Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: MfR3HKYkxgtYnVDmbn/Iah+RjrIPcbljek6o+qLK6bA=
Subject key identifier: 2E:8D:2A:D4:11:E0:A8:52:FC:CD:3B:91:5F:BA:22:05:6E:C5:2E:D6
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 019511A2F457656F09C7B2CE77FA1D986174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 02:00:46 +0000
Manifest this update: Mon 17 Feb 2025 02:00:46 +0000
Manifest next update: Tue 18 Feb 2025 02:00:46 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: MhNvxvFW92wEZnR/3b8gr9l+vnz8VMH/rdItyCyYT9k=)
2: giZEtebKwrV_K5a1acLqZif6N-k.roa (hash: lzFFffl4lpHRD7ZMSU5Ky5FbKZMuom72Ko9x5UDmCAY=)
3: r2MDM9YmqLIjylrH2WoKfJ8F-hk.roa (hash: 5oJl1RSDkKpv/NrAOtgSj/GjDfrDxGm50iGVTH3ViuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:f4:57:65:6f:09:c7:b2:ce:77:fa:1d:98:61:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Feb 17 02:00:46 2025 GMT
Not After : Feb 18 02:00:46 2025 GMT
Subject: CN=2e8d2ad411e0a852fccd3b915fba22056ec52ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:b6:95:f5:e1:7a:f9:ff:9d:99:e8:d3:13:
eb:24:ae:f2:8d:11:ab:e6:4c:1b:0c:26:9d:38:7d:
8a:70:3d:44:4d:e3:e1:d2:7c:60:52:92:fd:94:82:
0e:a6:e9:25:51:d8:60:07:8e:06:97:6a:00:c3:e6:
a9:bc:74:90:b3:c5:2d:5f:c0:12:c6:6a:20:c2:78:
d8:e6:7e:c2:48:38:58:a8:93:69:f0:75:65:30:cc:
89:ad:3a:25:c1:ce:d7:ec:87:37:c0:65:e0:b5:21:
8f:b8:19:af:58:8d:51:8c:88:98:a9:7b:c6:ee:5c:
20:44:3b:3c:02:48:97:5e:20:3c:16:20:da:43:c2:
c4:87:3e:c9:31:9b:20:04:ff:13:e4:13:11:d9:7f:
5a:9c:58:d1:1a:72:95:a9:bc:00:46:71:18:79:fe:
c0:8f:03:76:af:1d:66:7f:ad:8f:e2:b0:b9:da:90:
98:be:99:a3:27:ce:0d:16:22:36:66:e2:be:27:e6:
97:6c:d8:7a:25:89:ae:36:c8:15:f9:a6:cc:c1:07:
81:59:59:b6:50:75:55:70:21:90:63:b2:3d:f0:08:
0a:37:fe:2f:7b:4e:4c:e0:9d:45:f0:26:c1:3e:e1:
63:c1:ca:99:96:ec:1e:a7:6e:50:82:3d:2c:b3:6e:
d6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8D:2A:D4:11:E0:A8:52:FC:CD:3B:91:5F:BA:22:05:6E:C5:2E:D6
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:84:c6:01:42:9c:86:f8:f5:0f:a9:8e:82:92:f5:0b:19:b2:
21:3a:9d:1b:ec:d5:27:2f:36:2f:f2:14:74:15:c8:ea:c4:b5:
35:e4:1a:a0:f1:0d:30:79:7f:21:05:f7:7d:55:9f:36:b4:4f:
6a:67:10:93:e0:53:a3:b5:cc:47:a6:fc:7b:30:e6:1f:5a:34:
9e:17:39:59:c5:ba:e1:6c:97:95:80:25:8b:8f:28:f4:d3:91:
2c:8c:04:f9:d9:18:77:98:63:83:79:98:b7:a5:c2:4a:86:23:
28:6d:46:1b:86:aa:5d:03:ac:68:27:67:da:1e:df:50:ff:50:
f9:1a:aa:b7:49:c8:91:df:01:5d:13:bf:e9:e0:33:38:95:93:
c3:e3:3e:c7:75:9e:4a:92:ce:e4:47:05:6e:ba:ec:f9:1b:74:
96:81:8b:bd:9c:03:2c:46:af:18:e7:f8:39:6e:6b:09:e5:0a:
6c:39:fe:87:cf:e3:a6:6e:84:39:b8:44:37:71:79:31:67:e0:
b9:6d:f0:19:23:63:da:ea:d6:ec:cb:be:0b:b4:f5:4a:23:30:
ae:2a:91:d4:30:fb:04:8e:8d:67:4a:92:ee:21:bd:1f:df:65:
b3:15:2e:6f:4f:bf:ce:05:a0:cf:99:bf:61:ae:4e:8e:c6:4e:
2e:86:77:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:27 2025 by rpki-client