Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
File: eWnEvYdneAvsFhoq1hKic128q_0.mft (raw, json)
Hash identifier: JQLXK9+j+T9uV0GKdAv+6aySSRXPR2Jp1Ox024KipB4=
Subject key identifier: 8C:D6:97:E4:04:57:8F:6D:20:0C:E1:42:B8:6A:26:DE:FF:44:5A:5F
Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Certificate issuer: /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Certificate serial: 0195108FC46CC1B7242FD871D6200E5196DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
Manifest number: 0F31
Signing time: Sun 16 Feb 2025 21:00:12 +0000
Manifest this update: Sun 16 Feb 2025 21:00:12 +0000
Manifest next update: Mon 17 Feb 2025 21:00:12 +0000
Files and hashes: 1: EmeWi0SzQb-gJRM1r5HwQ3UJcDY.roa (hash: ZzQ14mR92kysB2/wX3mb4gE3HrBKm2PB/GvS5M1eQpQ=)
2: eWnEvYdneAvsFhoq1hKic128q_0.crl (hash: Fnhn/iAPQcRTPyb4X+l0IHa4R8sfFjPgeWRPA1YfSqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:c4:6c:c1:b7:24:2f:d8:71:d6:20:0e:51:96:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Validity
Not Before: Feb 16 21:00:12 2025 GMT
Not After : Feb 17 21:00:12 2025 GMT
Subject: CN=8cd697e404578f6d200ce142b86a26deff445a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:f9:f9:44:3d:20:59:eb:5f:92:6a:07:ff:
5e:d6:ba:6e:e0:0f:1d:da:fd:f2:75:94:e4:dc:bf:
9a:51:13:b5:0b:7f:ff:d8:58:29:7d:be:30:a7:35:
07:e8:50:ca:b4:7f:c3:5e:02:6e:e1:01:6a:b4:1a:
ca:77:4b:0d:0f:aa:1f:65:cb:df:59:a9:9a:22:4e:
04:8d:c2:d6:18:7d:94:18:aa:b3:99:11:ac:b9:e2:
40:c8:5a:03:c8:b5:cd:32:60:b8:a5:88:59:e5:6e:
b3:95:1d:da:d5:20:86:ed:51:c7:19:44:77:94:70:
d3:f5:7b:3c:26:5d:0d:eb:7f:6a:39:a4:7c:58:61:
28:fe:7b:c3:c1:ad:1c:f2:92:48:83:b8:81:46:6e:
7a:09:c6:0e:bf:45:6d:21:70:44:98:12:37:80:c7:
37:cb:2e:7c:46:3e:8b:26:88:e9:34:1c:1c:d0:94:
85:25:23:80:fe:dd:b9:ed:f3:c5:29:c1:b3:cb:78:
f8:b2:e4:62:d3:d2:44:58:3a:ed:e1:0f:f2:75:37:
0f:95:52:17:43:e2:9c:ef:82:41:7f:07:10:2b:ec:
e4:94:63:47:9b:eb:bb:44:52:0a:c6:ec:97:c7:8f:
cb:b9:17:00:57:d4:59:e3:26:55:0b:91:7b:90:1f:
cc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D6:97:E4:04:57:8F:6D:20:0C:E1:42:B8:6A:26:DE:FF:44:5A:5F
X509v3 Authority Key Identifier:
keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:32:be:01:9d:15:7e:ec:be:ba:21:d1:9a:51:15:42:7a:ae:
c2:01:75:05:57:c6:41:9d:50:36:c4:50:8d:da:64:8a:5e:c8:
a0:c3:5e:45:26:36:c7:4b:6d:d4:a4:f4:f3:4f:6d:50:58:f3:
9e:89:1e:a8:39:7d:fe:74:0c:00:3e:2e:f0:b1:6a:48:83:2f:
38:8b:23:03:21:e0:7a:9b:3d:f6:d5:d4:49:f8:7a:e1:4d:f4:
66:36:c7:0c:b0:66:22:bd:25:30:53:39:3b:17:e6:08:5c:50:
5e:eb:cb:27:87:df:c6:80:17:d1:58:fc:46:73:c4:09:59:ec:
cc:08:ea:4d:f5:5b:87:8a:c3:2a:2f:46:18:32:c4:cb:45:62:
cd:52:36:5c:8e:57:69:29:ac:8e:be:83:e4:14:b8:73:22:20:
a7:53:80:cc:d7:4e:12:2f:56:b1:5f:60:0c:cf:2b:e6:5b:9e:
40:c2:16:0d:26:11:7d:c5:b7:4a:9c:74:6c:01:d6:a0:af:23:
d6:c8:3d:e1:6b:51:89:03:ad:e1:c1:dc:7b:a0:e3:84:d4:f9:
b4:29:0c:b0:46:ff:e0:bb:21:25:89:12:d3:25:3c:d9:6b:13:
3f:8d:38:8f:da:f5:d6:99:91:fa:92:ba:bb:52:6d:b2:a3:60:
7c:42:1a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:03 2025 by rpki-client