Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
File: dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json)
Hash identifier: R3UIUoaK4Zz/AstMBG6CPF47vBwTOYMLEkDZa+hUuzw=
Subject key identifier: D6:95:0A:AF:42:ED:BA:14:2F:BC:35:04:C8:75:C9:CB:45:63:41:1E
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial: 0195108FF60CFE4C456D9B2823A0C5E66D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 21:00:24 +0000
Manifest this update: Sun 16 Feb 2025 21:00:24 +0000
Manifest next update: Mon 17 Feb 2025 21:00:24 +0000
Files and hashes: 1: OcTgY_TxJBbWYUXl-r4CTTXUle0.roa (hash: 1c7PjEo1UgZPDis6XvL/mHlYibhzZZ7MfR0yuK8HcsA=)
2: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: N2NLVtOqRA+8kfdSfBeRuKYeN6V4pPUeIAKnostmC8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:f6:0c:fe:4c:45:6d:9b:28:23:a0:c5:e6:6d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Validity
Not Before: Feb 16 21:00:24 2025 GMT
Not After : Feb 17 21:00:24 2025 GMT
Subject: CN=d6950aaf42edba142fbc3504c875c9cb4563411e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:c3:04:92:1e:cd:5a:53:2e:5f:be:8b:66:
7a:6e:06:e2:7a:cd:72:9f:5c:50:7e:2c:58:80:12:
ab:43:d5:6b:0c:43:43:e8:bd:0d:40:ad:64:ca:fc:
7d:5e:af:5b:05:81:b7:62:42:64:87:40:55:11:5f:
a5:29:56:eb:66:e8:46:b2:a0:99:73:a1:e2:1d:89:
85:3e:95:e5:4b:88:d2:d8:15:8b:95:f8:db:70:41:
cf:67:bf:17:19:8a:23:e5:95:03:1a:89:bb:26:da:
2e:a6:65:1a:8e:57:85:ef:86:b6:b4:8d:72:2f:2c:
3c:a0:53:fc:a4:93:d6:49:24:85:31:5a:11:45:6c:
4e:2d:37:75:b9:0b:8d:43:d7:b5:82:1a:1a:d9:9e:
31:e4:d4:b6:10:45:7b:66:76:f8:36:26:71:e1:17:
b6:21:8a:6e:3b:4e:bb:ca:f5:d9:9a:0c:9a:30:fb:
a8:be:d9:92:57:c2:2d:67:f8:a7:57:3a:cf:4e:b6:
1c:69:2c:63:2a:42:01:8c:e0:e6:68:90:98:63:f3:
6b:93:28:16:63:6c:f2:7a:ad:cf:ee:08:7f:39:b3:
b3:79:13:f0:ad:ba:5e:a1:c9:a3:53:12:16:69:97:
eb:38:96:ff:60:ab:19:b6:28:37:01:94:0a:84:d3:
d5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:95:0A:AF:42:ED:BA:14:2F:BC:35:04:C8:75:C9:CB:45:63:41:1E
X509v3 Authority Key Identifier:
keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:03:c5:d3:cc:b2:21:0f:d0:ec:73:0c:03:0f:b3:0d:1e:8c:
46:77:e2:c6:57:bc:5a:d0:07:f8:50:40:bc:f5:ff:e5:89:cb:
84:6b:d2:2c:2d:9f:17:4e:25:e4:5b:ab:58:80:3b:65:38:e0:
b8:27:ac:59:21:01:2e:2c:94:a0:d4:78:68:60:c8:d7:b7:02:
3c:e2:96:80:dc:a9:f8:42:0f:57:db:ff:8c:cd:79:73:28:ce:
53:37:f8:02:72:a3:31:9d:29:14:47:f8:64:6b:0f:f2:3a:34:
1e:67:7d:7c:3a:0d:d5:a6:16:2e:e3:49:09:0f:06:2a:f0:1e:
c5:25:fa:43:66:7e:90:98:e5:d5:8d:fd:1b:67:09:68:c6:94:
71:ab:13:f7:6c:b9:9b:2b:5b:16:e5:07:74:be:7c:d2:6b:c3:
25:da:04:5c:41:e4:d5:5d:de:91:fe:54:42:53:b2:a4:6b:52:
0b:8e:0c:81:5d:cb:06:d8:c3:41:5f:d5:9e:5e:dd:bb:c5:ca:
98:be:cd:b2:cd:e1:35:58:67:90:2b:ed:4f:fc:dc:55:4c:91:
08:2c:d9:9f:0e:eb:c6:3e:db:ff:af:e4:28:b1:2f:0d:ef:f0:
1b:1d:a3:d2:42:c2:a0:c4:2f:41:12:44:03:85:c9:bf:ac:1c:
6f:de:cb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:50 2025 by rpki-client