Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: zor8rI7zj5aYftWKKcg2EZ9aZ9QtzVhsH3s9bxcEsWM=
Subject key identifier: 36:69:0A:43:A7:00:BD:65:B9:15:70:4C:7B:E9:99:9B:43:06:69:4E
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 019510C72216D5868F6F2334E307FF7053B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 0C43
Signing time: Sun 16 Feb 2025 22:00:40 +0000
Manifest this update: Sun 16 Feb 2025 22:00:40 +0000
Manifest next update: Mon 17 Feb 2025 22:00:40 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: ld+IFmdZ+akEeuzDBKu9TV2XH/7j99RS/DFgSNpNZSI=)
2: wOcuTBMxNd4VNkifbjkEPq5QBRM.roa (hash: jOCaPE7vIzLxLDz75Ne5jz/kVuSxy/EH3LkXhZB0gk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:22:16:d5:86:8f:6f:23:34:e3:07:ff:70:53:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Feb 16 22:00:40 2025 GMT
Not After : Feb 17 22:00:40 2025 GMT
Subject: CN=36690a43a700bd65b915704c7be9999b4306694e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:25:fc:52:46:2b:2d:ad:6e:71:a6:d2:19:
e9:9f:6e:76:8e:25:e8:26:5b:6a:02:b5:73:3b:88:
16:ce:b7:ca:ec:cf:7f:bf:86:21:05:84:61:a4:9a:
69:40:1b:ef:38:c0:95:80:36:8e:cf:0f:fd:b2:24:
7d:e1:49:db:44:fe:3c:91:85:67:b8:78:43:31:ca:
ce:bd:01:01:7c:91:91:ad:aa:90:06:88:a3:a6:a8:
22:bd:fe:46:07:79:de:03:44:7e:be:c7:0e:08:ea:
bc:1b:df:fa:b5:86:b7:db:7b:a7:43:bc:88:bd:ed:
b1:0b:11:05:d5:2e:1c:88:6d:a4:50:ea:44:37:10:
61:75:04:be:1b:7b:be:12:a6:80:a3:bf:95:b9:f0:
cb:1b:9a:63:29:b4:b0:5a:d4:07:32:be:0f:f1:61:
77:56:24:df:20:f8:40:8d:b5:86:42:3b:dd:8c:0b:
35:e7:6e:02:97:7c:ba:e4:fb:80:0e:d4:e0:8c:5d:
4f:56:10:d4:1b:4c:b8:0f:3f:68:d9:0e:56:eb:3d:
2a:c8:74:af:c6:32:d5:a6:4f:e1:1e:ff:2c:9f:d7:
f6:5a:8c:27:82:0b:19:b4:f3:61:c2:2b:e0:c6:59:
a2:dd:7d:ac:f9:24:14:f5:66:99:55:05:03:f6:d5:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:69:0A:43:A7:00:BD:65:B9:15:70:4C:7B:E9:99:9B:43:06:69:4E
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:42:5a:94:e6:32:40:e2:41:4f:ed:f0:56:04:28:52:51:7e:
0e:2f:42:7e:c7:53:49:7d:68:41:19:36:89:30:1e:c8:a1:ef:
55:38:99:fa:a7:e4:53:9a:c2:62:be:9d:47:45:92:1f:a6:9b:
b8:71:61:b0:2c:86:bf:d6:3d:a8:cf:62:36:95:f9:6a:d7:98:
c0:2f:65:d0:c3:5b:0c:2c:2e:2e:17:93:28:8b:9a:14:cb:6b:
4e:97:64:da:83:f7:d8:55:93:58:d4:f0:06:34:8a:48:fb:b0:
de:81:d7:b4:a7:23:95:ed:0a:cb:16:de:3f:49:01:49:98:3c:
ed:68:ec:14:b1:ab:58:62:52:37:88:97:73:d7:31:1f:e3:ed:
fb:2b:af:bd:df:0e:b5:c8:66:98:d6:19:33:24:66:5f:7a:14:
3f:b8:61:8f:d1:34:29:f7:c6:19:23:ce:4c:e5:11:a4:fe:f0:
1a:eb:72:98:d2:23:db:2e:e6:ad:20:74:b5:b8:f7:b7:1d:e2:
41:4b:cf:e3:11:8d:1e:62:fe:fc:92:5b:0f:b9:07:12:1b:ed:
16:bd:6f:fc:73:ed:6b:8a:7d:c7:df:0d:86:b8:b3:cc:85:bc:
3b:61:3f:b7:c7:d5:44:21:fc:93:5e:6e:2b:3f:d0:81:1e:c0:
97:0f:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:18 2025 by rpki-client