Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
File: eYvLVDKkXyWwQQOWerQDwp0NQwo.mft (raw, json)
Hash identifier: sidi6wxcXgrWxwN6NOpUWRV/98W8UitIuUOY4FfCJBw=
Subject key identifier: 6A:B6:D2:7C:A0:BA:09:82:C1:8F:D3:09:25:DA:C8:7B:4D:F8:97:49
Authority key identifier: 79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
Certificate issuer: /CN=798bcb5432a45f25b04103967ab403c29d0d430a
Certificate serial: 0194C4635FB44A08015AFB9D9CD9702F5ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
Manifest number: 0B1B
Signing time: Sun 02 Feb 2025 02:00:34 +0000
Manifest this update: Sun 02 Feb 2025 02:00:34 +0000
Manifest next update: Mon 03 Feb 2025 02:00:34 +0000
Files and hashes: 1: ZroDUdT1fuQ3WJuqAnfF9aNVGrI.roa (hash: Mh4/Y9uJkP+Ip56RhAVyLWpJhLDGtNZ4uot6+n77F9U=)
2: eYvLVDKkXyWwQQOWerQDwp0NQwo.crl (hash: oeBfuDxYrIHmALvv73EPaVbXlqDnwV27vBc7rgSaBfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:5f:b4:4a:08:01:5a:fb:9d:9c:d9:70:2f:5a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798bcb5432a45f25b04103967ab403c29d0d430a
Validity
Not Before: Feb 2 02:00:34 2025 GMT
Not After : Feb 3 02:00:34 2025 GMT
Subject: CN=6ab6d27ca0ba0982c18fd30925dac87b4df89749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:e0:a7:1e:04:ee:29:90:ea:a9:ce:61:d4:
a5:c3:c5:c1:fe:a6:23:9b:27:d7:59:79:b3:ac:56:
a2:51:26:60:ec:94:8c:1d:ac:c0:3c:2f:1a:f7:2d:
15:f6:9f:ca:ca:89:64:0e:6f:09:43:cc:d6:44:9a:
26:54:af:8c:2a:91:7e:7f:91:d0:3d:a5:30:c0:cb:
07:63:bc:fd:78:7a:d8:5c:d5:d4:ba:f6:0d:45:76:
4d:c4:44:82:e3:44:b1:d4:b7:56:91:7c:97:42:58:
92:0e:a5:10:52:35:e9:b0:da:d9:98:75:7c:69:1c:
5b:1e:07:86:b7:95:81:74:47:7f:1b:17:ee:ee:1b:
12:54:71:d9:f4:08:54:20:04:73:19:43:18:32:94:
6d:43:d7:4c:89:9e:ac:da:ca:a8:1b:2f:5e:66:95:
83:6c:95:bb:c9:c2:38:f8:21:c9:32:20:2d:ad:77:
71:09:29:4d:65:92:1d:e6:3f:bb:5f:1f:fe:a3:3b:
12:d7:2f:c8:87:6b:e0:4f:90:fd:74:2d:af:4a:0e:
cc:60:1b:9e:d4:62:9b:32:05:80:61:20:98:d1:15:
f1:2c:01:c5:3f:a4:cc:94:e9:87:8b:ff:66:cc:f4:
3b:d5:98:f1:60:3d:6f:de:e0:ba:40:14:d2:e6:a2:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B6:D2:7C:A0:BA:09:82:C1:8F:D3:09:25:DA:C8:7B:4D:F8:97:49
X509v3 Authority Key Identifier:
keyid:79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9e:76:f0:06:84:3c:8b:61:86:d9:b5:5e:b7:dc:a9:73:6b:
50:37:9f:3d:bc:14:60:c9:4c:8e:61:0f:b5:c4:67:58:ca:c0:
9a:39:99:0a:06:cd:f4:d6:7e:28:b6:45:b2:62:38:67:36:7f:
b9:76:79:5e:c0:65:8e:92:b4:80:07:a7:ea:5e:15:d6:be:de:
f3:f0:09:d1:51:65:cc:c7:0f:fd:a0:4e:15:c7:91:b6:4b:e9:
ab:43:8d:22:53:75:e7:75:e6:13:b1:3a:fb:fb:ee:3a:d9:69:
99:c3:73:ba:49:3f:69:3f:42:ce:9b:c5:8b:75:f3:8d:db:a8:
33:b6:f5:7b:df:17:88:e4:98:0d:6d:b3:48:a9:27:17:26:4c:
79:6d:ac:9a:8e:9e:4b:8e:90:51:5f:a3:51:e2:60:bf:ac:61:
2e:9e:6c:e4:d0:dc:88:10:b3:4b:89:32:c2:e7:0a:bc:96:f9:
9c:13:d2:6c:d0:b7:cf:f7:80:e5:eb:e8:3b:97:9a:2a:63:15:
16:8e:06:9b:39:d0:42:cb:97:b7:de:f3:78:0a:eb:a4:0b:09:
be:2e:de:a2:6a:93:0e:de:07:68:85:87:a1:a0:2d:6c:9a:38:
bb:13:bf:a0:62:b9:9d:3f:c7:9e:8e:0c:36:76:41:63:68:3a:
2a:d7:90:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:26 2025 by rpki-client