Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json)
Hash identifier: R6o/lkixbcf4kIMCPWDjr9iGSTD/kCw6BAvi/9atm3Q=
Subject key identifier: 5F:99:1A:06:3E:6A:68:30:46:93:80:76:89:05:DF:64:BE:A6:95:04
Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134
Certificate serial: 019510C7F4894E53E471B43CDAD67FB870C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
Manifest number: 053A
Signing time: Sun 16 Feb 2025 22:01:34 +0000
Manifest this update: Sun 16 Feb 2025 22:01:34 +0000
Manifest next update: Mon 17 Feb 2025 22:01:34 +0000
Files and hashes: 1: VVQWLUW0daB7T4jiaSXgxXCl4ZE.roa (hash: RAYdTMRTLrvbEHCokIXafnM5optXUCpT7i2/x7+Zbyk=)
2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: JpJOWvEUyiabx/0RNrJIbFhsVaL7dnHc2JfE2t7sggE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:f4:89:4e:53:e4:71:b4:3c:da:d6:7f:b8:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134
Validity
Not Before: Feb 16 22:01:34 2025 GMT
Not After : Feb 17 22:01:34 2025 GMT
Subject: CN=5f991a063e6a6830469380768905df64bea69504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:06:25:f6:77:a0:dd:f1:3a:cf:aa:5d:4b:
da:78:59:c8:2c:2d:58:cd:34:80:33:90:c2:52:72:
35:d0:9b:5c:50:38:d9:3b:ad:6e:fe:c2:27:44:db:
23:d0:f2:b7:6c:d3:04:e2:b3:5b:f8:3b:c8:1b:1a:
f5:ed:75:4b:fc:f2:58:c1:f1:54:6f:a3:91:e2:d1:
5d:22:f5:25:cc:51:a9:d0:cb:ea:ed:33:c0:9d:59:
e9:24:e8:b0:81:ef:66:1a:7e:e4:c1:81:4a:62:8a:
cb:97:96:6b:f8:8f:02:c9:22:82:47:d8:2c:b4:10:
dc:0e:f4:a4:ce:55:f5:e2:91:0c:24:80:d3:5c:d5:
79:7c:ac:67:85:b9:bb:86:24:8d:b8:4f:25:22:dc:
a5:b4:b4:c5:43:eb:e4:41:51:e2:7e:35:27:e3:c2:
10:3f:dc:26:5b:a3:13:bd:2d:e0:c4:19:bd:d6:c3:
b1:17:27:5b:12:af:4d:e2:fb:70:5e:b9:76:33:62:
8d:fc:98:6f:4f:25:30:64:32:88:9b:c2:7a:37:38:
ea:f3:bf:5d:e8:c0:84:a1:43:c9:63:49:22:6f:00:
77:50:27:9d:40:82:91:07:14:51:4b:38:e6:88:99:
76:23:aa:fb:2a:e8:e4:01:a5:5e:71:0f:4c:e9:89:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:99:1A:06:3E:6A:68:30:46:93:80:76:89:05:DF:64:BE:A6:95:04
X509v3 Authority Key Identifier:
keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:16:f1:44:f9:20:f5:1a:48:6e:a2:75:5e:a2:96:66:75:0b:
ce:b7:4b:af:77:ff:bf:be:72:cd:e7:61:43:fc:9c:20:42:61:
42:05:88:f9:0a:6e:4b:22:8c:21:7f:bd:82:40:21:29:b9:4c:
7e:fb:4c:70:21:73:9e:cf:37:ac:83:a3:97:21:a9:ed:42:50:
d0:08:de:8b:79:37:e2:89:38:80:d4:e6:8c:ee:c1:9d:d4:a0:
96:3c:4e:02:5e:39:ee:d9:04:fb:14:3a:53:36:15:a0:2d:ce:
a5:53:92:e6:02:c1:7a:56:a6:ba:11:b6:ed:fb:e7:3f:8d:02:
34:bf:eb:f2:e3:3b:4a:b7:11:10:06:b0:ec:f1:4e:fb:fd:28:
28:58:a0:ab:9e:9c:0f:ae:e2:b5:62:2f:53:2d:07:c5:8b:f9:
d6:88:39:52:e2:a1:15:e1:df:73:bd:68:1f:48:dd:03:74:4d:
2e:77:34:fd:c6:5d:02:9d:54:36:fc:f8:fe:f4:0e:87:b1:d3:
76:85:17:f3:d8:a2:a1:0d:f9:6c:2f:92:fc:66:82:29:d3:78:
20:e3:44:6c:d8:f7:b2:0d:51:26:4c:e0:ab:d7:78:e3:97:cf:
89:d1:eb:4e:29:89:59:43:39:9f:e5:db:64:29:1b:07:ba:b4:
a5:ec:66:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:41 2025 by rpki-client