Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft
File: eSWRAsFpk85eE7CMumDu2tf5J3M.mft (raw, json)
Hash identifier: 5FDC76TLep6JCMU842xphpGAPQP4xDZmgnxruSwZajI=
Subject key identifier: F4:B1:F8:95:AC:27:DE:25:0A:4C:33:1D:23:A7:CA:AA:37:35:17:3A
Authority key identifier: 79:25:91:02:C1:69:93:CE:5E:13:B0:8C:BA:60:EE:DA:D7:F9:27:73
Certificate issuer: /CN=79259102c16993ce5e13b08cba60eedad7f92773
Certificate serial: 0194C3BE7AF1244215E09025B4ADFA3A8BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft
Manifest number: 2B
Signing time: Sat 01 Feb 2025 23:00:27 +0000
Manifest this update: Sat 01 Feb 2025 23:00:27 +0000
Manifest next update: Sun 02 Feb 2025 23:00:27 +0000
Files and hashes: 1: 2XnqswJhUp8Q7QKYSg6mYnJtPx0.roa (hash: GVTo7but2rFEi3PE0oMZ20Q2ZfZFSUAgiohCKBnP4LM=)
2: eSWRAsFpk85eE7CMumDu2tf5J3M.crl (hash: sBpq4tg/rhqCaZFC4+zAYlqPssmR3iTAtkX1Jj7yYHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:7a:f1:24:42:15:e0:90:25:b4:ad:fa:3a:8b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79259102c16993ce5e13b08cba60eedad7f92773
Validity
Not Before: Feb 1 23:00:27 2025 GMT
Not After : Feb 2 23:00:27 2025 GMT
Subject: CN=f4b1f895ac27de250a4c331d23a7caaa3735173a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c2:e6:02:5a:f9:34:16:4b:cd:2c:66:e3:c2:
5a:c5:fa:7b:85:50:c9:09:6c:28:47:0f:2e:d7:1d:
1b:06:97:45:05:5e:b3:51:48:07:f4:a1:1f:b9:2a:
00:86:30:a7:ad:0c:ae:b1:ba:00:52:82:79:43:64:
d3:c2:25:f0:67:55:a7:fe:c4:0b:86:56:a8:c0:be:
0b:97:96:cf:6f:0d:c2:fb:32:34:7f:17:47:90:62:
68:e9:4f:59:a2:b9:62:25:3e:c5:02:33:3b:ec:c1:
fb:0d:a2:61:35:b0:e6:32:35:87:95:b6:d9:f9:1f:
7a:f0:f3:24:0e:9d:91:60:50:17:14:b6:c8:e4:e8:
97:42:90:3e:ad:52:05:12:91:bf:05:19:af:61:92:
a1:4d:a2:78:b4:df:19:45:50:14:88:09:f1:98:05:
0e:4a:5c:43:56:d8:09:e9:02:ce:5f:7f:ad:db:29:
a1:f3:47:85:d0:09:9c:cf:55:be:93:18:29:d0:6b:
25:06:ad:8c:b7:0a:f8:16:80:01:ef:39:cc:47:b0:
48:31:d6:e9:e7:8e:01:dd:30:7d:b3:ef:f3:3a:0c:
ba:1e:3c:9b:4c:90:6b:0e:64:4a:ff:66:71:f3:2b:
bc:ae:dc:35:79:39:4a:86:5a:59:3a:00:00:3d:2c:
52:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B1:F8:95:AC:27:DE:25:0A:4C:33:1D:23:A7:CA:AA:37:35:17:3A
X509v3 Authority Key Identifier:
keyid:79:25:91:02:C1:69:93:CE:5E:13:B0:8C:BA:60:EE:DA:D7:F9:27:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fa:f1:26:70:b3:db:e1:4f:58:46:e6:10:a6:45:1c:c3:9c:
92:d6:a7:bf:bb:a0:6d:e5:2c:16:8b:0e:18:31:1b:2b:47:41:
94:74:fb:8f:3a:c2:1e:e1:0e:b6:96:e5:f3:97:5b:75:38:b9:
c9:a0:f7:ae:90:b4:cd:28:9a:f8:32:68:18:07:62:dd:d9:42:
80:ca:10:79:2c:2e:eb:de:0b:cb:80:67:47:5f:05:aa:97:ea:
e5:a3:36:7c:a1:bc:84:b7:52:64:f4:36:d6:9e:5a:75:bd:9c:
4f:2e:e3:d5:e7:37:d9:69:1d:cb:8c:57:4c:4b:05:f7:16:1a:
7b:ab:2b:51:b0:65:34:5b:83:55:38:7c:4a:19:57:99:9a:d7:
da:01:14:67:11:b7:af:30:32:56:ca:9a:75:86:76:a3:38:4b:
fb:93:8a:11:dd:2c:f1:0e:b3:5f:4b:50:0c:54:d4:5b:00:0c:
fd:e6:ed:18:60:c9:11:ea:a2:ac:8a:fe:7f:83:cc:8d:70:14:
d5:7e:48:fe:b0:cd:48:15:51:4b:0c:43:d9:93:cc:35:47:d0:
3b:55:96:ed:20:e8:ae:6d:f4:43:84:bd:8b:ea:fb:01:22:00:
e2:89:da:43:82:a3:05:31:4d:96:df:fc:b1:e6:81:d4:e5:da:
70:05:ad:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:44 2025 by rpki-client