Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
File: c21yTiOe-38ve-pSap4MXn_Im74.mft (raw, json)
Hash identifier: T2Iv6YUY2I4Hqscm3Zm16n1/Td1hHIGXGdqup5zYVOM=
Subject key identifier: 7F:19:F8:11:22:66:16:39:D7:A5:B9:7C:49:9D:C5:59:CA:02:65:D4
Authority key identifier: 73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
Certificate issuer: /CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Certificate serial: 0194C4D13DB79960EACAE36FDE040F5EF420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
Manifest number: 142D
Signing time: Sun 02 Feb 2025 04:00:34 +0000
Manifest this update: Sun 02 Feb 2025 04:00:34 +0000
Manifest next update: Mon 03 Feb 2025 04:00:34 +0000
Files and hashes: 1: 1fA5PORVd3jPdWz7xA5f_vnyxD0.roa (hash: ykI4OL9fWsgYZNYcziWcElBypDNzSjFchoDv23Mnzrs=)
2: c21yTiOe-38ve-pSap4MXn_Im74.crl (hash: pm7x4A1r1LnGgMvYb8cCZxNd1nqS48LrB06aXEcSRSA=)
3: uy61Z_8RU66-jPuUHYoqaPIOhik.roa (hash: L9o3XCU/iUGm+BZYXWE1H2NgYx1sjgSieqKtDG+tWqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:3d:b7:99:60:ea:ca:e3:6f:de:04:0f:5e:f4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Validity
Not Before: Feb 2 04:00:34 2025 GMT
Not After : Feb 3 04:00:34 2025 GMT
Subject: CN=7f19f81122661639d7a5b97c499dc559ca0265d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:20:7c:bd:c1:23:c7:69:63:a2:f2:72:e0:98:
03:58:ff:58:b5:43:0b:ad:99:c4:a8:79:a4:36:bd:
b2:ef:6e:a7:d7:73:ec:4d:f8:67:8a:e0:49:38:97:
52:f6:f7:6c:07:a2:db:29:05:9b:d7:12:93:00:ff:
5e:ea:41:39:c9:70:66:91:64:83:8b:a8:c3:50:88:
aa:84:a9:ec:a0:76:a0:c4:fb:d3:d5:a6:8a:aa:08:
90:13:90:f0:a7:bf:38:25:2c:eb:83:d5:02:81:d9:
cf:3c:5f:fc:80:2a:34:8b:a6:93:53:90:88:7a:74:
2a:4f:af:8a:cf:32:89:45:a5:bb:20:58:2d:ef:30:
d4:fb:d7:ea:d1:90:f2:c3:f4:6b:50:bd:40:d5:64:
e1:22:85:ee:69:a3:50:13:8c:d9:46:06:ed:93:f4:
12:6b:59:fb:c3:89:92:12:c5:5c:e9:61:00:d7:59:
ef:1e:1e:dc:26:fa:6c:2f:1a:e4:4c:cb:ed:5b:5f:
c5:97:a5:13:aa:1a:bf:86:5b:57:0d:92:e6:aa:3e:
94:fa:d2:88:23:4b:ed:e5:33:7e:e1:67:35:ec:e4:
df:61:d0:8f:c7:03:1f:2d:55:40:5e:b5:f1:5a:c8:
8f:e4:77:b5:fa:0c:55:66:f3:42:a4:e2:9a:e5:e9:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:19:F8:11:22:66:16:39:D7:A5:B9:7C:49:9D:C5:59:CA:02:65:D4
X509v3 Authority Key Identifier:
keyid:73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6b:34:8a:dc:bd:3a:64:6a:9d:0e:44:8a:49:c7:de:a4:41:
7f:a2:84:a2:9c:99:01:b0:b9:71:b7:b0:18:cf:7b:f9:1d:97:
0c:a7:77:6d:df:e8:ab:81:12:e1:c0:15:ea:d6:bb:3f:50:a7:
7c:f8:53:fe:ce:be:e3:35:fb:4a:3a:20:cb:29:8d:79:cc:bb:
2a:8f:68:f5:bf:7d:91:b2:db:3d:1f:f0:84:9a:6e:69:b7:dd:
05:da:ac:38:90:5c:4c:64:c0:e6:17:c3:2f:6f:28:f9:15:e9:
2f:ff:46:f7:6a:8c:2c:19:61:28:f4:d5:0c:5f:94:8f:ff:d2:
92:28:93:57:09:05:ae:d2:2d:7d:ac:26:89:75:3d:9f:04:b3:
53:a9:12:d1:d0:9b:50:b9:c5:d6:ea:95:ea:da:ca:e1:8a:01:
c6:8c:1d:c2:50:f8:a5:93:9e:1b:45:f9:84:b4:b7:58:07:a4:
7d:82:d5:9c:e6:16:91:27:ff:ed:19:31:3e:0e:c7:cd:2a:dc:
b6:d0:dc:a2:b1:97:be:89:56:92:b9:0f:79:48:6c:dc:70:a6:
63:b0:78:11:7e:06:e4:de:7c:af:be:19:91:86:4b:f1:a9:bb:
74:99:e3:26:f1:69:f5:16:06:3b:a3:75:a3:7d:97:2e:97:17:
47:49:fe:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:22 2025 by rpki-client