Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
File: sx0cKJHYgEaaINi38Y5M2GVDAEY.mft (raw, json)
Hash identifier: eoIJJEGR11xho9bxrb8oZ8Jr8JPTbFxLB8QUB75CQO8=
Subject key identifier: E9:C4:F7:45:30:2E:90:52:AD:51:31:E2:68:D0:55:F9:32:BB:09:A0
Authority key identifier: B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
Certificate issuer: /CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Certificate serial: 019512107386BA5A0EEDBAEE9EBDF65A7902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
Manifest number: 0138
Signing time: Mon 17 Feb 2025 04:00:22 +0000
Manifest this update: Mon 17 Feb 2025 04:00:22 +0000
Manifest next update: Tue 18 Feb 2025 04:00:22 +0000
Files and hashes: 1: mkz2sqIo7LXNjnS7wh3q-FAUJko.roa (hash: CHmhn4olW0CAfezBvJ693PC9WSLMz9AYfb/jLSekT2U=)
2: sx0cKJHYgEaaINi38Y5M2GVDAEY.crl (hash: IBVKE4ypL438trGl+svIq32JZkormUtXeH2umTSwrUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:73:86:ba:5a:0e:ed:ba:ee:9e:bd:f6:5a:79:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Validity
Not Before: Feb 17 04:00:22 2025 GMT
Not After : Feb 18 04:00:22 2025 GMT
Subject: CN=e9c4f745302e9052ad5131e268d055f932bb09a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:b0:f4:f1:b8:2b:59:d8:60:7f:65:72:26:
26:1f:52:4c:62:63:83:4f:88:db:a6:a3:2d:3c:33:
fd:28:20:43:d5:e3:99:f1:68:c9:08:be:11:7c:6e:
18:93:88:12:44:f7:c5:8d:5f:e6:4b:07:4b:91:e2:
ea:b1:60:ae:4b:37:fa:db:ff:de:4b:7a:39:04:70:
8a:0f:a1:e5:7b:18:4e:13:45:d0:4d:e5:fa:22:a1:
6c:1b:16:3c:fd:ed:a5:ba:55:06:d4:2b:32:13:07:
0d:ec:8f:54:b8:f6:19:7e:5b:bb:5b:d0:ca:5a:d0:
f6:5c:5e:8b:61:f3:5e:de:59:6d:4e:cf:a3:8d:aa:
35:6d:20:53:d3:38:c4:17:56:3b:69:32:ae:d5:ea:
31:b1:4a:85:9a:49:54:5f:bd:b4:b9:8c:78:66:46:
4b:23:b7:43:68:05:dd:05:7f:57:a7:d3:16:af:80:
16:cc:cf:f9:bd:f7:ee:52:01:26:42:11:b4:0a:15:
f8:4e:da:bd:75:63:a8:09:c3:53:76:d7:71:f9:99:
e7:ed:80:c1:18:b4:c3:fe:1f:be:b4:2e:bd:26:2c:
53:a9:ff:3a:b9:c4:9a:cc:f2:b5:0a:c4:da:35:a2:
93:0f:4e:31:27:6e:3e:c2:33:91:1e:f7:2c:35:88:
62:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C4:F7:45:30:2E:90:52:AD:51:31:E2:68:D0:55:F9:32:BB:09:A0
X509v3 Authority Key Identifier:
keyid:B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:62:a5:eb:8e:4f:f9:61:d2:e1:f7:25:47:2d:a4:7f:7f:60:
e7:a8:da:ae:87:99:01:2a:bb:74:70:4f:bb:3e:ff:4e:8a:67:
1e:1c:3d:83:2a:b1:e6:ac:f0:90:2c:fb:26:06:16:8e:ce:c9:
d9:7e:96:a7:37:7c:2b:58:2f:6e:34:a5:53:f8:54:67:70:92:
09:fe:8f:ce:1d:a2:20:f9:6c:71:b5:c5:65:9a:a1:96:9f:7c:
ca:5f:0b:61:e5:79:94:ab:fe:0d:22:7c:cf:76:83:97:95:c9:
8a:e9:7b:e4:f3:54:16:e9:9c:c1:27:6d:17:d3:e4:42:9a:f8:
25:e6:cc:d8:23:fd:0a:8f:b9:f7:8e:17:e8:bc:bc:4e:af:77:
f5:da:ad:dd:46:f5:e7:f2:83:3b:3a:8e:18:70:31:ac:15:ab:
bc:26:1d:e1:10:8a:b2:65:5f:37:16:a6:18:10:84:b7:e1:5e:
3c:f4:f8:71:b2:5c:b1:82:4b:4f:7a:7c:c1:0e:79:81:8f:4d:
56:11:c0:17:e6:5c:d5:36:4f:83:6d:19:7f:fa:e3:ea:a5:fd:
8d:d3:ba:d7:a1:4b:53:bd:63:90:a7:6e:cd:b4:f1:11:f3:be:
07:d7:23:86:b1:ee:53:10:41:59:71:95:37:43:69:fd:f3:ff:
aa:a2:0d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:39 2025 by rpki-client