Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
File: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft (raw, json)
Hash identifier: fQrF5dQGzL/tmUN1isZ017h7inVeGC4hzW5qEosuowg=
Subject key identifier: 0E:99:25:E6:80:E0:45:23:E9:F1:8A:C0:75:22:5E:46:CE:DA:C1:4B
Authority key identifier: 78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
Certificate issuer: /CN=78024d480b37705fa0091b5774174e80fdd8add8
Certificate serial: 0194C4D145E7B276BA9AF3ED38181423E755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
Manifest number: 0D1B
Signing time: Sun 02 Feb 2025 04:00:36 +0000
Manifest this update: Sun 02 Feb 2025 04:00:36 +0000
Manifest next update: Mon 03 Feb 2025 04:00:36 +0000
Files and hashes: 1: 7zyHfGLCt61eCife6uW0qcGV8aQ.roa (hash: Obf5nHalQ5b5PGXQ7xcaKDODktDmBaiUg7460b0pjaA=)
2: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl (hash: hqD+fpL9l0LNG7+nsvy06Lsfo8weayP6OB2sbIV9rH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:45:e7:b2:76:ba:9a:f3:ed:38:18:14:23:e7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78024d480b37705fa0091b5774174e80fdd8add8
Validity
Not Before: Feb 2 04:00:36 2025 GMT
Not After : Feb 3 04:00:36 2025 GMT
Subject: CN=0e9925e680e04523e9f18ac075225e46cedac14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:44:37:19:b6:be:0e:22:89:5a:0f:59:cb:
b0:d7:f9:ad:93:21:c4:e4:86:d7:2a:76:f1:fd:1d:
bd:13:24:4c:c9:4a:c2:31:a3:26:58:f2:e4:68:f2:
82:79:44:7b:d7:d2:6e:00:fc:f0:41:ae:8d:75:0d:
e3:ef:84:78:36:3a:f5:8f:87:f0:e0:c4:3a:40:1e:
54:68:51:97:56:3d:e6:94:96:53:85:a8:33:f4:31:
6e:92:56:86:40:b7:37:eb:c4:05:65:b6:50:a7:9a:
73:8c:49:a9:e6:8d:06:d5:80:cc:91:09:bd:66:6c:
a5:61:c3:c4:d6:58:ab:f1:08:e3:d0:7e:b2:9d:2c:
fb:ed:92:5a:09:b1:be:3c:c4:6d:d0:60:d0:55:fa:
3a:a4:bd:e7:df:d2:af:d7:4e:13:f0:65:6f:fb:3e:
e3:37:30:a8:1a:f3:19:15:bb:58:3c:bf:4b:b1:7b:
b7:8d:fa:0b:62:82:fd:9c:4f:1a:a4:4f:c3:f8:73:
c5:31:54:4a:57:87:f3:3d:cd:90:b4:1f:6f:41:09:
b9:54:ac:8a:77:94:3b:d6:ae:1c:67:14:94:56:4c:
d8:7f:ba:01:c3:d0:22:36:1c:7f:b2:28:92:fe:f6:
0d:7c:6f:fd:6f:ae:41:75:ac:9c:b2:b2:71:9e:f2:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:99:25:E6:80:E0:45:23:E9:F1:8A:C0:75:22:5E:46:CE:DA:C1:4B
X509v3 Authority Key Identifier:
keyid:78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c8:42:40:7d:06:c8:7b:c4:76:c8:97:32:85:77:03:a4:5f:
48:75:d3:91:8e:64:f4:a2:a7:c0:73:ca:41:73:25:1b:0e:06:
0a:12:77:01:80:35:76:96:ce:78:16:47:60:c1:18:12:59:75:
27:27:97:f4:7b:d0:e6:be:f5:f8:e6:3f:69:25:91:f5:10:0c:
f0:cc:6e:f6:17:6b:f7:b3:9c:4e:99:83:eb:39:57:1b:33:9a:
06:04:df:3b:6e:d0:b5:f5:b2:15:f4:c6:61:d0:0d:33:de:b9:
14:40:fe:b5:fc:a3:55:6f:7f:00:ec:41:2e:28:15:c5:9e:26:
da:be:53:a9:13:0c:f2:e9:43:19:6c:27:eb:d0:51:42:91:73:
46:44:bf:41:6a:f1:72:b4:f6:f6:9f:76:e3:15:06:d5:34:62:
30:ec:ad:2b:45:bf:23:39:e8:ba:5d:38:7e:bc:71:9d:eb:e5:
e4:30:05:e6:e0:e8:e2:04:09:cf:19:10:0b:bb:65:9e:93:4b:
f9:d4:aa:2d:55:06:f8:7f:14:89:95:ba:e7:81:fc:de:29:17:
6e:da:07:d6:f7:4d:4a:1a:03:9f:ed:2c:ad:9c:f6:4c:ef:09:
96:4f:7c:42:0f:3e:62:e3:9e:82:18:e4:75:49:2a:62:3a:d6:
de:d3:bd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:27 2025 by rpki-client