Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft
File: eNMexT3EQF1pFeGCWWS5fXoRb4E.mft (raw, json)
Hash identifier: /v8RKnxz6H9LSoWT6ITZYM7Rv7Kg/OBjmc+EXtUYgiM=
Subject key identifier: 86:EC:75:56:A8:2A:FF:23:9B:6A:AD:F6:90:D8:C7:63:A3:75:CC:8A
Authority key identifier: 78:D3:1E:C5:3D:C4:40:5D:69:15:E1:82:59:64:B9:7D:7A:11:6F:81
Certificate issuer: /CN=78d31ec53dc4405d6915e1825964b97d7a116f81
Certificate serial: 0194C49A29831E585BD67900F1D74800A285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft
Manifest number: 0F9C
Signing time: Sun 02 Feb 2025 03:00:24 +0000
Manifest this update: Sun 02 Feb 2025 03:00:24 +0000
Manifest next update: Mon 03 Feb 2025 03:00:24 +0000
Files and hashes: 1: 5gEGlVwVZrqZpPnotBCu9f34jtg.roa (hash: haUW51qrmH8OlsZcre9A2kx3gtQnJaSmXQISoIixtmo=)
2: eNMexT3EQF1pFeGCWWS5fXoRb4E.crl (hash: AcVqPdTNTN11bqxfKEbHDPJePZqZxcBwidRL2glv3MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:29:83:1e:58:5b:d6:79:00:f1:d7:48:00:a2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d31ec53dc4405d6915e1825964b97d7a116f81
Validity
Not Before: Feb 2 03:00:24 2025 GMT
Not After : Feb 3 03:00:24 2025 GMT
Subject: CN=86ec7556a82aff239b6aadf690d8c763a375cc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:8e:7a:73:ae:c0:c2:39:29:04:3e:e1:90:
c2:16:5c:b6:80:77:d4:a8:97:31:2f:d3:cc:d3:98:
1a:e5:9c:97:d4:12:e8:69:31:3b:dc:69:4d:11:2e:
48:3f:a9:84:16:2c:e4:0c:19:af:ad:d7:fd:c0:33:
fe:33:30:52:93:54:15:f7:1d:b2:dd:89:9d:ce:5f:
b4:35:e5:4b:d2:94:b8:ec:43:0b:59:12:3c:b0:10:
51:eb:54:6f:db:3e:89:a5:a2:1c:20:1c:3d:cf:2b:
bf:24:bb:a0:bb:80:8f:d0:03:7b:d0:d8:72:7a:9c:
77:19:5c:b2:e1:fb:12:af:a9:7a:c3:3a:74:11:16:
05:2b:a5:e6:2f:f3:20:35:e0:fc:d5:8b:73:71:04:
5b:4a:ea:48:d6:0c:ce:90:cb:63:dd:fa:30:ce:dc:
ab:e6:4f:ab:42:a2:e1:ef:f8:28:e0:85:29:c7:c0:
e3:62:72:74:5f:6b:d9:4a:28:49:2d:1e:67:b6:02:
dc:ba:90:e7:36:45:41:e9:21:e2:9d:99:01:8a:db:
79:07:cf:d0:2b:d6:77:e7:66:43:05:b4:cc:6f:19:
a9:bc:96:1a:b1:41:67:d0:60:22:b1:ff:1f:51:a2:
44:5d:2b:92:65:f6:8d:98:7d:b6:19:06:7b:23:0d:
13:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EC:75:56:A8:2A:FF:23:9B:6A:AD:F6:90:D8:C7:63:A3:75:CC:8A
X509v3 Authority Key Identifier:
keyid:78:D3:1E:C5:3D:C4:40:5D:69:15:E1:82:59:64:B9:7D:7A:11:6F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:94:a0:1b:73:93:e2:52:14:6e:fb:d7:59:3e:23:1d:af:10:
d7:6f:76:a9:8f:20:a6:db:3a:0c:ae:7f:71:f7:f5:ee:45:e3:
f4:70:d5:cf:a7:8a:fb:02:c6:5e:e6:6e:d2:21:08:35:4d:78:
2e:b9:99:da:8e:14:16:56:eb:11:c6:7b:89:30:31:a5:a5:b5:
2a:95:16:4c:d1:15:c7:44:28:28:88:73:f4:04:c0:9b:54:d6:
45:e5:25:90:97:5f:a9:e8:a5:94:50:e0:1a:bd:7b:01:20:78:
62:bc:43:ed:33:16:30:de:a3:6d:b0:44:9f:e6:6c:58:b1:23:
cc:44:b4:1c:c3:4b:1c:e0:f0:24:28:6c:58:a2:fe:8d:39:ff:
a7:92:69:c2:47:8a:7d:ab:f8:c4:30:7b:6d:30:57:ce:ab:69:
1d:1a:39:7b:af:4c:33:04:c2:5a:f4:da:ef:aa:c6:05:0a:d5:
f4:c4:6a:55:44:e0:70:67:c9:87:c3:0d:59:7c:ca:9b:57:06:
32:d4:0b:67:fd:41:21:52:8e:e6:01:49:f3:fc:9f:93:75:3a:
0b:7e:cf:3a:ef:d2:b8:cb:aa:97:55:fd:e4:9f:22:aa:6b:e4:
13:90:d3:53:5a:ee:62:ea:64:85:e7:d8:da:e0:42:fc:68:1e:
c3:b5:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:04 2025 by rpki-client