:f0:46:41:b1:a4:19:bb:15:4c:5e:7e:d6:f2:
3c:f9:de:c9:97:e4:b0:da:e9:7b:5c:e2:fc:f7:8b:
8d:15:38:28:cb:2b:1c:d3:3a:13:f5:71:e3:aa:37:
9a:90:fe:f1:bf:ae:21:ce:57:91:fc:26:a9:53:2b:
88:7e:f1:0c:16:80:08:7d:4d:d1:e2:00:87:85:0a:
9e:b4:4f:5e:73:aa:78:66:2c:97:c0:64:cc:94:6b:
22:e7:6e:04:76:1d:12:64:52:3c:04:c2:c7:f5:01:
0d:e6:88:66:b1:3d:91:ec:6b:99:aa:16:4b:97:a6:
15:1f:82:91:f1:bc:7d:20:20:3d:5a:1f:df:a7:73:
e7:36:cc:18:62:b5:fd:de:65:53:9f:26:d7:51:4c:
e4:d4:eb:48:18:96:dc:4b:9d:75:53:07:59:6d:32:
60:f6:1f:a2:9d:45:0b:f9:c6:a1:95:1f:9c:eb:b0:
50:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E1:12:40:78:0C:89:C3:E4:19:A1:AB:47:8E:08:6E:5D:50:B5:A5
X509v3 Authority Key Identifier:
keyid:B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5c:53:19:2e:21:17:36:9b:eb:74:a3:99:0c:cc:e1:f1:7f:
f7:d8:a6:2f:87:68:de:09:b8:f1:e5:51:5b:2c:0e:31:ac:b1:
45:f6:d9:28:41:d2:a3:3e:29:74:f6:e2:06:09:1b:af:e4:76:
77:68:9a:cc:e3:a8:3d:32:2f:91:cf:d2:40:c9:c1:cf:9e:ef:
28:77:80:f4:1a:da:1e:2e:39:4e:84:74:56:61:60:2a:5f:8e:
d7:1c:45:bc:68:55:67:f1:b2:de:f5:d6:78:f0:10:bd:cf:ef:
80:40:af:59:0a:95:7f:4f:19:21:88:dd:43:eb:15:4d:9f:78:
ed:c4:21:b6:bb:ae:56:ee:10:1a:92:60:7e:48:9a:61:30:61:
87:1c:33:90:15:70:3e:ad:e9:8a:3e:c2:28:ca:fc:17:6a:a6:
df:f7:f8:3a:5a:f7:5c:15:13:82:8c:a7:a5:6e:2a:e2:c7:8f:
0d:2e:9a:91:c1:25:60:7c:45:cc:13:8d:f0:9f:48:e5:da:1a:
31:bd:d8:04:7d:3b:db:2d:38:e4:c4:bd:83:3b:24:22:42:dc:
9c:f1:83:4d:45:d6:bb:d0:42:0d:3e:50:cf:5b:6b:09:73:50:
3a:d3:92:8d:8d:75:28:0c:48:9b:a3:9f:38:4d:95:f5:87:46:
23:9d:aa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:00:16 2025 by rpki-client