Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier: uQiWQxEQnPlGVYQnoxLQKgCWc8ju22KKFdM7VnLcuyQ=
Subject key identifier: 74:CA:03:4B:A9:02:BD:90:6C:88:C0:3C:92:72:56:5A:FD:DE:E4:80
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 019512473BF0EF02677BC9B3D5B61EE0B87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number: 0695
Signing time: Mon 17 Feb 2025 05:00:12 +0000
Manifest this update: Mon 17 Feb 2025 05:00:12 +0000
Manifest next update: Tue 18 Feb 2025 05:00:12 +0000
Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: QtYP+8uMrfMjq9r8WToGRuVPhNTZPU3LwzF9ZGaRVFQ=)
2: wxwsQanfQy5790A813fRANF-qCc.roa (hash: bJCA9RXeZ9EZ2+fSpx3hkdts4SbbKPXcBRLWj1SMUSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:3b:f0:ef:02:67:7b:c9:b3:d5:b6:1e:e0:b8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Feb 17 05:00:12 2025 GMT
Not After : Feb 18 05:00:12 2025 GMT
Subject: CN=74ca034ba902bd906c88c03c9272565afddee480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:f6:b8:ea:01:7f:8a:7c:d9:bd:63:93:77:
d2:20:e3:b3:43:26:a1:c1:13:9a:db:a6:56:20:b8:
ee:c1:99:f8:19:91:3b:71:b9:02:b8:86:c4:e0:92:
30:01:ac:ec:3b:4e:32:96:c5:5c:57:6e:d8:d1:40:
c8:4c:67:4c:68:eb:3a:e4:68:cb:2f:a0:0d:04:e6:
3f:13:a6:53:9c:c7:c6:a8:46:aa:2c:8c:9c:14:43:
f9:1f:9b:3b:91:1b:f9:08:b1:61:07:72:44:f9:81:
ae:7e:be:27:70:f9:c1:bd:fb:b2:cd:2d:26:2c:12:
0a:82:41:de:9d:19:fb:85:e4:d0:bd:42:1d:ad:8b:
b9:e7:4a:1f:6b:f7:03:a9:4b:25:82:b2:46:f4:01:
94:91:d4:97:cf:39:a8:35:19:7d:ec:5f:ce:94:ef:
d8:c0:89:43:03:3c:27:21:2e:72:f1:c8:ab:0e:a4:
7b:74:b5:72:f1:a3:25:b4:a0:86:6f:35:b9:9d:de:
78:0e:67:52:a0:dd:45:cf:98:bf:34:bc:7a:7f:05:
15:b5:cb:3b:3e:32:d3:63:58:05:c9:85:4f:24:32:
b4:a9:af:67:5f:64:e8:22:9f:78:f2:b3:2b:0f:00:
a6:c8:97:43:6b:9c:a5:f8:a8:b0:6e:5e:2a:01:c3:
c5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CA:03:4B:A9:02:BD:90:6C:88:C0:3C:92:72:56:5A:FD:DE:E4:80
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:79:47:5e:79:64:3f:ca:f3:33:19:89:ae:53:a1:8a:5c:3d:
34:06:91:f0:df:41:85:30:85:4b:59:32:16:fe:ba:fe:24:a5:
6d:1a:8b:09:d9:59:bd:64:1c:17:bb:20:87:ba:13:49:da:7d:
d0:ee:7d:29:57:e1:45:68:7f:df:32:51:a2:e6:9e:25:ae:ad:
26:5e:e5:72:c0:40:a1:0a:42:64:37:ee:6a:0a:7e:06:7c:a8:
e6:1b:a8:12:75:fe:c2:70:d8:88:89:85:93:21:cc:d8:ff:1f:
ab:a4:19:e0:50:1b:0d:a5:15:33:c8:74:66:a0:8f:15:55:a9:
b7:d0:2b:00:9c:f7:fd:cd:44:14:c4:e2:e6:35:e5:9e:a9:64:
9f:1a:db:97:df:70:2e:a1:27:04:5e:88:57:d7:00:7f:dc:cb:
a5:0c:01:5e:74:f8:8e:05:5b:31:76:9c:f7:db:51:c3:bb:87:
f9:5c:2c:9a:41:d9:d5:c3:db:de:2a:a2:80:38:91:b0:17:53:
22:81:3d:f2:50:10:4d:46:48:c6:96:d1:46:5f:1c:7e:2e:13:
d3:ac:1d:20:d8:d2:fc:7d:ba:35:82:b4:b1:7f:fb:03:2e:80:
d1:46:a1:f9:95:af:f9:16:32:f4:3c:9f:ae:a9:da:31:ed:8b:
41:4e:96:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:36 2025 by rpki-client