Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
File: eYuFtR4z3wxpTb13vIwro-q01Rk.mft (raw, json)
Hash identifier: 5HveS1bbsb36+/5AtHozGq8zAp1YKBpxpNriS/7ZmRI=
Subject key identifier: 51:D3:17:ED:C4:B7:57:CD:75:79:A7:73:79:3F:5F:22:B6:2E:F5:5B
Authority key identifier: 79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
Certificate issuer: /CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Certificate serial: 0194C499FD0F7595993D766518FC5DA924A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
Manifest number: 142B
Signing time: Sun 02 Feb 2025 03:00:13 +0000
Manifest this update: Sun 02 Feb 2025 03:00:13 +0000
Manifest next update: Mon 03 Feb 2025 03:00:13 +0000
Files and hashes: 1: eYuFtR4z3wxpTb13vIwro-q01Rk.crl (hash: 9VzONKILDVYTe7EFjn+Bo70jUCyH2d9rH1It131KcsI=)
2: rO3rBHeUdzO45KEgLURgvLQ06xY.roa (hash: eqYadC0MWylIdYu574Ax0sVtpnO5xgmNX3OGp/S+dbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:99:fd:0f:75:95:99:3d:76:65:18:fc:5d:a9:24:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Validity
Not Before: Feb 2 03:00:13 2025 GMT
Not After : Feb 3 03:00:13 2025 GMT
Subject: CN=51d317edc4b757cd7579a773793f5f22b62ef55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:ff:50:1c:ed:69:f3:ad:ec:57:29:2c:21:
dc:45:7e:df:d4:ab:1e:17:a4:16:c7:8b:38:72:c1:
bf:db:df:a7:42:43:a4:fc:cf:c6:4a:85:4e:20:7b:
06:c5:ab:af:15:43:36:de:82:25:f7:dd:db:77:6e:
07:d8:62:06:91:41:85:9a:97:fb:a3:cf:1c:3c:9a:
c7:a6:ce:42:3b:f1:44:1f:92:ea:73:3c:f3:8c:d5:
09:2e:38:c3:96:32:54:5c:27:31:5e:09:16:2a:31:
d3:98:ff:37:7b:5d:c2:55:10:f2:4e:a9:bd:28:f5:
0b:2b:9f:b1:4d:ce:d7:5e:87:f2:cf:e9:f2:60:df:
60:7c:2c:a5:45:78:94:0b:8e:4b:fd:26:52:2f:e3:
50:91:df:66:3e:8c:d3:9e:4f:9f:6a:f1:8a:3b:98:
02:49:44:25:6e:9c:b1:1b:fc:8b:be:d5:f7:8c:05:
37:7b:66:a8:38:94:64:f8:7c:57:df:de:c0:5f:f5:
be:6b:77:ea:4b:be:09:2b:65:53:e8:84:81:ac:dd:
0a:fe:e5:c0:80:96:9b:0a:57:66:9c:23:ff:33:0b:
ef:de:55:7f:05:f3:69:ad:39:6b:61:5e:78:cf:ac:
1e:f3:8c:d6:1a:e3:e6:28:33:b8:78:3a:de:08:16:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D3:17:ED:C4:B7:57:CD:75:79:A7:73:79:3F:5F:22:B6:2E:F5:5B
X509v3 Authority Key Identifier:
keyid:79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:33:ec:f8:48:0a:a5:3f:f8:f3:02:0c:13:27:8f:e2:4a:c3:
1f:4f:a5:40:d3:d8:32:9d:a9:09:17:65:0a:a3:1c:40:58:33:
af:1a:41:47:a2:49:cb:38:b1:1d:05:0f:59:86:7b:23:94:97:
17:cb:9e:ba:09:ac:55:f6:52:4b:84:b0:82:ea:54:ba:a0:7b:
cf:f3:63:4f:e4:dd:ef:18:21:95:93:d8:e7:bb:3a:3e:35:db:
eb:35:be:74:8b:f1:d7:a6:e5:1a:1e:17:1c:7c:00:38:42:a0:
77:e7:07:74:09:b3:6a:21:c2:2b:9d:f8:cb:55:4d:17:cf:7d:
f4:a8:33:9f:47:1d:76:64:da:de:79:85:8b:a2:c9:7e:e0:22:
50:ef:e3:f7:4d:2a:49:d7:54:57:2b:90:cd:2e:bc:9a:6a:5c:
e9:14:fb:9b:9c:32:d9:52:71:96:b9:96:2b:7a:33:f2:8d:88:
5d:c7:8a:16:91:43:26:d7:8e:1a:cb:89:ed:cf:b1:64:c5:75:
ac:00:18:1b:5d:76:27:7f:72:94:c4:7b:94:c3:30:c9:b7:e8:
8f:e0:75:3c:62:8d:c9:9e:54:84:c4:a7:20:bb:81:07:08:87:
7f:84:11:cd:57:3b:8f:ad:cc:e9:18:27:0a:0d:13:8f:55:7b:
33:70:21:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:56 2025 by rpki-client