Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
File: iuS5P-tx3eKCO3DH27eeD5m1bBs.mft (raw, json)
Hash identifier: smXoznwKeXE7TQ78MsyUWeNFGZQfOAGAqocma5ZPZ+w=
Subject key identifier: 3C:6F:1A:5C:24:D3:CD:BB:CA:3C:5B:42:EF:B5:EF:B3:B9:8F:A9:93
Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Certificate issuer: /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Certificate serial: 019511A2B218F3CE90BD6ACAD5ACDA88BA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
Manifest number: 076E
Signing time: Mon 17 Feb 2025 02:00:29 +0000
Manifest this update: Mon 17 Feb 2025 02:00:29 +0000
Manifest next update: Tue 18 Feb 2025 02:00:29 +0000
Files and hashes: 1: J2gFJxTXec_tCl5fYmT5ueu90dA.roa (hash: eqh0jr48WZnOgc9VcsakSv2fxPv1f923UQBSwi0u554=)
2: iuS5P-tx3eKCO3DH27eeD5m1bBs.crl (hash: XXnVR/eFLBGb7STEzmBnulxAfDGRBmHrVirdZbUmh30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:b2:18:f3:ce:90:bd:6a:ca:d5:ac:da:88:ba:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Validity
Not Before: Feb 17 02:00:29 2025 GMT
Not After : Feb 18 02:00:29 2025 GMT
Subject: CN=3c6f1a5c24d3cdbbca3c5b42efb5efb3b98fa993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:4c:77:f6:bb:c8:32:42:6b:61:b0:b5:f0:
c4:8a:a4:96:8b:45:ef:e2:c5:df:90:7d:33:4d:57:
40:43:cc:ac:9a:5d:c3:4c:2c:cb:ff:6e:f5:7f:c1:
ca:8c:15:5f:ed:eb:49:f2:83:e8:fd:8c:59:d9:d4:
0d:99:ce:cd:3c:7c:14:bc:e5:fd:52:b2:5b:80:9f:
de:cc:db:0d:49:70:61:1f:02:a0:b2:ff:94:6a:e1:
48:bd:65:eb:82:ad:6d:53:40:e5:d6:fe:d7:b5:ee:
06:ad:70:85:97:37:d5:7e:52:57:1a:1f:9b:1b:3c:
13:fd:45:4c:52:38:89:cb:7c:6c:de:f2:1f:cb:26:
c6:68:89:ba:f4:ac:38:b6:cb:a0:cc:44:d6:86:da:
ba:a0:7f:b4:f8:34:85:74:32:16:dd:75:ba:71:c5:
32:45:e9:7a:f4:98:09:c9:18:9c:a1:94:c5:fe:31:
58:af:09:f2:28:ba:b0:b8:07:3f:5d:4c:1a:04:11:
21:4e:ab:15:73:4c:79:a4:fa:f5:51:ca:33:ff:74:
77:8f:70:56:ec:9b:02:3d:47:64:19:6f:b1:2e:3d:
14:61:14:f5:da:b1:e4:53:2f:e2:0f:c7:30:c2:e6:
c4:3d:74:f5:12:f3:46:0d:59:6d:6b:e8:2a:f6:8e:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6F:1A:5C:24:D3:CD:BB:CA:3C:5B:42:EF:B5:EF:B3:B9:8F:A9:93
X509v3 Authority Key Identifier:
keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:09:cb:f4:1a:2b:3a:d9:66:30:03:e3:f1:b5:79:83:fa:4c:
78:b4:39:b7:fa:75:12:11:2a:16:fb:64:56:82:ff:20:4e:fe:
fb:dc:f4:a4:22:b4:bc:0a:4b:5a:03:3c:ab:9b:e7:82:6f:f7:
73:24:49:ef:7c:2e:6a:5e:5b:eb:ff:7c:5c:b8:59:98:24:ce:
90:2c:f5:66:d2:d9:e9:c1:12:99:41:2f:48:77:9e:58:7a:dd:
d4:7c:d7:81:f5:d4:c8:a3:02:63:bd:6e:c0:92:21:9d:e6:b6:
45:99:2c:a7:dc:24:48:b4:3d:fe:e4:81:cb:82:fc:ea:2b:7c:
45:c8:d1:5d:9b:b2:8b:02:c1:61:33:c5:83:d0:57:7f:e4:60:
55:af:73:5e:86:08:47:ae:7f:56:f7:73:9a:ac:3a:86:3d:00:
a9:51:ac:e0:32:02:c0:43:dc:81:22:8a:64:46:3f:e5:f6:f5:
e4:c9:47:74:92:63:2d:7d:cb:ca:1d:b0:5d:e7:e5:c8:a2:6f:
69:9f:8d:15:88:eb:63:f7:e8:61:57:44:c2:8f:2f:f4:fc:a8:
67:7d:5b:5a:da:0d:bd:f6:77:46:c3:f4:a8:3a:a3:46:4d:a5:
c0:6e:53:5b:70:3f:bb:ed:b5:a4:02:1f:0a:0b:c6:3b:c1:18:
fa:a9:f8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:37 2025 by rpki-client