Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
File: E3AevgZ5neCWmJkgUVDlMt7_57U.mft (raw, json)
Hash identifier: xhBa541SYAJ1ALswpdWXvRyVaqdYyyASmhi9HBaxQuE=
Subject key identifier: E1:9F:52:7F:8A:A0:A6:0A:B2:F8:BD:0D:45:15:69:81:5D:12:B5:99
Authority key identifier: 13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
Certificate issuer: /CN=13701ebe06799de0969899205150e532deffe7b5
Certificate serial: 0194C42C048B78999B9DD9A8702441FF81A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
Manifest number: 57
Signing time: Sun 02 Feb 2025 01:00:06 +0000
Manifest this update: Sun 02 Feb 2025 01:00:06 +0000
Manifest next update: Mon 03 Feb 2025 01:00:06 +0000
Files and hashes: 1: 8gVvFm91f0RDawryW7l9gKrlwps.roa (hash: QofxAMe0K3ECuRtwFP3oD9RJD1otx3XwH2YFtNZT6bY=)
2: E3AevgZ5neCWmJkgUVDlMt7_57U.crl (hash: gTCTStDoC4YtKP+SE4kLmVJPLyq9qCpGje0gK0Wj2og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:04:8b:78:99:9b:9d:d9:a8:70:24:41:ff:81:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13701ebe06799de0969899205150e532deffe7b5
Validity
Not Before: Feb 2 01:00:06 2025 GMT
Not After : Feb 3 01:00:06 2025 GMT
Subject: CN=e19f527f8aa0a60ab2f8bd0d451569815d12b599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:b1:9c:c1:a9:7a:90:a2:55:2d:7c:5e:55:
72:49:0c:2d:ae:3f:e0:36:db:61:c8:9d:fd:35:c4:
51:5f:8f:89:b3:b2:c6:e6:ed:fb:68:44:1b:f6:d2:
5a:f0:34:b0:d6:ab:58:c3:04:ae:ca:44:3f:af:ad:
41:20:2e:81:95:41:50:e1:6f:c8:c5:57:c6:96:76:
42:8f:c3:9c:d6:c4:99:99:f7:8b:e4:86:da:29:26:
18:22:15:25:fe:9a:b4:77:cc:29:ac:bb:94:a6:5c:
ea:fe:76:c0:68:03:4d:a0:ab:ec:a3:3e:f4:0b:1b:
92:d5:72:7e:26:1b:b4:73:bb:9e:39:b2:c0:26:8c:
2e:d8:fc:8e:3a:af:c3:1e:39:37:69:39:2f:d3:1a:
a6:0b:e6:32:53:bc:b5:4f:39:ab:c7:97:71:93:ab:
a8:67:1e:a0:a3:ff:4d:28:3a:a5:c4:36:96:20:97:
b5:81:16:05:c0:53:0f:b3:2b:06:e0:36:67:0d:c6:
9c:6f:d4:64:4c:b9:b3:1c:b8:f6:25:83:98:69:8d:
6f:af:33:92:22:7b:af:c3:df:c5:6a:00:29:99:1a:
0e:5b:30:8e:54:90:d6:f4:7e:f8:66:9d:22:ff:04:
8c:d3:7c:e8:d9:41:f2:1e:dd:1c:a1:4c:2a:84:f8:
21:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9F:52:7F:8A:A0:A6:0A:B2:F8:BD:0D:45:15:69:81:5D:12:B5:99
X509v3 Authority Key Identifier:
keyid:13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:73:6a:05:83:38:97:be:a2:9e:f9:fd:5c:17:54:d2:92:85:
cb:cb:02:c5:ed:3c:75:cd:39:d0:7b:4f:ae:f6:f2:6d:10:18:
00:bf:17:5e:ef:7a:fb:51:35:2e:00:b1:56:cc:cd:69:80:93:
4d:18:26:64:8c:81:a1:74:ae:1b:69:83:c0:47:93:bd:8d:14:
ff:bd:38:27:60:05:ae:8c:28:84:e0:16:e9:c7:f7:0a:54:70:
64:7f:59:a0:83:47:ab:3d:4f:0d:1f:de:d4:4c:e2:45:20:75:
dd:76:c6:29:0d:63:67:9f:5a:e7:23:be:c4:22:91:19:f8:cf:
d4:49:26:f9:48:8d:9a:5f:b6:2d:ea:77:6e:cc:08:aa:70:9f:
8f:37:da:d9:28:fd:08:5f:5e:09:c9:ce:56:ec:5d:98:36:e0:
d2:e4:2e:6b:2a:96:db:1f:e0:8f:70:d3:8c:f9:be:6a:e5:03:
fa:35:8d:83:55:c9:31:d9:82:41:8d:da:17:aa:92:81:cc:e3:
b5:20:55:cb:af:bf:a5:0e:b6:f6:6e:7d:b6:1c:9b:c7:31:94:
8a:5a:c2:1e:d5:0d:be:cd:f3:ac:49:39:da:69:7c:ce:dc:09:
43:33:45:95:2d:3e:7e:5a:83:2e:5c:59:25:78:8b:83:6d:4e:
38:b5:1a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:49 2025 by rpki-client