Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
File: cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft (raw, json)
Hash identifier: hpDKXQ9vWQXMHzpWP7RxyVlxb2gIeMK/HhWY5VSFZ+0=
Subject key identifier: 9F:E3:1D:A6:C2:8E:B6:51:20:5D:FB:0D:A0:00:C5:B7:CF:59:B4:FC
Authority key identifier: 72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
Certificate issuer: /CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Certificate serial: 019511D95C86EAEF3B45C663B2440BFA000B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
Manifest number: 13E9
Signing time: Mon 17 Feb 2025 03:00:12 +0000
Manifest this update: Mon 17 Feb 2025 03:00:12 +0000
Manifest next update: Tue 18 Feb 2025 03:00:12 +0000
Files and hashes: 1: cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl (hash: edjsq1Z/yq0FLrZGUrnbn0JT1e+Dg4RAYoyVKQh7n+8=)
2: daRkFVsWIwe8tAsklauoDwt6UpA.roa (hash: a6fXOEYxSdy4VfRiyyu63eijEDfNFxmj7t/XlgH/vhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:5c:86:ea:ef:3b:45:c6:63:b2:44:0b:fa:00:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e12a3876ff7bd00d9d9ebb972ab1e621ea1e8d
Validity
Not Before: Feb 17 03:00:12 2025 GMT
Not After : Feb 18 03:00:12 2025 GMT
Subject: CN=9fe31da6c28eb651205dfb0da000c5b7cf59b4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:46:8d:fc:47:6a:13:a3:b0:f9:eb:38:51:1d:
30:af:58:77:73:3b:4d:da:4b:63:86:ce:5f:12:43:
bd:87:91:98:f5:85:60:cd:7e:a9:13:c3:1f:a1:c3:
66:8d:b3:92:85:0f:f7:a1:06:91:65:3f:81:41:aa:
d7:75:ca:a9:69:34:00:a4:77:56:57:f9:e5:da:41:
e6:c4:a6:9f:c7:bb:1d:c6:73:ad:1d:b8:71:c6:5c:
19:21:6b:09:40:d8:72:2d:68:97:c8:2e:26:7b:95:
c8:8b:c4:18:b1:88:0e:76:23:95:f4:b2:91:82:54:
16:a9:e5:d4:31:ba:ea:76:49:26:83:40:dc:ff:51:
b7:4d:f1:12:82:00:75:a5:c8:a9:7f:4f:59:a5:31:
1c:72:7c:c0:65:23:8f:5d:59:06:e8:d3:af:fb:8d:
e4:9a:b0:7d:e6:4d:b0:5f:cc:2d:c2:8d:41:31:8c:
9c:e9:2f:96:7b:4a:4d:7d:28:b0:ce:70:42:21:e6:
2d:82:b9:fe:a3:f7:d2:f4:92:b4:0c:02:16:e8:9d:
36:1d:93:49:f6:e9:c8:b2:da:ba:df:97:94:d8:96:
4c:5b:95:1d:44:0c:69:26:c3:36:b6:0f:24:43:c7:
6b:90:83:46:6f:95:e9:a9:5a:f3:19:f8:30:88:b3:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E3:1D:A6:C2:8E:B6:51:20:5D:FB:0D:A0:00:C5:B7:CF:59:B4:FC
X509v3 Authority Key Identifier:
keyid:72:E1:2A:38:76:FF:7B:D0:0D:9D:9E:BB:97:2A:B1:E6:21:EA:1E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuEqOHb_e9ANnZ67lyqx5iHqHo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1faa24-f086-4b48-b1bd-45527e8e44d2/1/cuEqOHb_e9ANnZ67lyqx5iHqHo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1e:49:66:46:5a:5c:60:45:58:8b:70:8b:46:cb:32:6c:b7:
a3:0d:d5:e3:81:60:db:98:aa:21:1a:f1:d0:1d:ad:c0:88:51:
24:fd:a2:92:84:13:05:d1:a0:86:e4:e9:53:d0:49:06:8e:84:
6d:e9:36:88:07:32:6d:fc:69:29:a0:47:af:62:9d:16:ab:f9:
dc:5b:2d:83:07:e6:08:53:12:e5:46:fb:27:a7:f0:3a:df:5e:
6c:30:70:76:f9:18:be:c6:5e:cd:fa:44:45:23:99:ce:79:b1:
e5:23:af:82:c6:9d:ec:a8:be:76:4d:f4:00:ef:87:20:0b:19:
b7:84:b7:55:8b:9f:b0:ae:d9:df:22:52:ad:76:32:4f:af:be:
29:76:cb:47:9c:b5:2a:e2:a6:67:b3:66:45:fd:4e:20:62:b4:
dc:59:58:02:ee:ca:1b:cc:df:da:b9:e5:7e:5a:f5:41:fc:02:
bb:55:13:35:06:22:58:46:06:f5:5b:44:4c:20:06:52:49:17:
ce:b2:1f:7d:df:bf:b7:11:26:99:71:29:a2:5c:ce:4b:d6:db:
37:d3:41:6b:8e:99:2b:ab:b2:18:3a:6c:08:77:64:68:56:0d:
81:b8:68:4b:d3:9e:cb:d9:c8:ef:a9:d4:56:85:59:51:b0:1d:
4e:81:0e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:55 2025 by rpki-client