Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
File: cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft (raw, json)
Hash identifier: IruEi9EOO5goTllLYd9YBMHmTjHZAiogNvLNPE2n+z8=
Subject key identifier: 74:85:A9:A5:05:03:EF:6E:E2:FA:91:C4:CD:4A:33:FF:7F:C5:AB:3E
Authority key identifier: 70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55
Certificate issuer: /CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
Certificate serial: 0194C3877BEBE65EA8DF888C540869E318B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
Manifest number: 0511
Signing time: Sat 01 Feb 2025 22:00:23 +0000
Manifest this update: Sat 01 Feb 2025 22:00:23 +0000
Manifest next update: Sun 02 Feb 2025 22:00:23 +0000
Files and hashes: 1: 7vwEs2K4HN_LwUWqzjIICNGiknc.roa (hash: wTMMtevJNZjpsr8DvgOjhFZoAuNt0W+HiAbIshmL9sQ=)
2: cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl (hash: Cuze4AeHg45qoYIyF46ksL4566hlwCZ9TxRlSrzzKf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:7b:eb:e6:5e:a8:df:88:8c:54:08:69:e3:18:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
Validity
Not Before: Feb 1 22:00:23 2025 GMT
Not After : Feb 2 22:00:23 2025 GMT
Subject: CN=7485a9a50503ef6ee2fa91c4cd4a33ff7fc5ab3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:74:ea:7c:a7:20:ac:3d:67:ee:81:e2:1a:
f0:d2:55:bc:6a:d3:d3:90:b0:8f:7f:36:31:bf:d8:
a4:58:0c:fc:fe:ea:04:59:04:5c:78:e8:bb:0b:00:
5c:be:04:4f:28:88:83:bc:5a:ad:d1:65:83:4e:3f:
12:bf:4a:47:4c:26:13:b2:0a:55:94:05:42:bf:51:
f7:f3:74:53:8a:82:61:55:00:d2:63:3e:fd:c4:24:
82:1a:77:3b:3c:ef:d5:a5:11:d7:60:a5:84:0f:83:
cd:5f:1b:df:eb:55:1b:28:f4:99:5a:5a:0d:fc:fa:
92:87:21:bc:a3:ff:07:10:24:a2:e2:3e:0a:13:df:
17:2f:98:ef:9b:3f:55:a7:3c:7d:3c:7e:8b:04:cf:
0c:c7:7b:67:3f:0b:bb:a1:f2:66:b3:0d:bd:fc:34:
1f:85:ee:17:b6:a1:6b:ad:02:c0:0b:25:1f:e2:e9:
50:d2:89:28:8f:7f:96:11:d3:c7:1a:ab:7d:63:cb:
85:f6:71:cd:ef:14:b3:2c:ee:83:12:55:45:66:6a:
96:ea:d1:fd:65:0d:84:2f:43:08:0c:b8:97:a0:ce:
8f:cc:69:ba:98:55:26:ef:06:4d:f2:b5:15:49:45:
a5:ce:07:e0:70:3c:55:46:21:d0:f8:37:22:9b:6a:
92:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:85:A9:A5:05:03:EF:6E:E2:FA:91:C4:CD:4A:33:FF:7F:C5:AB:3E
X509v3 Authority Key Identifier:
keyid:70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a7:4f:fc:79:ed:d1:e5:93:85:c1:d8:53:58:55:87:b2:36:
e2:b4:15:2d:29:6c:37:ce:f6:bc:eb:aa:7a:e1:88:14:4f:48:
d0:06:8c:dd:78:46:a2:86:0b:c4:37:75:19:c7:33:fe:57:b7:
31:d3:a4:b7:9e:f8:4a:0f:5a:58:b0:dc:9e:4d:c2:39:b4:9e:
8a:77:ff:dd:4c:32:2f:50:f0:21:89:00:2d:f3:ad:6b:05:54:
dc:7f:4e:75:04:f0:65:00:b4:90:ec:97:ce:5b:dd:e0:ab:ac:
2b:4a:e4:99:63:1e:26:19:1c:df:3a:36:81:d2:b8:c6:41:ce:
1f:e5:0d:14:9e:b6:06:09:74:93:c6:f8:44:95:05:62:fb:e4:
05:62:1d:4a:d7:dc:c8:21:b4:84:89:1e:2c:18:e9:b7:04:99:
1b:ec:b5:5e:72:d5:10:bb:3a:f0:35:a9:a9:14:d8:53:6b:4c:
8a:89:16:7f:c3:77:fc:11:cc:b2:08:b8:b9:71:15:fe:a7:8b:
06:fc:11:ed:0c:b4:f8:f3:36:3b:31:2a:7e:6e:d2:d5:e3:88:
d2:3f:a8:be:71:9b:d8:be:e7:6a:97:d1:b5:a3:04:74:fc:a3:
5f:37:2c:4d:93:35:be:80:82:90:08:1e:a1:57:46:e2:2d:d0:
ca:82:3a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:05 2025 by rpki-client