Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json)
Hash identifier: SmZi+jrMnDUcft4siJ38WFEbmHaAHMcxJZT44ZN6G4M=
Subject key identifier: 9B:48:EB:73:81:3A:EE:7C:0F:92:93:39:51:E5:B9:42:64:90:5E:49
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial: 0195124746F6594642826D7CF75F3979CC49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
Manifest number: 06E5
Signing time: Mon 17 Feb 2025 05:00:15 +0000
Manifest this update: Mon 17 Feb 2025 05:00:15 +0000
Manifest next update: Tue 18 Feb 2025 05:00:15 +0000
Files and hashes: 1: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: EDUK1mmlG/JEs56WRX14SbRAEOP+SE8jMinvvMXKXyc=)
2: ejnyKRBFEQteemyTpx_XwL9WEoE.roa (hash: L7f+NgrhnFRrMcq6mzZZsAksYKVqOvHcdasuAWPBdro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:46:f6:59:46:42:82:6d:7c:f7:5f:39:79:cc:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Validity
Not Before: Feb 17 05:00:15 2025 GMT
Not After : Feb 18 05:00:15 2025 GMT
Subject: CN=9b48eb73813aee7c0f92933951e5b94264905e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:9b:88:b4:b8:28:df:37:bb:40:8a:db:ef:
c0:43:68:f2:6a:4e:0b:88:be:26:56:06:ac:09:f3:
dc:77:0c:c5:bc:dc:14:81:22:b2:04:6f:ab:eb:72:
1a:ff:91:b2:c0:cf:99:e4:6e:5a:52:de:6b:06:b8:
58:c7:de:4d:09:5f:19:2d:b4:68:22:0c:53:b8:ee:
95:4d:6c:ae:52:2b:34:d0:48:04:86:11:a5:f3:e6:
50:9f:f6:af:68:0d:16:c3:73:91:26:f5:c7:59:24:
cc:fa:8d:62:08:3d:fe:5f:30:96:f6:7d:1c:ba:bc:
1b:23:48:41:6a:d6:ee:36:81:a3:cb:86:2d:61:c5:
9d:23:05:59:44:36:42:9d:e7:eb:34:63:e4:b7:d3:
dc:c2:e8:cd:5f:b4:2a:09:0f:01:e1:62:e0:94:33:
00:b6:20:5f:ad:7f:7c:15:92:a2:84:df:5e:ff:09:
60:e8:25:57:1e:f1:51:1a:35:69:ec:ee:69:99:ce:
95:c4:92:bc:b5:ba:5c:30:57:f8:98:61:e5:9f:ff:
ba:ab:6f:67:c3:70:83:a2:57:00:a3:dc:a4:7e:ff:
63:83:40:8e:25:b2:04:7d:b0:37:8c:08:44:bf:a6:
a5:44:d1:b7:de:4a:97:f1:c7:cb:fe:3c:2d:87:8d:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:48:EB:73:81:3A:EE:7C:0F:92:93:39:51:E5:B9:42:64:90:5E:49
X509v3 Authority Key Identifier:
keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4f:1e:32:2d:bc:39:2d:e5:e9:82:70:76:f1:0f:87:27:c8:
27:9f:b8:59:2a:b3:fc:ca:20:96:40:cd:c6:eb:f6:e4:17:fb:
ef:0d:3b:a7:2f:d5:68:d7:da:74:ee:a7:0a:6f:35:7e:ed:f0:
53:5a:cc:be:c2:d5:db:e5:22:84:4d:f7:86:7b:1c:e2:1a:02:
ce:24:ec:13:97:10:a4:a4:b3:e4:e1:03:e9:e2:06:32:67:9a:
79:07:3f:d1:2c:02:ac:d5:47:80:27:25:7b:23:89:53:87:8d:
93:cb:87:dc:9e:93:7a:54:0a:aa:48:3c:e2:a7:64:be:84:62:
7b:32:5f:d9:fa:d5:c2:d2:47:18:c4:6a:94:eb:87:c1:82:18:
53:45:2e:73:3b:7a:7f:4a:ca:57:36:0b:f8:cb:1e:2e:e2:50:
20:fd:be:82:6c:6d:98:03:4e:5e:af:d6:c9:56:98:3c:ae:cf:
d3:52:a4:8f:a5:5f:5f:bc:e1:b0:6d:13:58:e0:5b:d1:b6:99:
c9:7c:13:bb:42:cc:ce:55:b5:ea:34:b8:43:ff:37:a3:ee:a2:
8b:ac:e9:b0:d8:14:f7:60:9c:83:c1:87:db:8b:08:71:67:74:
de:88:a8:83:52:ea:b7:e1:08:9a:40:3e:89:5c:29:53:fa:27:
a6:c2:7d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:45 2025 by rpki-client