Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
File: sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json)
Hash identifier: WJLGL7Q7R4e8r0E8lNICq1akiJmgpfkM37PFssJVVA8=
Subject key identifier: 9A:75:B9:DD:57:BC:94:48:34:BC:AD:95:FD:12:BA:DF:1B:3B:01:29
Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Certificate issuer: /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Certificate serial: 019510C7596AD61501C665225CE4FEC117DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
Manifest number: 12B2
Signing time: Sun 16 Feb 2025 22:00:54 +0000
Manifest this update: Sun 16 Feb 2025 22:00:54 +0000
Manifest next update: Mon 17 Feb 2025 22:00:54 +0000
Files and hashes: 1: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: 7MzX8rSxIJokxJ8fSnZ+svPqkMC73p9kA/kAvWFbyZw=)
2: tUy7VKDDVboY2Qo-sNWljYmxPOI.roa (hash: nOufD9VcAARAPXFJN7YbCFA3vo77wDsfl0JVajaSTdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:59:6a:d6:15:01:c6:65:22:5c:e4:fe:c1:17:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Validity
Not Before: Feb 16 22:00:54 2025 GMT
Not After : Feb 17 22:00:54 2025 GMT
Subject: CN=9a75b9dd57bc944834bcad95fd12badf1b3b0129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:11:5b:ba:cb:5d:45:5c:35:58:0b:f1:0f:9c:
85:c6:69:8b:7f:47:93:67:e4:0c:6b:77:9f:17:94:
c3:56:c0:35:27:a9:23:80:90:b4:7b:70:46:d8:b1:
54:80:bb:5c:a0:ca:cf:73:f5:30:2a:e9:9c:0a:0e:
32:a3:18:4e:56:d1:9c:97:5d:f4:d1:cf:71:55:32:
bf:9f:c9:b7:35:1e:59:35:40:e9:54:a6:13:b1:50:
d6:54:62:c0:94:82:0b:d5:31:66:32:37:a4:92:e8:
ec:cd:c6:91:0c:8f:0a:af:d9:d3:1b:3a:bb:b5:bf:
34:67:14:04:81:87:23:5e:4e:06:5b:5c:87:ff:0b:
b8:fe:a8:02:99:84:08:3d:24:fc:3e:7e:f7:30:2d:
6a:8d:4b:9a:e3:91:d8:ad:78:00:03:fc:89:56:df:
5f:9d:24:16:b7:1c:7a:b2:4c:fa:bd:d1:62:4c:bd:
d7:cc:b3:8d:f1:b8:d2:2a:ae:3c:ef:e2:f3:1d:98:
fe:c8:42:d5:cb:81:37:ad:14:05:bd:4b:62:9d:b5:
0b:28:01:97:81:96:85:08:b3:ac:55:05:aa:35:e2:
78:23:37:39:0c:df:0c:20:c8:cd:a7:ae:28:a4:c6:
9d:06:9f:9b:9a:03:7c:46:81:6b:bf:fd:3a:3d:8f:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:75:B9:DD:57:BC:94:48:34:BC:AD:95:FD:12:BA:DF:1B:3B:01:29
X509v3 Authority Key Identifier:
keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a4:f5:94:4f:6b:19:02:c0:1b:62:46:2a:38:8d:be:07:2b:
3c:26:07:91:fe:13:8b:04:8f:4d:3b:0b:40:16:a5:c0:5e:a4:
2a:bb:86:5e:e1:45:65:8f:39:8a:6e:93:40:30:7f:c6:2f:0a:
ce:5c:f8:22:59:69:d4:7b:87:b7:0b:fd:56:31:c7:94:7d:5c:
44:d3:67:dd:a7:e2:2f:6b:50:39:74:a2:e8:0c:82:e2:e1:bb:
6c:fe:7d:d2:aa:d8:2e:ce:c6:f2:57:a9:4e:09:ad:29:86:f0:
92:23:89:f5:f7:56:cc:66:e2:ae:6a:45:9a:c8:b6:32:4e:0f:
64:10:45:89:15:b5:7c:7e:0a:16:4c:1b:34:60:59:fc:f2:2c:
49:89:ea:b0:9d:62:f0:98:a8:d0:61:29:6d:2b:8f:3c:46:cb:
a5:82:8f:c1:02:99:67:a8:77:2e:cb:f3:ac:05:e2:78:7c:5a:
57:17:2b:e7:6b:84:4b:57:7a:73:f4:18:c0:be:fd:06:47:12:
47:88:a8:09:0e:63:96:46:60:ac:18:fb:36:4a:b9:c8:b7:1b:
e3:dc:58:8c:ad:9e:b6:ac:ba:9c:f2:9e:29:7a:ad:e2:ed:1b:
f0:97:74:c7:60:25:0a:c7:2e:96:8f:28:05:ec:b1:9e:c7:d9:
d4:ef:c4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:27 2025 by rpki-client