Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier: H3xAbbkQJkdQFmka+EZqrNYwhroQl5J8vnR4g55KjF8=
Subject key identifier: 2D:39:6C:0C:83:C6:1E:05:5D:20:38:57:27:C1:9B:79:3E:A2:10:DD
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer: /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial: 0195127E8F96CC9E0BDC2445D9D5CA7B16E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number: 13E9
Signing time: Mon 17 Feb 2025 06:00:38 +0000
Manifest this update: Mon 17 Feb 2025 06:00:38 +0000
Manifest next update: Tue 18 Feb 2025 06:00:38 +0000
Files and hashes: 1: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: jPDc0ToTQK0Y0KUmtY/WGPzlZoWcnusZWSgiHARbhX8=)
2: X6zK_zIJEJ4ZvUFy-bZ0YYb3PXk.roa (hash: 73bfs58Aeh5k14l65MP0sPTsNd9XJmQVqU0en4/SkEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:8f:96:cc:9e:0b:dc:24:45:d9:d5:ca:7b:16:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
Validity
Not Before: Feb 17 06:00:38 2025 GMT
Not After : Feb 18 06:00:38 2025 GMT
Subject: CN=2d396c0c83c61e055d20385727c19b793ea210dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5c:12:c1:b7:b7:9e:9e:b5:ef:41:51:0a:e4:
14:54:01:a5:f7:54:fe:73:b5:79:a3:08:dd:26:5a:
49:83:f6:81:7d:68:5b:a4:c2:c0:36:14:96:10:9c:
0e:1e:f6:10:7d:c6:b4:8c:31:ef:2c:f4:6b:25:0d:
66:ae:17:e9:8f:a1:83:69:2f:3b:ab:1b:66:f2:83:
91:89:30:cf:b0:f3:2f:81:42:25:10:14:13:f0:11:
ba:2f:52:c1:d2:34:e1:05:e2:c1:91:bf:74:69:ee:
49:90:57:3f:cc:96:33:f8:b9:7a:8f:b8:28:4e:f4:
3e:bc:79:b0:e7:9e:0c:84:2f:89:1f:cc:bd:95:32:
af:b0:dc:e6:30:34:9d:fc:fe:7e:08:dd:32:3f:52:
10:fb:bb:d3:7b:93:35:8a:09:32:e6:02:9b:96:d5:
9f:26:86:d9:f5:34:1d:52:72:ed:a4:7f:4b:b3:31:
a4:93:61:00:6b:a6:77:01:33:7c:e1:94:2e:fb:06:
f5:39:4d:b7:48:10:7b:d8:32:23:1d:6f:9b:16:ee:
09:b5:2e:85:0e:7b:12:0a:83:d6:3c:e0:52:25:9d:
98:a3:dd:78:63:97:8b:08:cd:3a:7b:68:9c:fd:90:
4b:8f:1f:09:d6:9f:9a:3c:2c:08:da:e9:13:94:2d:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:39:6C:0C:83:C6:1E:05:5D:20:38:57:27:C1:9B:79:3E:A2:10:DD
X509v3 Authority Key Identifier:
keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a8:47:40:b4:6c:01:74:0e:b0:e4:e3:b4:a7:21:b1:f9:e6:
57:bd:72:dd:d9:e0:05:8b:0e:ec:0e:e0:6a:02:0a:78:7c:ac:
9a:0d:91:65:76:25:a4:5d:35:81:c1:13:84:4e:f1:d1:25:f1:
c9:ee:e7:c0:00:31:22:10:ae:49:7a:dd:ab:29:e4:c8:9c:d9:
33:13:0c:42:3d:14:8d:5a:d2:e0:87:ed:96:86:82:c6:03:b7:
ad:a7:fc:ea:55:28:76:dd:80:58:05:51:0c:70:7c:1e:e9:d6:
81:32:31:98:36:2a:f0:b8:ef:cb:57:9f:27:df:c7:35:6a:f7:
9f:22:76:c8:21:8e:40:b0:f0:a3:19:39:71:15:d5:40:33:01:
9c:c0:17:8a:95:08:e5:4f:00:67:d8:3f:09:89:b1:ac:30:c1:
29:ea:54:3f:50:36:4b:e4:ef:18:95:d7:25:9f:e0:9d:e0:7d:
b2:74:50:14:9f:22:6a:f6:f4:54:cc:5d:38:24:1b:33:af:9c:
49:30:31:56:44:9b:c5:08:30:54:8a:70:b6:60:06:d2:2b:8a:
62:c7:88:cf:71:1f:63:c4:30:4f:6a:03:4e:94:86:95:18:5c:
2e:c9:27:90:9e:84:9a:8f:e4:bf:11:59:ae:36:12:60:a5:83:
27:0f:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:02 2025 by rpki-client