Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier: UPdqVFT3l34zUVeoN3LSv9/+w59VHoaQ25UBVc6o5XE=
Subject key identifier: 44:AB:47:D2:4F:68:09:1C:52:43:C1:A2:85:70:5B:6E:B7:38:88:47
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial: 0195116BB0E3CD3BA80056FA0A085B86FBF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number: 0322
Signing time: Mon 17 Feb 2025 01:00:25 +0000
Manifest this update: Mon 17 Feb 2025 01:00:25 +0000
Manifest next update: Tue 18 Feb 2025 01:00:25 +0000
Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: uZVWwh7U8mAqcUg7os/+O96pGX2KhGp2fizddEbPVM0=)
2: 6pWip88KFCQlBaqpP5OAyYyKKL0.roa (hash: 2kxcH3Ha1RRmUiGnKMePTKTFBssB2qkinO67e/D6ssU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:b0:e3:cd:3b:a8:00:56:fa:0a:08:5b:86:fb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Validity
Not Before: Feb 17 01:00:25 2025 GMT
Not After : Feb 18 01:00:25 2025 GMT
Subject: CN=44ab47d24f68091c5243c1a285705b6eb7388847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:66:cb:69:5a:cb:59:0e:b1:02:e7:39:9a:
e3:b6:8f:f1:10:a4:8a:d0:f4:ae:81:70:af:b7:3f:
3c:d7:45:ad:5b:d2:8f:ed:86:c2:a2:c8:0a:7c:08:
d1:11:59:0b:13:64:f9:75:8e:f5:c5:6b:65:66:f2:
c2:c3:40:01:20:42:20:35:f9:01:23:34:6f:eb:e6:
b3:3a:62:2c:35:ce:81:09:49:6e:64:cb:d5:33:bd:
f4:e3:92:d2:3d:d4:1e:ff:0e:f6:45:46:cd:23:af:
3d:bf:a2:a9:a1:38:61:10:36:1f:cb:1c:ca:96:ae:
07:56:8e:b4:68:06:ef:fb:fb:e2:7b:22:75:d5:d6:
f1:17:bd:6d:6c:8f:38:a1:ff:c0:99:c3:a9:cc:b8:
14:b4:04:f0:a4:91:9d:b9:67:67:b4:e5:76:b3:54:
b9:af:c4:bc:75:0b:d1:c8:95:8f:fe:b8:09:40:37:
50:02:a7:9a:84:45:e8:12:40:be:7c:bb:cd:8e:a2:
b3:40:ff:9b:fb:d4:df:28:03:3f:9e:ab:86:57:23:
21:63:2c:95:28:6c:da:cb:f0:d6:08:23:b8:11:cd:
5e:2e:2e:cc:00:10:9b:60:38:4d:2c:91:a1:3d:72:
03:d4:e8:24:86:40:14:0c:82:de:4d:e9:22:01:13:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AB:47:D2:4F:68:09:1C:52:43:C1:A2:85:70:5B:6E:B7:38:88:47
X509v3 Authority Key Identifier:
keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0a:3b:23:c2:99:2f:a0:52:f3:a5:bb:28:ce:75:64:fc:c6:
0f:0d:f9:2b:93:46:04:31:3d:fc:8a:e6:50:2c:3b:22:4b:47:
9a:b2:c2:b2:4d:65:63:6a:9f:69:cd:93:af:59:2d:b0:e6:e5:
f2:d0:41:17:34:63:17:93:27:fc:a5:14:5d:a9:94:52:40:1d:
e6:c0:ac:57:0b:de:42:3a:44:d6:c3:28:ce:11:1a:15:09:33:
50:7b:96:68:44:d6:ad:d5:fa:be:f9:27:45:ca:06:4d:45:47:
12:a2:93:e1:9a:e5:93:52:10:77:7f:8d:20:c6:3f:57:09:47:
e9:d4:b1:a6:91:8d:26:63:8a:ea:67:0a:e5:cc:e1:d7:81:df:
2b:25:d8:26:c9:6b:e3:10:82:13:16:91:b9:c6:86:75:ff:18:
14:cd:4c:0d:c3:d3:6b:78:b7:b4:5e:c2:2c:1b:13:4f:07:6b:
81:26:99:16:86:40:6c:6e:97:8b:20:ea:9e:ec:bd:e9:40:78:
00:35:74:1b:c3:2e:4c:4f:ae:7d:e7:3f:50:60:d9:fa:d9:0e:
80:28:e1:97:d3:5a:e0:4e:dd:14:85:15:55:48:1f:30:b1:bf:
46:98:ab:cc:b0:25:c5:15:d4:db:50:10:ef:2b:d1:62:0a:d5:
59:0a:07:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:19 2025 by rpki-client