Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
File: eSf20AYql2a9WPDQdcTw0QJX5gY.mft (raw, json)
Hash identifier: 9WlsCSV111kzZfS8QxE1wlcktpNUZolxNXnWeV4pWTY=
Subject key identifier: 00:C2:BF:D4:C8:EA:D0:E7:B5:E5:8E:4D:E4:A4:00:79:1F:DF:DE:E9
Authority key identifier: 79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
Certificate issuer: /CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Certificate serial: 0194C499FD16601CA9128105D11905DE0F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
Manifest number: 19
Signing time: Sun 02 Feb 2025 03:00:13 +0000
Manifest this update: Sun 02 Feb 2025 03:00:13 +0000
Manifest next update: Mon 03 Feb 2025 03:00:13 +0000
Files and hashes: 1: eLGVH-huMc8rapx-zBQol7W6wbs.roa (hash: dBq0SVYODoTbT9noZtho2o8DhkqOnGRrlJMatl/O+48=)
2: eSf20AYql2a9WPDQdcTw0QJX5gY.crl (hash: 4P9rkEWqGK8bizYqWwe1UpwEjd4X2b9T6OmvBz8t6EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:99:fd:16:60:1c:a9:12:81:05:d1:19:05:de:0f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Validity
Not Before: Feb 2 03:00:13 2025 GMT
Not After : Feb 3 03:00:13 2025 GMT
Subject: CN=00c2bfd4c8ead0e7b5e58e4de4a400791fdfdee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ea:ac:91:3b:fd:27:e4:10:bd:6c:5e:18:e6:
5f:da:6e:17:12:a0:78:d5:91:1d:7b:e3:08:e6:22:
70:87:d3:65:20:54:22:fd:8e:4e:09:b9:d6:90:37:
69:68:61:f5:4b:58:fe:63:f6:70:db:87:8c:49:e8:
7f:b2:f3:df:a3:c3:bb:61:91:92:d8:14:9f:5a:2f:
81:f9:24:b0:88:fb:f6:f8:e7:a7:64:ff:9f:5f:c0:
06:4e:10:5a:fc:6c:22:15:53:f7:17:45:78:2c:04:
00:c6:6c:14:84:bb:ff:5c:95:93:2c:f9:1e:43:a7:
f4:25:b4:2c:c2:53:a5:1c:4c:23:c9:cf:8f:1d:88:
ef:7a:ba:8a:e1:16:32:ab:bf:81:af:3a:82:72:2b:
09:3f:13:0d:37:ad:a3:6c:8e:ba:ba:1b:bf:4d:9f:
70:16:78:c6:c4:77:1a:fb:60:dc:3c:bc:43:ba:1e:
99:88:d0:e2:36:48:05:09:08:98:b4:90:7f:d2:d3:
90:7b:fc:fd:8e:b7:0b:29:dd:a0:57:aa:7d:59:bb:
dd:2f:cd:31:e2:bf:96:f8:f6:e9:e9:9a:a0:0c:14:
b0:e9:2c:f9:07:53:46:d5:af:83:f7:37:e8:85:0e:
62:d3:8a:40:9f:f1:93:88:19:c0:12:39:82:3a:f0:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C2:BF:D4:C8:EA:D0:E7:B5:E5:8E:4D:E4:A4:00:79:1F:DF:DE:E9
X509v3 Authority Key Identifier:
keyid:79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:76:82:c1:f8:77:af:b4:be:62:23:d8:7b:f6:64:49:92:18:
96:7e:e0:13:a4:f4:83:4b:b5:ca:56:01:b9:98:1a:6a:1c:db:
49:8f:1c:f3:aa:12:48:d3:b8:43:ad:d3:88:c7:5c:19:8e:c9:
68:a5:aa:50:dd:fa:72:26:47:0d:90:7f:61:c0:5e:f4:dd:07:
7c:d3:b3:10:40:d8:2f:c1:b0:19:65:59:da:1f:83:fc:6d:bf:
58:0a:01:d7:47:ab:2f:50:97:17:f5:e1:8e:8b:d9:1d:d0:67:
5d:5d:3c:7f:e9:c0:c7:4f:5f:4c:e5:21:be:1c:70:06:a6:af:
62:ba:64:9b:1e:b2:b2:32:89:a4:2a:ef:10:1d:97:0e:b6:92:
d7:53:88:b3:4e:d4:69:e5:18:0f:e4:1b:da:d6:0d:a0:4f:33:
68:f6:41:6e:90:26:16:c7:ec:3a:b8:27:75:c3:2c:84:fa:5e:
60:31:5c:18:33:c0:a2:38:bf:9b:30:a2:35:a3:82:b3:e1:04:
54:56:e5:a9:34:03:6b:7a:80:6c:0a:e3:33:b4:6f:75:ba:e5:
7b:cb:84:e0:68:aa:2a:85:bb:62:85:a0:47:4a:cf:39:5a:59:
76:1c:4b:22:f4:23:2a:b7:ed:9b:5d:37:ab:03:67:2f:98:2d:
c7:da:62:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:11 2025 by rpki-client