Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
File: 4Pi55HhWy7oIK3r0KXobcj2vxAI.mft (raw, json)
Hash identifier: rkcAHSuyo+MKgBbZ7ZbFxnENDgU+9Zh2udeOTx6HUWw=
Subject key identifier: 56:C5:AF:0F:06:B7:5D:B1:F8:30:CB:F1:7B:B8:E2:EA:5C:2E:67:F0
Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
Certificate issuer: /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Certificate serial: 019511D99134612072DB815BB7EA081319F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
Manifest number: 0D08
Signing time: Mon 17 Feb 2025 03:00:25 +0000
Manifest this update: Mon 17 Feb 2025 03:00:25 +0000
Manifest next update: Tue 18 Feb 2025 03:00:25 +0000
Files and hashes: 1: 4Pi55HhWy7oIK3r0KXobcj2vxAI.crl (hash: Wm5RaBu1RzOhpG4rPTttZzA9iuE3+cKn+H5cRApZJEw=)
2: Mz3zdOLpdrQGVZtJncItYpvPliE.roa (hash: 6F2PNmZ9ECufEFXZhtjXXLlbHL0vIzCdtjQEK5a/NJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:91:34:61:20:72:db:81:5b:b7:ea:08:13:19:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Validity
Not Before: Feb 17 03:00:25 2025 GMT
Not After : Feb 18 03:00:25 2025 GMT
Subject: CN=56c5af0f06b75db1f830cbf17bb8e2ea5c2e67f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:3a:b7:72:b2:d4:fb:af:bf:7f:be:0d:e9:
c1:4a:b1:df:df:0c:7e:b0:91:1d:1f:1c:d9:82:ee:
87:94:5a:56:93:a7:55:56:f2:d9:71:e7:02:9b:b8:
4c:b3:a5:28:72:14:6b:67:43:ca:0d:4c:a6:46:53:
f6:b6:f9:39:e2:6c:64:e6:03:0c:d9:8d:dc:b7:73:
a8:f6:3c:f9:3d:82:de:2f:e3:24:c1:77:d3:8a:12:
09:d4:7e:9c:78:a5:71:8f:ca:9c:6d:57:1f:81:ef:
0c:9b:a5:91:c4:9e:71:fb:0e:71:6c:ba:34:a6:7b:
ea:7f:bc:0e:4d:41:92:45:43:38:f4:0b:b7:8a:18:
35:98:a9:ba:0e:f2:ac:a9:76:02:39:2a:b9:3f:2b:
6e:db:fe:ba:a3:dc:5e:e3:8c:98:05:eb:93:39:da:
cd:6b:01:7d:0a:a9:e7:c9:86:a8:be:67:0e:4f:52:
32:b7:6e:87:a1:a5:dd:af:3b:ad:4e:24:06:dd:a7:
3f:47:55:29:46:fc:d4:74:ee:dc:44:ac:19:da:e5:
26:9e:c5:11:54:23:14:30:50:2c:90:41:4a:54:15:
f6:bb:26:d8:73:59:f7:fe:83:b4:49:43:a4:f9:19:
de:e8:ea:25:4e:88:1f:f3:5e:fd:66:e9:7b:59:2b:
a5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C5:AF:0F:06:B7:5D:B1:F8:30:CB:F1:7B:B8:E2:EA:5C:2E:67:F0
X509v3 Authority Key Identifier:
keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d8:e1:64:42:fd:2f:3a:bf:ee:6e:11:44:79:bf:48:b2:6d:
7f:2d:06:97:23:14:01:16:89:97:31:cf:87:5e:d2:4a:dd:b3:
d9:d7:a6:ad:97:5f:d8:b8:38:f1:23:29:45:eb:62:ea:83:6d:
92:a2:95:99:0b:d0:13:46:c6:3c:e8:0f:a6:c6:7a:c0:4a:7b:
40:20:cb:f0:1e:09:11:09:f6:6b:f1:00:2a:cd:e4:39:c0:a9:
29:c6:23:ae:f2:c6:d9:aa:4f:25:06:2f:98:85:4b:59:79:1c:
08:36:98:7c:4d:6a:58:5b:89:1a:f3:13:72:48:30:cb:85:af:
97:60:3b:3a:70:0f:b5:b2:db:8e:25:58:5a:67:36:86:0a:41:
c2:9b:cd:9b:3a:da:4e:0e:16:e0:e8:8e:a9:0c:0f:1c:80:32:
39:64:1e:ae:b5:9c:b5:88:4a:dc:c8:27:9a:8a:f4:a9:bd:3f:
17:ca:d0:98:e6:25:f7:fc:15:d1:51:8a:31:41:a2:b4:47:67:
29:f3:73:74:a8:74:a5:8f:0c:7d:d1:58:4f:2f:5c:65:05:88:
c0:9f:b9:9c:37:36:9e:a7:08:a3:d6:ee:e3:17:34:a5:4d:8d:
ff:42:65:34:71:8e:c2:47:db:d2:06:b0:b9:45:94:06:5f:89:
37:03:ab:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:34 2025 by rpki-client