Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
File: SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json)
Hash identifier: EPBTXosLAZOzU7WmWPvX/pM6bV+3q9pZ8F9e5CIQJ90=
Subject key identifier: 05:48:F1:87:B4:6C:0A:FB:14:E3:78:19:BA:08:78:3C:42:8E:0E:5D
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 019511A3181863D649C0E342FC8109DB6871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 02:00:55 +0000
Manifest this update: Mon 17 Feb 2025 02:00:55 +0000
Manifest next update: Tue 18 Feb 2025 02:00:55 +0000
Files and hashes: 1: BHvEiTbi4Pq6B9PpmT5f6n87vL4.roa (hash: s+QevCZ3wcDACFh+jWTrJPdapoQkuOB0iQkRIdmgUkk=)
2: Nvgx0NStgiF6lAwa5XAPUa97GUc.roa (hash: HepcNDvL/nGXjv68tFuvUcj3BhJTbTJLihV6JiWEI70=)
3: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: RH9uuQeGyxt4T+/wZ4eK1HtJXxpylk3hP2h80H9JyE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:18:18:63:d6:49:c0:e3:42:fc:81:09:db:68:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: Feb 17 02:00:55 2025 GMT
Not After : Feb 18 02:00:55 2025 GMT
Subject: CN=0548f187b46c0afb14e37819ba08783c428e0e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:37:5f:d4:1a:08:a5:bc:84:ab:b3:2f:e9:
a6:0c:8d:a3:34:e3:a0:41:ac:ec:b6:39:05:b7:e2:
1b:25:4e:1b:6a:0e:f7:f2:9f:ac:f8:75:f1:3b:d6:
1e:79:62:89:15:4f:39:bf:69:31:f9:34:d6:09:a5:
a1:7c:35:f5:d9:03:a5:7d:8d:ad:ec:ba:f0:55:ff:
91:b7:0a:57:89:5f:f1:64:dd:2b:f8:e9:c6:dd:6a:
1c:10:92:1e:7e:70:a7:79:02:e0:8e:ce:6d:93:7e:
91:e8:a3:0c:dd:af:2c:42:49:93:1d:73:b1:f5:9c:
cf:c6:2a:e4:fb:8e:0d:d7:63:c7:74:72:4c:97:26:
29:b6:bd:56:0f:f6:d6:c9:06:ed:8c:4e:37:70:90:
af:28:81:82:3e:77:0e:0b:2e:b9:7b:0f:59:78:ad:
00:d6:b2:b6:af:e5:9e:8d:5b:59:47:85:1e:7b:2f:
15:d2:e2:97:33:8b:00:72:53:66:43:6e:6e:21:ec:
e6:3b:7e:01:7d:a3:2b:28:04:a0:1d:de:f7:c5:62:
ca:bd:4b:84:69:38:aa:42:99:5f:40:53:a5:14:0d:
71:fc:06:72:62:d1:e0:3e:51:47:37:9e:ac:fb:0e:
15:e2:b2:1e:f7:5f:5c:42:66:13:05:85:78:d0:07:
2b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:48:F1:87:B4:6C:0A:FB:14:E3:78:19:BA:08:78:3C:42:8E:0E:5D
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f5:31:ee:99:c9:f8:71:5e:9a:85:e6:de:13:22:f5:f1:2f:
e9:96:ca:c5:ae:02:a2:d7:8a:fd:58:99:6f:ea:e5:b3:be:2c:
fd:27:0b:a7:7d:de:fb:2f:4b:09:46:ed:37:56:a8:ec:af:87:
9d:9e:46:c6:1d:f5:84:e8:fb:c3:7b:8d:6f:d4:06:f5:32:9f:
69:a6:1f:64:0a:8a:d6:54:6e:86:a2:3d:19:ae:65:2d:e4:87:
81:5f:a8:b0:ab:60:58:7b:93:6b:68:75:02:2a:54:21:60:79:
db:d7:71:0c:ef:12:8f:75:9f:b0:f8:63:1b:fc:9c:ba:e3:c4:
e1:d7:88:7a:6e:1b:ea:2d:fb:19:69:c7:2c:fd:28:2a:27:51:
f3:ec:cd:69:38:09:4a:cf:64:53:62:0f:48:9b:91:c9:06:37:
ba:94:5c:67:28:ef:3c:c1:3e:e4:3a:e0:a8:31:18:62:6d:48:
fa:b8:ca:dd:ed:fa:3a:9d:34:3c:49:2e:d5:a1:68:61:99:ee:
6b:86:0d:9d:83:84:32:f3:bd:f2:af:f3:76:0d:4a:1a:32:1d:
a2:ad:26:94:be:0b:52:3e:cc:26:b7:64:a9:05:0a:4b:5c:db:
dd:06:88:93:28:81:b7:4c:a4:3d:34:a8:94:fa:ec:9e:00:78:
50:06:1e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:31 2025 by rpki-client