Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json)
Hash identifier: C+28WjuJEybfpgyE631YchJlJ3SdaMpLO5hza6gXeno=
Subject key identifier: 88:A7:F3:4C:43:54:7B:A2:3B:41:FA:0F:4A:AC:5C:CC:96:5A:97:D4
Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Certificate serial: 0194C3F54F841F016D9CDC93F1FC8951FAD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
Manifest number: 4F
Signing time: Sun 02 Feb 2025 00:00:21 +0000
Manifest this update: Sun 02 Feb 2025 00:00:21 +0000
Manifest next update: Mon 03 Feb 2025 00:00:21 +0000
Files and hashes: 1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=)
2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: +iyvtIG34/0WtDKO4S/Lv3tV/Fv8a2Ok5fPO9IeEIIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:4f:84:1f:01:6d:9c:dc:93:f1:fc:89:51:fa:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc
Validity
Not Before: Feb 2 00:00:21 2025 GMT
Not After : Feb 3 00:00:21 2025 GMT
Subject: CN=88a7f34c43547ba23b41fa0f4aac5ccc965a97d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:0b:68:0d:c6:fb:55:63:12:cb:5c:69:51:
f5:57:c4:0f:bf:38:ea:27:08:db:54:48:6b:c7:fe:
7a:4c:f8:b0:96:b4:bd:36:c2:24:24:31:d6:dd:ad:
94:0b:20:49:b8:37:79:44:e8:10:05:3c:39:e3:91:
78:40:db:ce:33:a3:92:48:05:32:b1:bd:b2:6b:f3:
54:fe:4a:c8:e9:f1:e7:5d:27:a0:4f:b1:2f:81:60:
0b:f2:60:75:66:e5:55:43:66:28:49:e7:3c:a1:71:
d7:f2:df:51:d0:d9:d4:7d:10:7c:0a:cf:05:57:b3:
37:1d:2a:e0:7b:b7:6c:dd:c3:0a:cc:9e:38:e4:af:
c3:30:ce:0b:3d:69:e5:e7:42:34:bc:4a:27:7f:46:
76:ee:d7:96:d0:3b:24:f8:0d:6a:59:02:59:d3:e9:
d7:f0:fe:7e:4a:20:08:18:af:33:63:8b:0a:49:60:
d5:e8:2d:d7:11:b2:ad:88:40:bd:84:3c:b7:da:43:
a2:d7:83:24:dd:19:75:53:95:64:06:d3:62:52:cf:
de:4d:21:82:a8:81:69:8e:0d:46:46:0f:29:44:44:
21:b3:53:b7:d7:b7:fc:b9:2e:25:d1:47:bb:b0:9c:
db:86:19:d1:83:ad:77:e3:28:f8:17:36:a2:52:7d:
30:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A7:F3:4C:43:54:7B:A2:3B:41:FA:0F:4A:AC:5C:CC:96:5A:97:D4
X509v3 Authority Key Identifier:
keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fb:80:f4:e1:97:1a:48:a5:28:e2:3f:34:dc:23:ed:9b:81:
28:27:23:7b:72:e3:de:cd:95:37:ed:55:64:78:8f:da:96:26:
3b:56:e7:d1:e1:bf:ee:b6:a9:8b:99:fc:30:82:c2:17:91:ec:
92:ce:40:05:33:16:76:b2:cc:36:ed:53:82:b9:59:8d:6a:16:
70:d4:af:a2:52:2f:59:c5:54:b0:6e:47:e6:39:57:98:37:f7:
e8:a2:cb:8f:ac:c0:23:54:24:18:56:2e:6b:b0:6c:e9:6d:1c:
c6:72:87:ac:2e:db:2e:ea:06:39:ee:ff:09:16:a8:19:95:99:
75:a1:17:6b:f8:be:d9:71:20:db:a3:3a:4b:71:16:12:02:fe:
df:8b:5d:dd:59:b2:06:b7:f6:70:eb:c6:07:9c:42:1f:71:06:
db:83:f4:d7:cc:09:d4:27:6c:41:0a:c9:eb:fc:79:4c:d4:12:
65:07:54:92:1a:3b:91:b6:f9:0f:96:7e:99:bd:08:a5:6d:c8:
c6:0d:9f:70:35:c8:79:56:1e:4c:06:3f:10:04:c6:53:c9:d5:
d4:2e:82:eb:b5:0e:4d:f8:24:4f:2d:d0:92:6f:42:32:ce:6c:
f2:c7:74:21:3b:a1:79:d3:9a:a5:69:dc:fd:f8:04:01:ba:77:
e9:6b:d5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:00:17 2025 by rpki-client