Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json)
Hash identifier: gAj/iE3f2abEato0eg1Ek+tUCkjy2tHN47bNIdg4EAM=
Subject key identifier: DC:FC:7E:34:7E:60:09:0C:D2:5B:94:B3:6F:EC:57:FF:D7:6C:53:E8
Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134
Certificate serial: 01958C61340094244682693F80BF2F41E7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
Manifest number: 057A
Signing time: Wed 12 Mar 2025 22:02:15 +0000
Manifest this update: Wed 12 Mar 2025 22:02:15 +0000
Manifest next update: Thu 13 Mar 2025 22:02:15 +0000
Files and hashes: 1: VVQWLUW0daB7T4jiaSXgxXCl4ZE.roa (hash: RAYdTMRTLrvbEHCokIXafnM5optXUCpT7i2/x7+Zbyk=)
2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: FSTRxtP3vIm/gT1Fb7PU0tDLKhobCeZy86QQg8zA1jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:61:34:00:94:24:46:82:69:3f:80:bf:2f:41:e7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134
Validity
Not Before: Mar 12 22:02:15 2025 GMT
Not After : Mar 13 22:02:15 2025 GMT
Subject: CN=dcfc7e347e60090cd25b94b36fec57ffd76c53e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ec:13:c8:c7:f3:cb:cb:6c:be:bf:ba:5b:a3:
fb:48:3a:cf:bb:34:71:ae:02:d0:aa:01:41:23:f1:
8c:b8:93:40:86:5c:77:09:30:3f:3d:8e:bd:fe:f8:
b5:88:fe:0d:ef:87:2a:7d:77:1f:97:04:e9:dc:61:
22:55:b6:78:7d:a7:36:4e:c0:0b:03:4c:17:d9:3c:
09:97:54:60:81:05:32:18:1f:f0:58:64:a1:7b:bf:
0e:84:34:e7:cb:97:27:c6:d2:ae:f8:df:6f:9a:fa:
91:21:ca:e7:17:c5:b9:cf:4b:9c:c5:b8:35:82:84:
04:81:b7:11:44:16:ed:f0:5b:66:38:25:f5:ea:09:
7d:4f:db:8f:d2:36:4c:d9:d0:01:e5:0f:a3:40:aa:
a1:71:40:79:11:1b:e0:10:c2:b4:a3:66:33:12:bd:
2e:26:55:8a:3d:1e:e1:0c:f4:ae:81:1e:39:ab:d5:
9e:97:a9:79:7e:31:00:1c:2a:60:33:b4:c4:7e:de:
ac:77:aa:e9:d4:a5:bf:50:d7:9f:a8:50:76:4a:2d:
6f:14:52:0d:e1:47:af:94:78:27:34:d5:49:21:be:
df:70:b6:ca:df:d3:e5:58:dd:76:fd:9a:41:69:b9:
05:e3:e1:03:61:27:a6:4e:67:20:2e:f5:a2:e2:73:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FC:7E:34:7E:60:09:0C:D2:5B:94:B3:6F:EC:57:FF:D7:6C:53:E8
X509v3 Authority Key Identifier:
keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:bf:53:f2:6f:6d:8c:90:e1:c0:de:56:e0:04:d6:04:87:41:
4c:cb:7c:cf:6a:ea:97:40:63:6d:2c:f4:3e:bc:b6:43:cc:7f:
69:9f:84:51:b9:fc:8e:53:06:c1:ca:98:96:1b:0e:e5:a4:98:
61:3f:60:d5:90:6e:fd:1b:be:bd:6f:57:cb:3c:e1:c5:87:94:
9f:6c:31:4f:8e:c8:13:51:a2:93:87:80:ac:06:6d:ec:18:f3:
c0:f3:da:ff:eb:b7:d7:73:df:6d:f8:bb:e1:d0:93:55:59:0e:
2d:3d:7e:c0:91:18:96:48:53:a4:af:3d:db:49:8d:19:73:89:
7a:3a:b6:d1:4d:ab:7b:0a:57:06:bc:5a:fc:3d:5a:5d:d8:b8:
d1:4a:78:97:e2:89:75:f3:c0:7f:e1:96:b8:67:42:41:d5:ee:
05:0c:66:9c:43:e8:22:62:f4:68:a5:52:a1:28:f9:f7:4a:e7:
af:d1:a5:bc:ae:80:18:b1:41:7c:5c:a6:35:23:5e:36:96:c8:
38:18:12:a3:e4:33:f9:f3:8f:3e:e2:71:93:32:69:62:07:ae:
59:1b:40:c5:0f:51:4c:ca:57:aa:22:c9:2f:0b:7c:99:7e:b8:
2c:2b:82:68:73:9e:16:49:6e:47:ea:69:b4:c6:17:f5:56:42:
46:66:5e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:59 2025 by rpki-client