Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
File: S-EpiiFeXkt9HgWoX7xZHDifnd0.mft (raw, json)
Hash identifier: UBD1QANuLirB5GUsR1AT9ET+vj2Mvw5emENXvDhfP4s=
Subject key identifier: 26:D9:50:F3:86:81:FF:42:72:24:FD:BA:E9:E9:7B:84:0A:96:15:AA
Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
Certificate issuer: /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Certificate serial: 0194C4D14A467E3285F30A8E18F52C6B5DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
Manifest number: 1107
Signing time: Sun 02 Feb 2025 04:00:37 +0000
Manifest this update: Sun 02 Feb 2025 04:00:37 +0000
Manifest next update: Mon 03 Feb 2025 04:00:37 +0000
Files and hashes: 1: S-EpiiFeXkt9HgWoX7xZHDifnd0.crl (hash: jXBolTBhY8u1iYmUSane41v9tnHBONDrIOk3LfyNT4g=)
2: s1JSRv9qjaGD9ezms7UcWMZoLZc.roa (hash: m1XaHhOIwQT47gv3DHtN00RXZ5ujYkmfy6Ne91kvsN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:4a:46:7e:32:85:f3:0a:8e:18:f5:2c:6b:5d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Validity
Not Before: Feb 2 04:00:37 2025 GMT
Not After : Feb 3 04:00:37 2025 GMT
Subject: CN=26d950f38681ff427224fdbae9e97b840a9615aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:b3:da:c9:d8:bd:d8:fd:f3:a4:b4:cb:51:
ab:f1:3e:1d:9a:7b:d7:4c:d3:e0:76:61:75:cd:0d:
1a:bd:39:d7:25:5c:8e:cd:39:67:bf:99:ac:83:a2:
b1:1a:c6:ea:a9:eb:56:f5:30:b0:0e:d0:4d:74:d2:
61:fe:8f:ef:99:67:80:3b:92:88:cc:d1:9e:f9:91:
54:a9:4d:fb:be:70:e8:f2:f0:14:6f:d1:8a:91:d7:
2e:cb:ec:e7:1a:57:8c:d3:b5:10:11:54:8e:95:3b:
08:51:23:e8:51:70:11:19:f7:9d:75:20:f0:09:26:
1d:c4:81:78:1d:f3:77:f6:f0:ce:56:99:e6:d4:48:
21:60:b3:66:00:91:63:b3:fd:36:ff:89:26:fb:2d:
3d:3d:43:7b:d8:4c:ca:8c:6f:01:ad:31:ca:32:8d:
38:40:6a:ba:f6:0f:34:33:07:71:43:bf:37:77:02:
77:26:b3:f3:8b:28:71:43:15:7b:50:3b:3e:0b:ad:
77:7e:2d:91:66:6e:dd:1b:f1:62:d9:30:f2:c9:1a:
c2:a5:9e:e8:41:64:62:26:11:88:11:56:84:2d:3b:
08:95:83:ac:2d:4d:a8:87:26:f2:62:82:ff:99:22:
f7:84:85:33:d9:a1:15:3c:9e:a6:d8:2d:ff:73:42:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D9:50:F3:86:81:FF:42:72:24:FD:BA:E9:E9:7B:84:0A:96:15:AA
X509v3 Authority Key Identifier:
keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:4f:f1:df:95:8d:53:68:9d:e1:1b:a7:be:e4:38:2e:e1:47:
80:74:04:47:3c:2e:90:e3:fd:aa:24:62:7c:e2:c8:13:e9:a6:
ee:82:9e:e8:da:00:ed:07:98:13:34:84:7a:db:3f:b6:f9:67:
16:35:74:36:ef:34:47:3d:68:98:de:7a:8f:e6:18:e9:85:9c:
0c:73:b7:e8:7a:af:de:94:08:96:d7:eb:6d:88:8c:20:f4:c1:
79:a1:20:85:f4:1e:71:ec:e5:43:ed:ab:a9:ce:14:69:ac:81:
fc:d7:24:f4:c5:e5:0f:cf:78:9a:7d:de:ad:34:05:87:2d:51:
39:35:dc:65:2e:6d:96:4e:83:a1:2c:44:dd:a8:93:78:13:be:
a3:ee:0a:0e:9f:fc:54:a8:03:b0:75:3d:3a:f1:71:02:9f:10:
4f:36:c0:d9:64:5e:a3:d1:48:66:ba:36:68:06:09:1b:f9:94:
c7:fc:fe:ac:d5:ae:8e:b4:2a:e7:54:0e:99:ed:d6:9d:7a:2c:
df:66:63:16:ea:5e:56:df:24:2c:d2:0a:c9:a8:a7:5c:3a:6b:
83:92:0c:8b:23:f9:32:91:2f:a8:a0:41:25:9d:57:42:fa:fa:
b2:4e:48:f8:55:06:8a:15:11:88:b3:d7:5a:c7:f4:e0:32:1d:
21:01:e0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:43:03 2025 by rpki-client