Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
File: cEq5aIQnBz_34XneWvAC4J8jYBM.mft (raw, json)
Hash identifier: BwK8DAMuL/2MfsYlkQeeW9d+KTdEppAhCpeQan8W8iY=
Subject key identifier: 70:C9:77:7C:68:EB:93:81:D8:4E:7D:3B:3F:F4:64:2E:6B:C5:39:28
Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
Certificate issuer: /CN=704ab9688427073ff7e179de5af002e09f236013
Certificate serial: 019512473D73EAA65FBDA5C86AB5D8EAF4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
Manifest number: 145D
Signing time: Mon 17 Feb 2025 05:00:13 +0000
Manifest this update: Mon 17 Feb 2025 05:00:13 +0000
Manifest next update: Tue 18 Feb 2025 05:00:13 +0000
Files and hashes: 1: 6BOfeQqy9IUZ36DNxodiGS7wBoQ.roa (hash: 5gf++9dIYBR0GFOuInOOJProaUQbrotLcp46aQPmrD8=)
2: cEq5aIQnBz_34XneWvAC4J8jYBM.crl (hash: C6A1s/EIKyL7h2iRSqajj/V3MvrYSQWwZJH5BxckoQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:3d:73:ea:a6:5f:bd:a5:c8:6a:b5:d8:ea:f4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704ab9688427073ff7e179de5af002e09f236013
Validity
Not Before: Feb 17 05:00:13 2025 GMT
Not After : Feb 18 05:00:13 2025 GMT
Subject: CN=70c9777c68eb9381d84e7d3b3ff4642e6bc53928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:99:9c:58:de:79:4d:43:63:3b:8b:21:2e:
d1:a3:15:6b:3c:73:27:ac:29:41:bf:17:df:ca:6f:
6c:8d:6f:f3:d0:5d:f0:a1:23:30:96:c7:cf:da:e1:
38:b7:fc:d1:e7:58:e6:38:83:05:5d:d7:10:f8:c1:
b6:b6:00:2a:f5:28:14:9e:9d:b3:1f:91:0b:e0:ad:
f1:ec:7a:41:17:de:d9:22:e5:23:c0:96:3a:e3:ee:
15:0c:9f:f7:73:12:62:16:6f:85:da:6d:56:ed:61:
f1:58:28:5a:c5:55:bb:c8:ba:70:ce:78:e1:f6:ae:
cb:86:c6:f2:70:5a:b5:87:c3:d5:b7:13:ff:9d:a1:
51:bc:56:91:ad:fe:78:5c:59:6f:d2:f4:36:c0:a0:
54:07:d5:46:fa:5d:a5:2d:3b:f1:88:78:d9:c9:94:
06:29:54:70:69:53:d5:46:3e:62:74:83:bd:e6:48:
25:30:26:5a:64:99:e1:fe:12:d7:8b:6f:08:cd:de:
f2:65:9f:24:6b:66:88:5c:3e:1d:3d:10:1e:39:ba:
38:5b:0c:0f:8e:99:c6:73:b9:8a:67:36:05:97:c1:
14:19:47:18:55:24:ec:c5:b1:42:dc:e7:a4:77:df:
b3:b9:ca:49:05:f4:68:74:39:2d:35:f4:e7:2c:26:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C9:77:7C:68:EB:93:81:D8:4E:7D:3B:3F:F4:64:2E:6B:C5:39:28
X509v3 Authority Key Identifier:
keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:97:9c:3c:f3:4d:e9:29:b9:35:fa:f2:78:76:cf:c6:f0:2d:
a7:73:ee:7f:b7:6b:a6:f3:5a:37:ac:7e:86:8a:0f:84:ae:7b:
94:23:0a:0d:30:b5:90:fd:2b:fb:27:70:a5:85:c0:39:fd:88:
94:15:75:9f:5b:b8:ec:bf:c7:3d:87:52:66:67:35:1f:7f:a5:
f1:c1:87:35:e0:d1:39:a7:78:10:8a:5d:b0:be:38:17:da:f9:
81:47:ef:5e:e4:70:c9:d3:6c:47:0c:f5:a3:3e:c8:c4:f5:02:
be:2f:1b:0a:cb:e8:86:ce:01:76:80:8e:26:8d:dc:0a:56:21:
fb:5f:53:fa:12:85:4e:dd:d4:64:5d:c7:02:44:e9:e8:34:b1:
2c:a2:d8:98:99:06:f9:f0:c7:9a:a3:a5:bf:8a:cf:f0:45:66:
25:5d:6b:89:75:a2:53:68:e3:91:fa:0a:37:88:0e:f8:bf:b5:
92:a0:bd:6f:e2:13:95:57:90:aa:7f:34:49:f6:47:48:2c:f0:
98:05:04:17:09:08:c5:4a:08:eb:b4:b4:fd:58:70:f7:e9:f3:
89:af:cf:56:66:65:9c:6d:cd:26:4d:83:95:5c:ec:3a:5c:f0:
c8:23:98:f6:e5:b3:24:09:e2:7f:47:03:4f:a8:4c:60:4b:91:
b7:73:bb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:45 2025 by rpki-client