Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: g9qh+6Y58L743nJa2+/EqXAch66BMPjJvs8DLm5wNnA=
Subject key identifier: 21:98:62:FF:61:6A:12:2F:D7:B4:DC:D9:94:16:98:82:D3:49:F5:57
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 0195124762A937342D1290C69B586D978280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 05:00:22 +0000
Manifest this update: Mon 17 Feb 2025 05:00:22 +0000
Manifest next update: Tue 18 Feb 2025 05:00:22 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: yDY11ZdYH0G+f6zsDSVQ/DJc6ho36Km0J7U7yRIBYh4=)
2: Z7WQLysLOr9KTXHt3eRvtbiWeZo.roa (hash: fdaTiSBPfJFKIhyYKXlfKo3BVE4saxPRnib+dEXPrFo=)
3: ZOrfGuxYr-AGVishKANZfi1iYXI.roa (hash: LaLqBnWYlU5gFFvKLSeOrADM1iF3GbcpOkH2fyWF5fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:62:a9:37:34:2d:12:90:c6:9b:58:6d:97:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Feb 17 05:00:22 2025 GMT
Not After : Feb 18 05:00:22 2025 GMT
Subject: CN=219862ff616a122fd7b4dcd994169882d349f557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9a:21:13:c9:f1:19:d7:96:60:9a:e8:70:7c:
71:2a:3b:a9:e8:1a:28:69:a2:8b:2f:3b:d6:76:62:
1f:0f:37:01:d1:aa:e5:3c:b4:9e:2c:bc:35:20:71:
c8:e3:32:45:34:a6:6c:34:5c:b8:54:37:da:4e:19:
98:ef:37:63:26:a1:b7:a4:c7:5f:d8:9f:af:3d:11:
a9:9a:94:ba:5f:a1:e5:26:fc:c5:9f:06:4a:ba:ce:
68:8e:07:dc:ef:cc:6a:5c:24:10:eb:ea:30:9e:a4:
ce:da:2b:1c:14:00:a7:a3:21:15:f6:5b:af:77:9a:
3a:1e:52:8f:71:5d:23:1e:74:6f:e4:ac:65:d6:cb:
c5:6e:44:ee:93:32:69:66:bc:8b:d2:fc:4b:44:52:
13:45:37:ff:73:09:8a:af:40:fb:4a:d8:fe:6b:ef:
81:23:00:01:47:3d:42:15:14:7b:d9:25:ac:d5:0b:
f6:a7:b2:d5:3c:fe:aa:41:27:35:13:28:03:a8:8e:
a1:62:32:00:5f:75:9b:98:d5:aa:8c:0a:04:4a:98:
b3:ed:10:f4:db:68:bb:b1:5f:ab:f2:c2:91:9a:1c:
1b:c4:36:81:36:48:b1:1f:46:bd:2f:62:e7:7a:db:
96:51:25:cd:5e:16:b4:1f:45:64:68:5a:82:9d:b3:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:98:62:FF:61:6A:12:2F:D7:B4:DC:D9:94:16:98:82:D3:49:F5:57
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ab:36:23:a4:92:85:3e:fe:5d:24:8d:c5:bb:98:79:ea:3d:
9a:e7:02:9e:e2:b3:51:7c:12:21:41:63:8f:5b:f5:78:35:02:
28:2c:ef:a3:68:49:f1:4f:5a:21:df:1f:79:cb:bd:5b:a6:76:
a5:53:f1:92:6d:0b:4a:fc:9e:35:33:0f:fa:47:1b:e1:c8:94:
32:39:c4:53:11:ae:a8:76:d9:8d:73:ab:a5:c1:84:36:33:79:
22:52:ef:6f:c4:c6:2c:27:fc:2c:f7:b7:6a:25:5b:d3:11:f3:
8d:2d:eb:16:9c:60:b1:f3:2e:6b:81:80:20:8d:ca:55:6e:24:
9d:c6:ad:1a:c9:6b:ef:b1:c8:8d:4d:d6:0d:aa:2d:65:c5:b1:
3c:f1:9b:d9:c1:85:14:34:3e:ec:65:fd:3a:ad:ec:a4:50:f8:
fa:38:92:1c:2f:4f:ba:dd:35:46:2d:5b:79:b9:63:a4:95:eb:
57:2c:d6:fa:e9:6d:c4:ca:c7:69:04:2d:f8:f6:b3:ce:c7:8a:
59:16:33:47:54:b8:0e:14:3d:c9:a9:7a:16:f4:fc:ee:93:92:
d4:bb:7f:03:8b:ea:3d:2f:6f:a3:18:e8:bb:ba:f2:a2:44:8e:
cf:4b:ef:c3:47:dd:7f:fc:96:e2:0f:da:76:c3:50:34:5f:fe:
b3:2b:f0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:09 2025 by rpki-client