Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: w3hODXV4DhDGPrMlrNzborisRi9PRGiWs2IdV+angqI=
Subject key identifier: 90:70:41:90:D7:02:E9:6F:AE:3B:B1:CB:F5:2F:CC:5B:3D:C4:84:0F
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 019512478CDCE398D62D3E55303322FF9A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 05:00:33 +0000
Manifest this update: Mon 17 Feb 2025 05:00:33 +0000
Manifest next update: Tue 18 Feb 2025 05:00:33 +0000
Files and hashes: 1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=)
2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=)
3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: aPCAnWFQebDg7IqgPJ69P8UzLis6AHPbq+3n2E1lULg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:8c:dc:e3:98:d6:2d:3e:55:30:33:22:ff:9a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Feb 17 05:00:33 2025 GMT
Not After : Feb 18 05:00:33 2025 GMT
Subject: CN=90704190d702e96fae3bb1cbf52fcc5b3dc4840f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:37:22:87:37:79:46:df:8d:7b:9e:ee:a2:
e8:d2:cf:2f:b3:17:e6:8c:17:e3:5d:e2:8e:ed:2b:
99:9b:75:a4:92:7a:11:3c:da:36:59:6b:ff:ff:94:
4d:af:6c:30:c3:32:39:8b:95:44:85:e0:7a:43:c1:
f6:7c:e0:6e:0c:33:58:b7:fe:b5:f9:f6:4e:0e:1f:
90:15:2f:15:c5:49:bf:3e:6c:c0:78:f6:1e:e8:ca:
5c:75:cc:de:47:00:94:8e:5c:c9:f2:cd:61:1d:41:
30:12:1c:27:77:b6:9b:f3:ae:66:11:1c:2b:a2:ff:
2a:12:cc:c7:09:74:67:c5:19:b7:12:66:f3:62:1d:
6b:22:06:3f:53:33:43:e0:58:2f:52:46:b7:54:81:
86:9b:88:c3:4a:3e:69:56:1d:fd:f8:83:63:1c:7a:
09:93:d3:0f:30:48:c2:e5:29:d8:40:e5:7b:56:df:
11:b5:71:a6:7b:2b:46:48:47:0b:58:1e:ef:39:b4:
e7:ee:5c:a5:93:ad:e5:9d:ef:bd:49:88:79:2b:73:
08:21:01:e3:9e:cb:5c:18:3e:06:7d:45:f6:1c:a6:
1e:02:71:fc:48:3e:e2:a2:e1:f0:06:ac:33:f4:10:
31:88:7f:70:67:cf:be:59:fe:43:ac:7c:b4:74:77:
8a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:70:41:90:D7:02:E9:6F:AE:3B:B1:CB:F5:2F:CC:5B:3D:C4:84:0F
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:48:22:34:9b:09:85:71:f9:0d:5a:e3:31:57:80:30:26:fa:
0d:ae:fa:d7:5b:7b:45:d5:5c:3c:04:3d:1d:c7:0b:6c:2b:00:
55:af:e7:07:3e:60:15:4a:6e:88:33:04:d4:92:57:e2:66:06:
fd:d0:1a:b9:f0:8b:3f:6c:c1:21:bd:7d:38:a1:12:f9:39:6b:
33:b2:dd:5b:f7:fb:b4:42:a8:4a:de:61:7c:ae:3b:8e:7e:f0:
a8:18:55:23:bc:3d:2d:30:98:29:3f:4b:db:6a:e4:c7:5f:fc:
3a:b2:fc:6b:6e:b6:0a:e9:f3:5b:9f:ee:97:e6:ac:f8:33:2c:
89:4a:00:9c:94:27:70:ed:d0:f8:ba:22:f2:4d:d5:43:f1:98:
b6:9b:3b:53:af:54:90:9e:6b:d0:61:16:38:8d:eb:15:c3:d2:
44:99:62:b6:51:09:17:16:07:17:48:7a:39:42:f6:01:24:53:
32:b5:99:6e:77:d1:2e:57:1a:5e:94:31:5c:c9:c9:01:54:f7:
db:ac:d1:44:a1:25:b2:88:39:60:43:2d:40:cd:e1:c6:87:00:
ce:80:78:3d:8a:a9:2f:e1:8b:ac:ac:d8:5d:5b:fd:77:a1:74:
b0:d4:c5:5b:b9:75:0d:55:aa:81:e0:40:43:07:c3:62:86:09:
46:27:e1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:55 2025 by rpki-client