Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File: 13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier: qR18JIgHu2X+jEwplT/vbx3yadyPbDyEg8sS+mV+ikQ=
Subject key identifier: E8:99:6F:D6:BD:0F:F9:6D:81:A2:F4:F8:F0:40:DD:06:65:0B:96:58
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer: /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial: 019510C7AD9F06F57E6E04566FCCC2946D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number: 1458
Signing time: Sun 16 Feb 2025 22:01:16 +0000
Manifest this update: Sun 16 Feb 2025 22:01:16 +0000
Manifest next update: Mon 17 Feb 2025 22:01:16 +0000
Files and hashes: 1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: Z5V3dYhXVn1Lw7xlo2tKnHRVU+EwPeBT+/aydnU7qL0=)
2: I4emCne_29V28uUFcYz5hu_Rezg.roa (hash: 96USF7uc276n2Rs/poozBmGnwe39xgiKf2HQGb9xcQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:ad:9f:06:f5:7e:6e:04:56:6f:cc:c2:94:6d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
Validity
Not Before: Feb 16 22:01:16 2025 GMT
Not After : Feb 17 22:01:16 2025 GMT
Subject: CN=e8996fd6bd0ff96d81a2f4f8f040dd06650b9658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:2c:26:6a:59:50:f9:19:a0:11:f1:6f:bc:
b6:48:5c:34:a4:9b:f5:77:b5:28:20:51:c6:cb:a7:
30:35:9d:64:00:86:33:6b:c9:c9:56:f1:b1:8e:9e:
da:c8:5d:82:ca:de:0c:8b:34:91:2c:d7:29:e9:da:
3f:42:8e:d8:f5:e7:2f:73:3f:5b:15:0c:7d:3d:18:
a8:0f:be:18:f7:ed:20:96:36:94:95:a1:7c:dc:3e:
9d:c8:cb:a8:17:4f:15:5c:99:2b:92:c4:5c:df:47:
ec:83:70:61:6d:b0:d2:c5:19:61:b8:60:e9:24:6c:
1d:b6:85:c4:40:f0:2c:08:9c:b5:1d:2f:52:85:2b:
ce:a4:ba:31:88:90:1a:3d:fb:c1:9d:3a:57:6a:13:
90:ca:63:b7:c8:85:1b:94:90:4f:2c:7f:35:f1:9e:
ec:8d:1c:94:c4:f1:c6:95:2d:f4:e6:01:9e:66:6c:
8b:16:4b:68:09:b1:05:e5:b1:2b:d6:32:bd:8d:b0:
73:42:a2:bd:dc:d1:09:ec:5c:25:70:73:a0:8b:2b:
a9:20:ff:9f:02:83:b3:3c:00:39:83:83:4c:01:c9:
10:48:26:c4:00:1a:ee:bc:28:c6:0a:6f:ad:6f:b9:
5b:6c:f4:ac:e6:9d:11:9a:87:3d:07:22:26:08:27:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:99:6F:D6:BD:0F:F9:6D:81:A2:F4:F8:F0:40:DD:06:65:0B:96:58
X509v3 Authority Key Identifier:
keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:da:3f:b2:b3:ca:1a:6e:52:0d:71:27:4f:99:c4:7f:69:d8:
77:c1:ac:50:9b:7a:a1:3e:1c:37:bf:cf:6a:d7:57:73:f4:67:
c7:52:ec:f4:25:1d:e2:6d:d0:37:a3:95:94:dc:90:6d:d0:3f:
7f:0f:fb:55:c4:86:26:8b:55:73:d2:08:db:c1:25:d9:e5:16:
c7:ae:74:f1:c3:3b:13:e8:c6:ff:6b:1a:5c:06:c9:6c:be:66:
0c:94:61:86:ee:93:f9:db:36:97:4e:f7:fc:03:2c:06:64:74:
14:76:3c:5d:39:82:aa:1f:6f:bf:8a:26:a1:06:ef:c6:fb:6e:
de:ad:ed:b7:9a:2a:e5:20:d3:d5:8d:b7:64:13:41:65:61:72:
14:4c:9e:15:9a:aa:10:bd:66:e6:ec:68:6e:91:a8:e3:32:a4:
5d:b4:b6:ff:b3:b8:3c:17:94:de:a5:d7:44:6d:8d:0c:1a:f2:
67:75:8a:cb:5f:1b:11:a5:fe:10:ad:b0:58:0e:3f:e2:48:56:
ab:f5:bc:9e:50:75:9b:61:8a:ce:8a:09:0b:a7:9b:e4:bb:bd:
f4:8e:80:b0:b8:bd:dd:58:73:87:38:8e:30:7e:f5:c2:e8:61:
87:e0:42:a6:1d:e5:ca:7c:c5:82:7f:c8:44:6e:e9:ee:68:7c:
3e:4f:af:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:48 2025 by rpki-client