Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
File: eWXNFQMEg9EUsAQZwluZNABY1SA.mft (raw, json)
Hash identifier: 35dprrKojeV2EgiPFjyFOAkGSk0QEWB3JASXpW6cVP8=
Subject key identifier: 48:C6:6F:EA:B4:D7:D5:23:90:AA:32:1C:48:6E:1D:09:24:11:9C:E7
Authority key identifier: 79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
Certificate issuer: /CN=7965cd15030483d114b00419c25b99340058d520
Certificate serial: 0194C508430761F0ECF1BC50322749E2A8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
Manifest number: 0A5D
Signing time: Sun 02 Feb 2025 05:00:40 +0000
Manifest this update: Sun 02 Feb 2025 05:00:40 +0000
Manifest next update: Mon 03 Feb 2025 05:00:40 +0000
Files and hashes: 1: NjtRv5Q_0eZIY70ytziif3lPISQ.roa (hash: /6raoHgUbdMd0T7X1w8hUg8mjsKg/piCtJBKivMkkxU=)
2: eWXNFQMEg9EUsAQZwluZNABY1SA.crl (hash: bhJTKJ4L6P5IwGVLVQWTJRLmrJ5jlzJg4/jNXeCFBT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:43:07:61:f0:ec:f1:bc:50:32:27:49:e2:a8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7965cd15030483d114b00419c25b99340058d520
Validity
Not Before: Feb 2 05:00:40 2025 GMT
Not After : Feb 3 05:00:40 2025 GMT
Subject: CN=48c66feab4d7d52390aa321c486e1d0924119ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:02:f2:91:21:15:4b:20:19:1f:50:58:fc:
3d:99:f8:a8:ed:d9:ef:b2:83:04:2a:5e:14:23:39:
ea:89:dd:74:6d:27:a3:df:97:21:1d:c9:40:02:14:
1a:e9:9c:c0:92:75:b1:4e:bf:6a:b5:1a:58:19:d6:
b5:83:53:3e:b3:ff:1f:e7:ef:6d:ab:35:7b:7b:eb:
a8:5f:1e:42:48:ff:78:f7:2d:d0:a3:35:73:bd:fa:
19:a5:6e:a4:0e:5c:ae:18:58:d6:fa:7b:0c:68:b4:
44:b7:fc:48:c3:c3:6c:10:d1:0d:b1:2b:f7:16:b2:
68:f7:0a:08:0e:68:bc:f3:fe:17:e3:18:1f:81:e0:
4c:fd:1a:e0:14:a6:d7:29:59:f6:93:d4:cd:84:cc:
da:0b:36:1b:78:03:59:73:03:5f:1d:3d:30:c5:5b:
50:ad:1f:80:45:95:db:04:36:95:3e:c0:8c:ba:a6:
8b:90:5a:7c:65:cc:cf:b2:a5:3b:ab:72:73:78:64:
b7:d8:6c:a6:ca:15:92:c4:1f:3b:f9:3b:2a:b2:7b:
dc:7e:19:01:37:d0:78:aa:79:3f:45:d5:56:8d:ae:
00:be:f7:e9:43:7b:81:f7:28:71:69:6d:52:65:04:
52:f5:a0:64:07:45:cf:45:6a:ee:a7:2e:d6:c9:09:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C6:6F:EA:B4:D7:D5:23:90:AA:32:1C:48:6E:1D:09:24:11:9C:E7
X509v3 Authority Key Identifier:
keyid:79:65:CD:15:03:04:83:D1:14:B0:04:19:C2:5B:99:34:00:58:D5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWXNFQMEg9EUsAQZwluZNABY1SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/9c1f34-c52a-462e-b47e-f9a0f48c275a/1/eWXNFQMEg9EUsAQZwluZNABY1SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:56:53:49:1e:6d:07:9c:89:d4:4c:e8:b8:48:b5:6d:9a:b6:
80:e4:e8:d6:f8:d9:9c:2a:0a:d9:9b:01:ae:81:bd:bc:4f:a4:
37:bc:cd:d8:da:5f:4f:cd:2c:fb:eb:6d:be:54:f1:fd:52:bd:
9a:87:b7:0c:00:8c:41:ca:59:2c:fd:5e:24:52:03:5e:fd:b7:
53:9f:79:a0:ae:27:e9:41:c8:04:ed:ff:60:07:d7:29:20:b9:
54:61:6e:43:bb:0c:f6:77:dd:75:29:d9:14:98:31:3f:22:1a:
61:53:15:96:0a:7c:d2:94:02:83:8a:2e:80:75:e0:b5:11:d6:
3b:42:4a:c2:e0:1e:c7:78:8e:53:ad:fa:09:cb:dc:77:24:7a:
92:f9:f9:e6:e5:47:97:4e:15:e5:4e:d0:77:c8:4d:c1:7f:1b:
c1:1a:de:a3:6a:2c:34:ea:87:06:3f:fb:55:eb:99:4d:3e:dc:
57:3e:5a:c5:4c:b1:08:66:c5:91:18:5a:b9:f0:d3:a0:be:0f:
bf:97:a8:83:7a:c1:d6:04:fa:90:f4:20:81:53:36:ff:e7:bc:
81:0b:38:cb:8b:43:b2:52:3d:aa:78:94:f7:ab:e4:86:ae:a6:
ad:28:32:60:be:d5:a5:42:57:dd:af:84:61:9d:b9:c2:11:77:
77:f6:74:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:45 2025 by rpki-client