Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
File: CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft (raw, json)
Hash identifier: qko5pGEvawcf5PSXkodgZtoIKRkgzHYi6XyOE89NC5g=
Subject key identifier: 65:87:4B:45:6A:30:F8:B4:EB:C0:E0:28:19:77:BA:48:21:80:E5:71
Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
Certificate issuer: /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Certificate serial: 019511D9801D82EC81F43378406B7C54112D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 03:00:21 +0000
Manifest this update: Mon 17 Feb 2025 03:00:21 +0000
Manifest next update: Tue 18 Feb 2025 03:00:21 +0000
Files and hashes: 1: CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl (hash: V008eduznpctbXfoWU/xMC4pljkolce6GW6oylrhIE4=)
2: eEiaQt6Ze9WxjrZL-d6aNqKJOCY.roa (hash: uCPWdRUrjQcc9uIJEuG8eyiVfoHC/vX0+wXoSm20VqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:80:1d:82:ec:81:f4:33:78:40:6b:7c:54:11:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Validity
Not Before: Feb 17 03:00:21 2025 GMT
Not After : Feb 18 03:00:21 2025 GMT
Subject: CN=65874b456a30f8b4ebc0e0281977ba482180e571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:eb:2c:74:21:0b:fe:95:4a:77:f1:fd:14:
ec:95:67:de:be:a1:db:7c:74:a3:42:e3:bc:f9:10:
80:9f:6a:ad:f2:47:eb:16:10:ba:d6:3e:9d:1c:4e:
fe:66:bf:ae:a3:20:72:16:1c:fb:43:d9:da:f4:f2:
78:27:d5:2b:7a:9e:76:a6:89:d9:18:02:48:70:1b:
a1:0e:79:69:9c:16:c9:d5:ff:db:ca:8a:5c:fa:8d:
17:e4:a6:d6:5d:4b:59:da:2a:ec:e0:56:9c:c1:8c:
74:9c:a1:93:3e:ae:c5:34:40:83:f7:74:c6:e6:8b:
14:82:b7:2e:86:af:90:52:e5:3e:d2:01:23:ca:ce:
b9:06:33:39:ad:39:22:a3:ce:16:0c:dd:23:57:73:
70:36:2e:03:cd:fe:23:c9:ca:ac:c1:62:21:5d:e5:
d4:e7:bf:5c:96:b3:18:b6:4e:52:2c:84:d8:6a:b2:
5d:0d:e1:59:fc:78:5d:66:dd:f1:aa:99:35:00:eb:
66:ee:95:9d:30:11:1d:dc:ce:be:17:68:1c:73:a8:
e1:40:fd:1b:ef:43:db:c2:5b:6c:3a:74:58:02:51:
34:a8:49:e7:4a:ca:02:f4:a9:6b:15:bf:ab:7a:e8:
be:b2:4e:1b:c9:6f:12:16:19:f6:4b:17:55:b5:e4:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:87:4B:45:6A:30:F8:B4:EB:C0:E0:28:19:77:BA:48:21:80:E5:71
X509v3 Authority Key Identifier:
keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e0:cf:10:b7:dd:10:c1:38:38:ad:87:c7:2e:4d:2e:78:fb:
06:08:23:8c:64:ca:27:29:9b:66:be:bc:fb:9f:e8:d9:92:a4:
d9:58:65:8b:67:5f:70:04:eb:65:22:70:7c:06:67:a0:92:13:
73:cb:55:01:d5:28:a2:b9:d8:b6:8c:67:fb:a3:9e:2f:1f:47:
5e:04:27:26:52:fa:6b:eb:14:01:7d:d0:0a:20:c7:91:57:01:
4a:22:e9:2c:ea:57:ae:1a:59:2a:0e:b7:e9:70:94:27:86:f2:
a6:91:62:f8:8c:33:09:ca:12:4a:d3:20:f8:10:6b:ac:aa:e9:
c0:a8:26:c4:2f:b5:7b:fe:34:2e:a4:89:b7:59:22:c2:ca:24:
de:8b:52:ce:66:8c:dc:c7:26:bc:62:51:86:80:0e:49:72:79:
56:47:35:c6:df:64:88:1e:fb:d2:4d:57:38:9e:8a:d0:d4:09:
fd:c4:5a:1c:53:e7:a8:ac:84:05:21:45:10:82:02:66:a8:a7:
8b:50:ff:0a:49:33:f2:29:40:7a:ef:19:46:d0:c5:bf:d3:6a:
49:38:9d:dd:84:92:3f:44:e4:b9:18:ab:be:92:87:8a:83:49:
7d:7b:49:83:5f:f4:a1:69:da:52:34:cb:69:21:0b:ad:e4:40:
ba:e0:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:41 2025 by rpki-client