Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: arfSSej0EFZx48j5IWrUJok0v5Zq7GGG88Y82BXsc50=
Subject key identifier: E5:C0:30:5F:73:59:3D:D8:B7:CD:5B:22:B8:C7:FB:75:14:3F:69:E1
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 019511A27FFE2BD0726E11E6657B8B2BF441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 0C35
Signing time: Mon 17 Feb 2025 02:00:16 +0000
Manifest this update: Mon 17 Feb 2025 02:00:16 +0000
Manifest next update: Tue 18 Feb 2025 02:00:16 +0000
Files and hashes: 1: Fu0lK4Mcztssv3LosrHSeGC9v5I.roa (hash: u/9ObfX95800lVIP5yQNITdaQtRd2zqHQxCUamlQIjU=)
2: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: 182MxoF3/im1uPzERc9NKJV1akl9KgmJTzIg+c4/VyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:7f:fe:2b:d0:72:6e:11:e6:65:7b:8b:2b:f4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Feb 17 02:00:16 2025 GMT
Not After : Feb 18 02:00:16 2025 GMT
Subject: CN=e5c0305f73593dd8b7cd5b22b8c7fb75143f69e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:d8:d1:61:ac:5d:42:9c:98:81:52:a3:91:
cf:be:cb:9e:5e:f3:2e:5f:5d:58:e7:97:ff:38:78:
c3:f3:bd:d0:7a:bd:2d:90:f6:48:58:c7:9e:3b:b4:
15:d2:b1:f5:ae:3f:61:a7:ec:69:bc:0f:68:76:df:
6a:c4:50:ae:f6:2d:a3:58:4c:25:40:9d:fa:8b:c0:
e7:a6:0c:9d:d2:ce:4e:83:70:55:04:b6:8c:76:92:
b4:91:8b:84:e4:51:7f:59:07:1a:7b:cf:87:0e:25:
9a:87:82:d8:70:55:78:a0:1b:96:e7:5c:8e:28:8f:
df:f0:28:28:23:61:6f:16:2d:21:a4:28:c9:7c:9c:
2c:a4:ea:13:84:3f:c2:60:91:2c:30:44:a6:72:90:
20:44:07:3c:3d:99:5a:eb:2a:66:e6:e4:ca:f8:a7:
b1:14:1d:80:7f:7f:f3:bc:63:71:61:4f:2a:e8:bd:
72:bf:1e:8c:5e:7a:14:7c:7f:ef:ab:63:ea:eb:ff:
c6:43:c9:dc:6f:99:c7:42:ed:0e:a5:c7:cf:82:b4:
41:87:f1:50:30:27:e1:49:93:91:45:23:af:00:ed:
0e:20:68:36:d8:5f:23:74:7a:58:13:2b:c5:5d:76:
5a:23:94:c1:db:1f:7e:0d:a7:2c:3c:ed:58:0b:50:
d5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C0:30:5F:73:59:3D:D8:B7:CD:5B:22:B8:C7:FB:75:14:3F:69:E1
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:37:85:95:a5:d4:47:af:63:93:8f:65:cc:56:6b:3e:f2:44:
e0:bf:01:c0:67:f8:03:86:7e:bd:af:ac:07:7c:32:68:41:5f:
ea:89:36:6a:ed:91:f7:e5:1b:de:d2:0a:53:c2:67:5e:f7:b3:
2f:4a:19:18:9e:36:73:13:1a:76:1d:21:49:70:35:5f:dd:fb:
e6:85:52:24:62:7a:67:3e:8d:da:b2:23:3d:12:64:99:c7:49:
19:b9:6a:2a:b1:4f:fd:d8:18:dc:70:5b:97:e0:7f:06:b4:6a:
5e:4b:52:1f:93:02:b6:0b:73:d3:9e:73:3b:dc:54:80:37:f4:
b6:4d:b5:dc:1f:76:00:97:b2:23:a3:30:e3:09:50:75:a6:b0:
50:6b:fd:ef:cb:83:e2:bb:8e:f0:be:0b:fe:48:05:24:cd:3d:
08:27:89:63:85:80:7d:92:49:97:9a:8f:7c:4d:ad:21:46:52:
2a:c1:ea:ca:b7:0f:83:f2:fa:bd:12:67:ca:a2:0a:f1:66:f3:
1a:b8:93:f2:a2:31:12:02:f4:01:40:ae:0e:57:b9:4a:e1:be:
f3:a7:82:dd:ed:d2:fb:2e:6a:77:9b:f5:18:16:de:fb:30:e7:
af:8b:ed:01:b1:8d:01:20:5c:e9:e9:95:a8:e9:a2:d3:07:8c:
cc:ac:12:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:59 2025 by rpki-client