Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier: PErcA1GqLGGCh9CQpQFV50lebErwhPOKPq6NgoaJrV0=
Subject key identifier: 31:E7:F9:FF:90:19:0E:30:57:22:F7:A5:EF:9D:E7:1E:B0:94:EE:B4
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 0194C42C925C9D021E1FE28DCEEB0E810409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number: 1432
Signing time: Sun 02 Feb 2025 01:00:42 +0000
Manifest this update: Sun 02 Feb 2025 01:00:42 +0000
Manifest next update: Mon 03 Feb 2025 01:00:42 +0000
Files and hashes: 1: A2mB37rJmerIuB24l4Bs4lzgXqo.roa (hash: ndaVFcXFO0lVM0GIop/3BjpE63WSZdctz0XY3LjKsVI=)
2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: K67xCdg5ZnKQViDeTey4EU2P1ZijK94Jk5zxft3xZIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:92:5c:9d:02:1e:1f:e2:8d:ce:eb:0e:81:04:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Feb 2 01:00:42 2025 GMT
Not After : Feb 3 01:00:42 2025 GMT
Subject: CN=31e7f9ff90190e305722f7a5ef9de71eb094eeb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:98:8a:c3:5b:98:0e:41:ca:9c:27:1e:2e:
15:a6:52:0d:11:f9:b4:7a:3c:47:d4:fe:45:b9:20:
ec:c1:a9:29:1d:8f:71:ae:f1:d0:f5:46:f4:f4:02:
af:1b:8f:d7:17:f0:cf:c7:51:cb:32:eb:1c:6e:eb:
08:91:80:19:3c:6d:32:39:39:8a:f7:b6:51:37:2a:
92:a7:26:af:ed:11:43:66:ee:9b:6f:af:5e:88:5c:
33:8e:76:e6:7a:db:4f:24:81:1e:d3:f8:32:c7:72:
1d:92:22:c1:f0:eb:25:97:ea:7a:9b:d3:3c:26:21:
ad:fb:c2:7e:c6:e4:f1:91:97:9a:09:ce:61:7c:fe:
72:e0:59:0f:5d:bc:39:24:27:f8:68:73:a7:1b:06:
6d:a8:9d:52:8e:75:48:b1:05:0e:f3:71:8c:3b:bc:
ef:2b:00:34:49:6a:fc:07:e7:1f:eb:d6:44:b9:7d:
13:02:8f:52:0c:dd:db:7e:e7:68:a2:b7:af:e8:2a:
58:81:4d:5d:98:48:3e:06:04:80:a2:c2:d4:bf:f2:
fc:1d:27:3d:42:43:56:be:41:fc:c5:23:f9:8f:31:
b0:75:46:6c:e6:66:a7:6d:65:bd:50:75:bc:5a:e3:
eb:da:4c:2b:77:2c:e4:94:9e:5f:0b:10:18:41:24:
a1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E7:F9:FF:90:19:0E:30:57:22:F7:A5:EF:9D:E7:1E:B0:94:EE:B4
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:32:be:ae:ef:fb:f1:59:0c:f2:a1:a6:b3:eb:80:34:7f:c0:
89:a3:5e:57:82:9f:07:f4:0b:02:67:69:6e:4f:33:fb:59:76:
fe:1a:87:a0:ce:5e:12:22:58:2a:28:00:52:c3:3d:a3:a2:91:
b4:81:01:b7:e1:06:9e:63:65:92:5a:43:31:f6:4e:eb:99:60:
4c:e5:19:0d:46:4e:ce:44:e7:44:ad:b4:e8:3d:0b:44:5b:81:
8e:9b:3b:2a:f3:24:f6:6c:b4:89:6f:4d:8c:9a:f9:cb:78:3e:
d7:e8:5b:64:b6:b2:74:51:33:7b:e6:37:86:bd:64:dc:0e:9d:
85:5c:d9:a9:e7:fc:3f:e1:34:f9:35:a2:d5:a6:4d:1b:6d:e7:
61:f3:06:e5:e8:b8:8c:01:70:12:fe:e1:20:d8:3d:5c:ee:e1:
9c:40:e5:e2:3f:58:fa:66:42:4c:e0:26:1b:8e:c1:fd:45:fc:
2d:46:e1:bf:76:52:7b:69:58:99:45:b9:62:b6:00:df:28:67:
02:b0:16:20:d4:d1:96:61:79:31:68:86:12:b4:6e:9c:b9:00:
b2:52:d1:dd:02:58:46:5d:9a:9e:b1:00:49:9f:41:5d:56:37:
0a:8f:01:3c:cd:55:e6:39:f7:d5:db:c8:e7:f0:2c:18:6a:7d:
25:da:34:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:21 2025 by rpki-client