Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
File: EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json)
Hash identifier: Ox+oNWYeVeZOv2jHRxuSDIkbeQzK8HK5BCt4EhTZ8QM=
Subject key identifier: 01:42:28:F3:4D:2C:F1:77:1E:6D:0D:8C:A5:22:76:29:82:67:C7:AF
Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
Certificate issuer: /CN=10768d39f932791007a097209b0983fe85560cb8
Certificate serial: 01951134E1A7B6B98C14788475FB0AF5B6AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 00:00:33 +0000
Manifest this update: Mon 17 Feb 2025 00:00:33 +0000
Manifest next update: Tue 18 Feb 2025 00:00:33 +0000
Files and hashes: 1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: nySnNCq78BoP73TPrfMaeTTpPBgze8BEnsqpyt0Rb5k=)
2: Nvbyv1PpytUaMC6H5xpJ11kc-dg.roa (hash: SbERHfQI9Tu/9a/EQjXNeCBB9RcFRF7Qffhnwr+U0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:e1:a7:b6:b9:8c:14:78:84:75:fb:0a:f5:b6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10768d39f932791007a097209b0983fe85560cb8
Validity
Not Before: Feb 17 00:00:33 2025 GMT
Not After : Feb 18 00:00:33 2025 GMT
Subject: CN=014228f34d2cf1771e6d0d8ca52276298267c7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:97:a6:97:bb:f5:9a:23:6c:a7:35:fd:f1:9b:
53:49:09:0e:f0:b9:60:6b:9b:11:7c:5b:e1:63:37:
e5:5e:ef:fa:34:95:60:24:c1:ec:8a:dd:5d:87:d9:
58:3e:11:30:45:95:05:6c:d2:c4:dc:73:06:3c:d4:
f3:55:1a:17:88:33:d4:36:c5:64:1c:45:cc:34:e7:
95:a3:53:9a:52:74:77:97:69:93:0c:e4:f6:47:d7:
92:ea:16:19:61:25:55:94:86:79:b1:5d:76:de:91:
f2:ca:4c:ac:65:d6:ea:b8:aa:a3:1a:33:08:b8:e5:
d5:ce:7f:0b:10:ee:bf:e9:78:1d:c5:fc:a0:4a:2b:
9a:d4:ea:cd:f4:96:65:9d:37:4b:de:24:34:5f:fb:
da:ba:6b:fd:a2:9b:97:37:7d:aa:ec:dc:4c:b3:e7:
54:6f:a0:9c:ca:23:27:59:bf:dd:57:f0:93:01:17:
7a:82:4e:5a:95:ca:0f:73:e5:8b:b2:44:e3:1a:4a:
f6:ff:0b:0b:2f:5b:ea:e3:e9:13:2b:29:ee:a9:12:
36:71:6b:15:85:aa:96:8a:2e:cd:51:87:c0:02:f6:
1f:7f:b9:1f:34:af:be:76:81:d4:11:4d:d6:f5:ac:
22:d7:f9:d5:79:9a:a6:2b:66:26:5b:d3:39:41:9b:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:42:28:F3:4D:2C:F1:77:1E:6D:0D:8C:A5:22:76:29:82:67:C7:AF
X509v3 Authority Key Identifier:
keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7b:93:dd:49:38:cf:b6:65:98:b8:c8:a3:da:28:a1:a1:83:
0b:8f:40:be:3d:d7:89:f4:3c:d2:c0:59:92:c3:8c:56:52:1f:
fd:d6:9a:c4:12:7b:a3:5d:66:f8:87:e1:95:26:33:bc:c6:c3:
4e:f0:05:3a:b7:a1:2d:11:22:e0:60:7f:46:93:4c:18:7e:27:
cf:7f:07:df:0c:c7:b1:46:f0:92:84:fa:4f:18:81:d3:9f:24:
0b:3f:c0:73:0d:ab:ad:17:3f:ba:15:e2:4b:bf:74:b4:01:e5:
16:95:2a:bc:3f:04:c6:4b:72:8b:4d:39:08:cc:10:8d:94:9d:
79:76:c4:83:e4:c0:c7:bb:4f:82:3a:e8:89:c4:5d:4b:dd:4a:
2b:22:41:bd:7e:b8:c2:19:a0:e4:48:21:a1:1b:2e:8a:a1:3c:
d2:d2:f3:80:96:8e:a4:3f:03:cc:5f:ce:b4:b8:24:6f:2a:e7:
09:8e:25:e8:21:cf:b7:ac:5b:0b:79:eb:b5:3f:3e:8a:8a:95:
f2:cd:74:cb:4a:b4:db:1c:e9:29:71:11:42:4b:06:20:df:3c:
44:34:4f:b4:0e:dc:2c:ed:13:54:d6:5f:43:95:d0:b0:fe:ff:
f7:8b:b1:ae:c4:ee:8b:cc:18:3f:b7:22:2c:b3:71:c0:6f:22:
9b:60:e3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:01 2025 by rpki-client