Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
File: pyEILICrr5X61-pg88XsDgXijtw.mft (raw, json)
Hash identifier: DqcjJk9ObVav50+1m7sKrDUM416zT74j53xMaEVwN2s=
Subject key identifier: 36:22:AE:31:EA:78:3A:AB:CB:02:42:B4:A9:2D:54:2E:07:56:D9:D2
Authority key identifier: A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
Certificate issuer: /CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Certificate serial: 0194C42C1F22CBC2CCFD09495480419769F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
Manifest number: 0B15
Signing time: Sun 02 Feb 2025 01:00:13 +0000
Manifest this update: Sun 02 Feb 2025 01:00:13 +0000
Manifest next update: Mon 03 Feb 2025 01:00:13 +0000
Files and hashes: 1: 3tu6ClYuvbDBR6KTKvf_i26_sNM.roa (hash: mscne+X+jfLaHAfi9bV23pNVKutqYHuT+pdDSC+aYJQ=)
2: pyEILICrr5X61-pg88XsDgXijtw.crl (hash: dZc6/Q05rJTVMp+AzzXrunzBV/WHTPJ52YHqjgpqVbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:1f:22:cb:c2:cc:fd:09:49:54:80:41:97:69:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Validity
Not Before: Feb 2 01:00:13 2025 GMT
Not After : Feb 3 01:00:13 2025 GMT
Subject: CN=3622ae31ea783aabcb0242b4a92d542e0756d9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:54:c7:fa:2b:66:47:e5:ed:4f:a6:d2:c9:
71:dc:9a:fd:6d:52:60:59:63:09:3a:61:59:29:a2:
d8:fa:fd:00:48:e8:53:ce:9e:e5:6d:03:5d:2b:49:
fa:df:92:97:54:d0:d3:b0:20:8f:29:ea:4e:ed:79:
68:9d:ed:77:22:e3:ce:d1:f4:14:e8:90:bc:25:47:
d3:d5:94:10:2b:a4:1e:8f:e0:6d:d3:1c:a4:f8:5d:
d5:8d:06:7e:8e:66:da:d8:f9:17:de:14:08:38:3f:
b7:28:9d:e5:6a:69:8a:f0:d6:14:42:4e:cd:02:16:
94:46:f6:79:6f:48:1e:33:49:95:23:0f:ab:84:27:
de:2d:ca:cf:b2:e4:4a:e9:77:14:a0:c6:a5:63:5f:
4c:da:26:84:75:d6:fa:ec:0e:1e:e2:6d:1d:2a:bf:
4b:69:e2:e1:cb:7a:23:ea:32:09:da:d0:44:ed:e9:
e4:97:4f:8e:8b:63:86:37:3c:3c:97:5e:54:57:44:
1a:4f:99:f1:1b:2b:ea:4d:cb:e3:cf:49:99:6e:26:
c4:14:94:07:ad:5a:eb:e8:7c:8a:8c:b5:87:4e:7b:
e1:10:b3:04:d2:66:e2:17:76:61:a0:44:7c:ee:bc:
05:4d:fa:f0:58:5f:f4:ec:ad:d8:1b:88:33:fb:63:
3f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:22:AE:31:EA:78:3A:AB:CB:02:42:B4:A9:2D:54:2E:07:56:D9:D2
X509v3 Authority Key Identifier:
keyid:A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5f:f6:04:3f:99:1a:39:3e:04:fe:ad:fb:83:2d:3c:b4:d8:
13:9c:93:2a:ca:f0:78:95:54:dc:5e:c4:c7:f3:4b:db:e2:16:
b2:ca:8c:2f:b1:56:22:47:62:9b:ec:d1:ab:bb:e0:63:18:49:
9d:75:19:93:b4:c1:9c:56:ec:16:3e:3e:9b:da:7c:35:40:c7:
62:6f:1e:ed:71:1e:35:ef:eb:97:da:a0:aa:c5:4b:f0:be:02:
84:ea:74:15:0f:e9:47:5f:32:9e:8d:03:0a:5e:b4:21:b5:c4:
90:f0:fc:52:2b:57:e4:ae:2a:a5:52:24:50:55:0e:10:21:39:
ee:1f:13:ef:85:90:19:7f:bf:23:14:34:3e:c3:f6:69:6b:e2:
d0:07:8b:2b:ed:0e:81:10:13:2e:1c:2a:87:d6:09:d1:a8:66:
99:c1:1b:74:d4:0b:32:4c:94:fb:6d:c7:a0:b4:13:67:64:42:
0d:9d:f5:f4:f3:92:3f:16:13:11:57:34:71:d3:1c:c6:b2:b4:
7c:c1:5d:b2:a6:23:01:1f:fe:9d:b7:7d:39:46:a7:97:85:ce:
af:4e:c4:c5:a4:42:c5:9a:b5:1e:1e:f5:02:61:72:06:e0:7e:
64:dd:5a:d4:ff:5a:86:00:63:be:27:6b:16:4d:c7:e7:e9:c1:
50:b6:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:43:12 2025 by rpki-client