Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
File: MEEPXtOG-HkgPLRCil-V_ciZtZE.mft (raw, json)
Hash identifier: NlNAp9bfkgKf/1ovC3p/riY4oj0Qt7Jm7DvzXl3QKXg=
Subject key identifier: DE:51:35:09:32:F3:B8:60:9D:49:4F:67:00:15:0E:1D:17:0E:64:9A
Authority key identifier: 30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
Certificate issuer: /CN=30410f5ed386f879203cb4428a5f95fdc899b591
Certificate serial: 019510C78BCF2570E8C37F225384A76641F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
Manifest number: 0413
Signing time: Sun 16 Feb 2025 22:01:07 +0000
Manifest this update: Sun 16 Feb 2025 22:01:07 +0000
Manifest next update: Mon 17 Feb 2025 22:01:07 +0000
Files and hashes: 1: MEEPXtOG-HkgPLRCil-V_ciZtZE.crl (hash: iqLRnSINjxIqk5pL+D5OQpa+BMWMf4Og6VacSD3/2Bw=)
2: VKnNvbVsRqF6coqOLVNx3je3CD4.roa (hash: SfCYWwwunVdh83nhVwYfX1uU9K1UYabADUPAPwp/I2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:8b:cf:25:70:e8:c3:7f:22:53:84:a7:66:41:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30410f5ed386f879203cb4428a5f95fdc899b591
Validity
Not Before: Feb 16 22:01:07 2025 GMT
Not After : Feb 17 22:01:07 2025 GMT
Subject: CN=de51350932f3b8609d494f6700150e1d170e649a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:4c:96:c6:ea:2f:90:f0:66:d1:9d:47:2b:
07:f7:1c:04:ce:ec:15:91:52:04:67:e6:39:40:a7:
36:cf:cc:ac:38:86:93:a0:4a:78:21:d9:9d:ea:b4:
34:5a:1b:1b:6d:ef:d6:1f:59:a0:1d:d3:2d:a8:cf:
62:b0:cf:0c:cb:a5:87:d6:ed:c3:5e:e5:d5:3b:05:
a7:18:c5:37:7c:38:cd:ee:71:8b:e0:e6:f0:f2:88:
8b:65:34:87:73:6c:5c:81:96:0b:07:25:28:1d:64:
3a:73:48:96:8b:1d:5d:83:43:a9:19:a0:f6:f6:c9:
1d:d1:f3:ff:d0:9c:45:1b:67:d4:6f:59:6f:ed:0b:
3c:7b:68:8c:0e:42:8f:10:8b:b2:61:54:9d:f7:81:
e7:80:e7:7e:db:ca:f6:5e:76:e0:99:9a:19:b7:1b:
e1:3a:81:3b:7e:4d:c3:59:d6:0a:3d:02:5e:52:46:
58:17:e9:d5:70:01:d8:69:24:37:a3:86:90:4f:26:
47:1a:4f:19:99:d4:5f:6e:b2:67:fd:a3:2e:fb:79:
15:79:8d:e4:82:bc:11:89:e3:18:16:4c:4e:4e:e5:
f3:41:51:3e:e3:78:a4:3d:90:a4:b5:b4:5c:d3:ae:
d6:e0:7d:ea:60:60:c1:d6:14:1f:0b:ca:f1:34:60:
35:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:51:35:09:32:F3:B8:60:9D:49:4F:67:00:15:0E:1D:17:0E:64:9A
X509v3 Authority Key Identifier:
keyid:30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ed:6b:87:cc:49:22:24:19:87:75:08:8b:88:c3:56:86:77:
72:cf:f6:e1:c2:38:e5:44:2e:df:4d:fd:35:ee:c7:b1:51:27:
cf:93:6a:ad:9c:77:94:ed:43:66:a4:8d:23:62:ff:39:a4:0b:
98:4c:2d:62:e2:e6:22:a4:aa:e9:68:34:e7:0e:c6:b0:a3:fd:
01:6e:d8:5d:24:f4:49:69:8b:ee:95:b7:63:74:08:09:8e:d7:
8a:89:fd:4b:73:ab:63:1d:30:57:d7:44:51:1a:d1:c4:96:f6:
7c:b0:24:a2:92:c2:81:0d:c1:56:10:66:29:76:55:91:af:08:
bd:6e:86:09:2b:77:e6:0d:4a:f8:a1:be:0d:8d:de:bf:a5:0f:
fc:64:c9:e5:54:1b:40:c3:ab:fa:86:6b:03:ab:58:16:24:83:
5c:d0:ff:f6:cc:13:04:f0:01:55:ba:fa:ae:69:fe:d2:43:8b:
97:47:b3:c7:8d:33:60:0a:69:2f:ab:5d:4b:a6:a0:1c:a9:99:
73:0d:6b:85:94:60:72:b6:5e:6f:da:dc:af:4a:9b:b2:ef:2a:
4c:b1:ef:87:c3:e9:63:3a:05:95:11:ec:92:2a:3a:2c:d3:ef:
14:61:65:2f:10:15:9e:ce:af:43:6b:08:9f:db:a9:6c:ee:69:
af:6f:43:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:57 2025 by rpki-client