Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File: 9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier: +FbqZPwAzApLhHUH/lss3+0ZGz9bbbRKVpJGyrTUamg=
Subject key identifier: A0:48:27:57:EA:3F:06:CD:4E:83:FA:DE:6A:41:3E:27:0F:96:F2:99
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 019512102EA59DCD0859105CBB0FB48C3997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 04:00:05 +0000
Manifest this update: Mon 17 Feb 2025 04:00:05 +0000
Manifest next update: Tue 18 Feb 2025 04:00:05 +0000
Files and hashes: 1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: z7gFkq23VUWnG+UHGOwbLvUpZERlzmGX/FcXmxHZpTw=)
2: BKaKCrIWJLW3Q862BmZ-Z-FQI78.roa (hash: zGv7kfCx9AyBiy/Vt4g16r88DKiDMl7S2RsrkRbPYxA=)
3: U6yxYsRAOLx1rVOUMfl1bHjQTqE.roa (hash: p5afCkYVQi7asNinB13X4z3pkTkHpo8/a9b5lnTy5To=)
4: hlFLNTPKu_nVGF692xwIYmZW2GU.roa (hash: c5Q2Sew+Iis+NOcJWfVvfa4Ocr0QgEd2RYjfl4HhWNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:2e:a5:9d:cd:08:59:10:5c:bb:0f:b4:8c:39:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Feb 17 04:00:05 2025 GMT
Not After : Feb 18 04:00:05 2025 GMT
Subject: CN=a0482757ea3f06cd4e83fade6a413e270f96f299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:28:e8:d4:75:c6:3e:c2:43:91:b1:dc:5b:
29:87:a9:5c:56:89:4c:dd:39:00:5d:59:c1:09:6b:
b9:b8:55:e7:17:1e:32:09:0a:34:6f:12:d4:87:fd:
7d:81:ec:b5:ef:78:a8:e5:88:fa:b1:d2:d8:40:81:
19:3e:1f:04:73:bb:7e:15:59:ad:20:2c:2e:1f:64:
82:0a:00:61:07:39:18:fd:ac:3b:95:87:f4:58:0b:
ad:9c:79:ab:0d:c7:9e:b2:cf:c7:60:82:ab:7c:59:
78:70:1d:47:c5:e4:ac:b8:4a:32:7a:0c:ee:cb:94:
5d:91:1d:90:14:32:a3:e6:e4:a2:e5:e7:0e:57:3d:
b3:55:8c:ec:7c:c0:12:c6:81:24:5b:87:ea:24:25:
5e:95:c1:fb:53:d7:e6:ef:78:e2:06:b9:7f:26:de:
94:65:5b:1c:37:22:7a:ca:fc:35:ce:49:fb:f7:93:
50:88:8a:e3:a8:94:7b:5e:54:8f:76:e8:0f:b8:d1:
87:9b:4c:69:97:93:12:f4:df:00:ab:a0:1e:1f:ea:
c7:79:69:a2:d7:3e:5e:52:86:1e:eb:8f:81:77:20:
5f:3b:26:29:d7:35:d0:e9:f0:f4:db:ab:ae:d1:d4:
b2:e6:99:a3:c2:bf:a7:dc:48:69:25:4f:b8:0f:c0:
96:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:48:27:57:EA:3F:06:CD:4E:83:FA:DE:6A:41:3E:27:0F:96:F2:99
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ad:05:51:c3:bf:bb:bd:c4:d2:92:4d:29:89:db:d7:88:5c:
eb:b1:0a:79:cb:95:fe:2e:d4:db:cd:f4:d9:aa:88:b6:59:d5:
23:91:4d:d1:e2:fb:07:40:1e:44:3e:7c:68:22:32:2f:9f:a0:
f4:a5:66:b2:a7:23:1a:67:6c:50:bc:cb:4f:4e:90:22:5a:e2:
a0:6d:aa:ea:9b:d2:ad:40:2f:b9:3f:09:c7:62:ff:de:67:50:
a3:b1:25:19:62:c0:61:14:11:69:02:34:f5:d1:d1:3b:69:e2:
9c:ce:b7:da:fd:cd:1e:f0:f5:b9:57:1c:6d:fe:10:f5:46:2d:
3e:2d:54:b1:b8:ce:18:32:fb:7a:d9:6b:66:7f:f1:81:2c:8b:
61:e0:30:37:82:16:d2:da:e9:d7:0a:63:bc:cc:59:c3:94:66:
b3:68:a2:df:f4:ee:c6:b8:84:0e:62:3e:74:94:04:a7:c4:11:
72:44:2b:87:e1:ad:d4:dd:18:17:0c:c8:73:e7:2e:6c:92:5d:
d5:e2:e8:76:a8:d9:a0:30:34:88:cb:c3:b2:57:05:ab:5e:78:
f2:72:ba:ac:17:50:b2:f2:bf:e3:3e:d6:09:40:e9:7d:6f:d0:
ef:82:14:d0:97:89:70:5f:b4:ac:12:96:7d:11:9f:f7:74:cf:
1f:d2:14:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:28 2025 by rpki-client