Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
File: E-XdFL3pMjctyLWTLMVNYI276Qg.mft (raw, json)
Hash identifier: HMQQIVdNdtxo9aSZOeGkkbk0UDiExHJWQ7bWlzPEFl4=
Subject key identifier: 7C:3F:53:AF:A6:A2:12:CD:7A:73:F8:56:36:F1:ED:54:95:7A:75:6B
Authority key identifier: 13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08
Certificate issuer: /CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
Certificate serial: 0194C49A57BB2E168A1F8A22D9CFCA5E8B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
Manifest number: 1E
Signing time: Sun 02 Feb 2025 03:00:36 +0000
Manifest this update: Sun 02 Feb 2025 03:00:36 +0000
Manifest next update: Mon 03 Feb 2025 03:00:36 +0000
Files and hashes: 1: 12_j47AEFlNkQmnvJ6lQS6k9OJM.roa (hash: QL5MIkOPhYomrHDRf0wI6//DVHKZ3F+ShGeX+xkxEXo=)
2: E-XdFL3pMjctyLWTLMVNYI276Qg.crl (hash: DLIEmu+6+ZzXpXVMlf+2oDzKvjGu/OqP3Vs8nLvOs+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:57:bb:2e:16:8a:1f:8a:22:d9:cf:ca:5e:8b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
Validity
Not Before: Feb 2 03:00:36 2025 GMT
Not After : Feb 3 03:00:36 2025 GMT
Subject: CN=7c3f53afa6a212cd7a73f85636f1ed54957a756b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:d5:80:67:4e:5f:4f:8c:e6:09:62:57:51:
bb:13:05:19:b2:94:25:76:98:8b:f2:47:9c:0c:3f:
83:76:5d:f8:34:f4:11:ed:b3:71:08:2e:a1:09:62:
24:8c:fa:47:8b:71:7c:8d:f1:89:9d:1b:aa:e9:eb:
ad:af:5f:99:7e:77:a6:36:57:05:ef:15:c8:1f:5d:
bf:b3:9e:cf:8d:9e:35:07:c2:03:40:b0:a5:64:fc:
37:68:3a:0a:3b:04:18:76:88:71:bb:c0:d1:3c:d3:
4f:67:ea:7a:ec:8d:a2:13:05:d7:09:3d:fd:0f:f5:
21:b3:4c:98:4f:e0:f5:74:69:c2:5c:6c:f2:0c:b1:
97:b4:46:8c:ab:7d:1a:3a:f0:db:5e:66:54:50:4b:
ad:07:b1:50:71:21:f7:a3:31:dd:b1:de:3b:35:77:
78:c1:a5:77:e5:c8:15:21:82:be:7d:45:88:29:98:
3d:ab:35:4c:86:18:71:a7:a0:7e:af:5a:4a:d1:6b:
77:98:c1:e1:9a:88:d4:70:77:51:80:15:60:54:6b:
a9:20:de:0c:e4:e1:e5:e1:94:21:aa:7d:42:ba:3c:
1c:ad:ec:a6:4b:ac:53:c8:7d:b3:04:d1:54:d6:42:
0c:98:a7:06:47:8c:fa:fb:9f:2b:5c:d6:3b:32:22:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3F:53:AF:A6:A2:12:CD:7A:73:F8:56:36:F1:ED:54:95:7A:75:6B
X509v3 Authority Key Identifier:
keyid:13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9d:ec:a4:9f:ab:b5:fb:fb:6c:9d:7e:f8:50:be:9d:7c:0e:
7c:2e:22:db:e3:5b:57:5f:9a:31:e6:a0:8d:a8:11:76:1a:39:
89:77:b1:25:c9:76:d6:14:41:bf:06:de:db:db:1d:5c:98:a6:
a9:63:40:0e:8b:a8:e7:63:3e:89:c4:eb:56:2c:5e:0e:5b:fa:
71:7e:71:a3:5e:0f:f3:da:67:51:ee:e6:87:cc:c5:74:a8:c4:
08:af:66:aa:2f:70:f3:dd:58:ef:b4:e4:32:76:8b:e3:54:5d:
2b:f5:ee:df:42:20:82:22:d9:05:8c:82:d7:f9:00:5a:88:96:
3d:6a:7c:a3:db:e6:3b:e4:c8:44:da:44:38:2b:04:23:07:0a:
2f:5c:8f:d2:59:4b:05:2f:c0:e2:3a:26:50:11:46:ce:97:5d:
d1:4a:3b:8a:1f:1c:4e:7c:c5:67:a8:56:60:f3:7c:ba:f1:5f:
b5:f5:c3:bc:52:87:6b:8b:ad:25:71:91:77:ba:e5:32:e2:28:
11:31:17:8f:8c:4c:da:d6:fc:3b:93:0a:80:8c:da:c5:31:90:
b8:60:f8:80:43:22:64:25:ba:ec:67:fb:0d:6d:e2:4c:d4:e3:
a2:05:4e:cc:ad:68:0e:cc:5c:13:20:8c:2a:89:6b:93:ea:6c:
06:c4:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:54 2025 by rpki-client