Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier: Y85SolIkKRYL2JJuHl1sPEH4j7VjKqmrmK+MAXL1G/c=
Subject key identifier: C6:04:A0:E9:B3:7B:29:4C:FD:A0:CE:5A:39:E5:79:7F:E1:41:96:9E
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 0195113480686A804AB0F29D26934259E3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number: 0EB8
Signing time: Mon 17 Feb 2025 00:00:08 +0000
Manifest this update: Mon 17 Feb 2025 00:00:08 +0000
Manifest next update: Tue 18 Feb 2025 00:00:08 +0000
Files and hashes: 1: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: 0jURXUWaNjedte1wP9a0D8dkNMTA47jCe6+d2R4A22E=)
2: gSkIa_heLgXoxXWpRCNJvp9Xs88.roa (hash: 5vrs6puP5YdpeYb/igpgdkuukfc/yg5fXJ/pSyPNWx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:80:68:6a:80:4a:b0:f2:9d:26:93:42:59:e3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Feb 17 00:00:08 2025 GMT
Not After : Feb 18 00:00:08 2025 GMT
Subject: CN=c604a0e9b37b294cfda0ce5a39e5797fe141969e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:01:cf:4f:a3:1e:9f:e7:31:86:f0:d9:e0:d4:
ef:a4:b3:e1:1d:5f:53:93:99:12:30:18:4f:21:e4:
cd:88:75:6a:bf:5d:b9:62:ca:f1:fd:bd:e3:9d:ae:
a6:c3:c9:17:3c:47:9e:5d:46:31:2e:76:65:ea:36:
dd:f6:03:1f:6f:3c:99:3e:89:73:5f:f8:52:07:79:
a7:29:24:04:b7:20:a9:f8:dd:fa:0b:21:6d:3f:fb:
77:87:04:79:c7:a8:e6:b2:b4:2f:ff:2a:9c:fa:b9:
31:ce:77:bb:d8:06:33:ef:7e:e5:80:88:bc:bd:1a:
74:14:2e:34:11:33:f2:77:4e:77:5e:1f:12:26:86:
c3:2c:83:03:97:b5:90:65:6f:1d:a7:01:32:52:19:
33:e7:1c:d0:8e:bd:c5:6c:3f:8d:d4:ee:65:35:66:
e3:15:2d:55:78:7f:ad:39:24:67:4d:33:8f:10:56:
c0:d6:39:47:2d:bc:60:b4:76:83:a7:e9:48:aa:80:
96:b6:32:80:cb:da:a7:5a:f7:a2:ec:28:ba:43:3f:
29:9b:10:94:d7:94:3e:62:a8:4f:78:64:c0:9f:b4:
91:44:17:cb:be:2c:3b:4c:da:0b:2d:01:eb:cd:e6:
af:c1:43:b8:8e:60:79:0c:14:6a:52:ff:1d:51:db:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:04:A0:E9:B3:7B:29:4C:FD:A0:CE:5A:39:E5:79:7F:E1:41:96:9E
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:83:71:00:48:0a:0e:0a:e7:a2:41:ec:e0:d1:51:cc:4c:d9:
90:d7:fa:80:18:54:19:04:18:ee:cf:6a:ed:2f:10:b4:01:42:
77:0b:70:0d:b0:c5:a4:59:d0:7b:76:9f:22:d0:35:ec:6c:5b:
f2:40:39:91:d1:e8:0c:3d:44:f2:d0:41:4e:64:96:de:14:f2:
b2:61:da:89:69:ae:db:75:41:3c:7b:6f:7d:a3:9e:84:79:16:
0b:b9:3e:03:87:a2:cc:0a:93:e5:90:d4:1c:9b:de:9f:04:1b:
f7:00:ed:39:d6:b8:02:9c:58:60:e7:f6:f9:8b:4e:ce:a6:89:
93:da:0f:0e:76:f9:f9:21:a2:b5:de:84:a8:41:2b:5a:c0:30:
9d:4c:e1:0c:80:3e:dd:9f:3d:69:eb:5d:30:5f:1a:f8:25:28:
6a:76:01:8e:4d:ce:58:a2:69:12:73:8f:8f:8b:81:6a:2f:2c:
62:72:a5:8d:91:c6:3f:57:67:95:2f:64:39:d7:25:d6:9a:2f:
3e:86:18:5e:c6:aa:ac:26:d5:d7:39:1a:e1:e3:87:ac:c2:3e:
74:ba:c4:53:9f:61:1f:d8:48:eb:8d:ec:d6:ab:50:20:6e:c9:
8c:c9:8a:39:42:46:ac:c3:9e:92:7e:86:5b:ac:ac:d0:0d:35:
48:7c:de:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:24 2025 by rpki-client