Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json)
Hash identifier: Yi/BWvJ3DM7bMOjRrCOcfGdTu+rkHMMLuXYONbN6FR8=
Subject key identifier: 21:37:8B:48:87:45:BA:55:45:3B:BF:C0:30:BA:B7:04:68:99:55:E2
Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Certificate serial: 0195116C0B56C533DDE7F904B843FAAC4E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 01:00:48 +0000
Manifest this update: Mon 17 Feb 2025 01:00:48 +0000
Manifest next update: Tue 18 Feb 2025 01:00:48 +0000
Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: I3GnyHQY6YSFitm+wT3ZptMWjGgK/7E+kh6hkxPwqFg=)
2: wHHMwXNW_N83G6X6FvCX0cxSHMc.roa (hash: EDHNa2I735GRLd+NXqVnh5LuTlV6xmWH1ELRRt1kANs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:0b:56:c5:33:dd:e7:f9:04:b8:43:fa:ac:4e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Validity
Not Before: Feb 17 01:00:48 2025 GMT
Not After : Feb 18 01:00:48 2025 GMT
Subject: CN=21378b488745ba55453bbfc030bab704689955e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:18:12:29:d8:a7:74:42:31:a1:f0:dc:28:ec:
53:a6:b8:ab:61:4e:af:fd:0e:a4:04:37:f9:85:a6:
5e:c0:e2:8a:eb:c4:6e:34:f5:47:a1:6a:45:25:78:
fd:ad:a3:f2:17:da:85:c5:b3:a3:5b:9d:ae:50:5d:
26:f8:36:6c:a2:d0:f0:22:97:f5:00:ad:53:f7:79:
be:66:8f:17:3f:7a:88:95:50:5b:fb:1c:f1:36:7b:
6e:b6:5b:75:e7:63:5a:c4:e3:aa:18:8f:7c:5d:0a:
bc:ad:a1:bd:47:c4:c5:8d:10:a6:d8:df:82:96:09:
63:18:7f:34:78:70:a3:13:08:bd:a4:10:65:f3:d9:
3b:a8:44:2c:a4:54:19:e2:c4:34:03:30:cc:2f:43:
72:d6:2c:dd:a1:33:bb:c5:b7:35:f4:db:82:c2:12:
79:b8:53:be:17:b0:76:b9:56:ee:81:c1:8a:a3:b9:
a9:0b:1e:5a:f4:fe:86:03:98:98:8d:77:1c:0b:9e:
eb:04:fb:b2:63:0b:af:47:1d:3f:80:66:b6:32:ac:
bb:32:c0:a1:b5:de:75:c2:f9:fd:15:eb:9b:5e:c7:
e3:e8:e9:2f:97:5d:fb:f9:2b:97:f1:c8:d8:3f:61:
d4:77:11:aa:13:37:54:ab:37:25:45:57:83:9d:a2:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:37:8B:48:87:45:BA:55:45:3B:BF:C0:30:BA:B7:04:68:99:55:E2
X509v3 Authority Key Identifier:
keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8d:b6:be:00:7c:50:b1:b2:35:69:5b:be:3a:af:cd:e1:ed:
4a:81:64:c7:06:99:91:56:61:31:01:9e:da:34:fe:60:ac:7f:
ac:84:c6:49:ee:ab:76:62:0d:99:4f:c8:32:db:7c:4e:8f:8a:
23:2d:c2:f4:cf:24:05:86:5b:44:43:17:81:79:7b:00:29:6a:
eb:c1:d9:90:03:30:ce:90:84:d1:a3:83:a4:d0:b6:07:36:e2:
68:9b:86:19:35:bc:56:11:17:a8:91:02:0a:19:a9:ac:a0:6a:
86:3a:b8:7d:10:64:47:fb:6f:8b:1d:4c:b4:56:ba:3d:1c:de:
ab:0e:6f:90:f8:e4:ea:12:02:5f:1b:3b:16:3d:85:d3:cc:65:
75:d3:e7:00:cc:6f:95:7c:0b:3a:2e:c1:ac:e9:37:88:1c:a0:
c4:b5:47:e8:92:9e:6a:ed:4f:22:10:1d:92:13:59:00:33:33:
ec:2b:9e:12:ca:2a:e5:cb:55:72:7d:6c:b1:29:22:b9:d6:0d:
03:e8:46:00:e3:71:38:a5:08:74:f2:72:8d:c2:f4:30:5d:48:
86:9f:88:63:91:de:f2:8b:bd:6b:fc:df:38:6e:99:b3:f2:ef:
af:22:5e:d8:20:75:53:1e:07:f2:57:8c:ba:dc:36:e6:d0:89:
06:f5:23:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:06 2025 by rpki-client