Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
File: EWYPCgX8TPczIjCFLZ14vXrC8ks.mft (raw, json)
Hash identifier: m6flTKEFEvUS69IVbrNw1oCqrE1AF67o8BR+28Ahy6I=
Subject key identifier: D0:F7:21:4B:F6:2E:E6:E9:37:0A:39:EF:28:70:F2:0D:46:33:66:08
Authority key identifier: 11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
Certificate issuer: /CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Certificate serial: 0194BA8480ACC4247B47E078985B852FB427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
Manifest number: 0ECE
Signing time: Fri 31 Jan 2025 04:00:33 +0000
Manifest this update: Fri 31 Jan 2025 04:00:33 +0000
Manifest next update: Sat 01 Feb 2025 04:00:33 +0000
Files and hashes: 1: EWYPCgX8TPczIjCFLZ14vXrC8ks.crl (hash: q/+rwx3azT4clA45gae0NWSmaYDA3Ud4c8bqA156KHM=)
2: Qzsv6JoCjjcwb2ZwyNYxWYWt4Xk.roa (hash: ToKPVGU4kUs10EflzvqcGH84k9PN/XYqsUpdwJ4GkyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:80:ac:c4:24:7b:47:e0:78:98:5b:85:2f:b4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b
Validity
Not Before: Jan 31 04:00:33 2025 GMT
Not After : Feb 1 04:00:33 2025 GMT
Subject: CN=d0f7214bf62ee6e9370a39ef2870f20d46336608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:cc:61:b8:ce:ae:41:64:05:35:57:bf:7d:
4b:d2:75:45:e0:dd:2b:62:6c:5b:01:ce:8c:ed:f6:
c8:0e:9a:02:32:a8:9d:bc:b9:5d:d3:8f:a5:6d:9e:
44:21:fc:38:f6:e4:83:04:81:c4:ad:87:cc:e4:04:
87:b2:fb:0d:cd:8b:fb:50:02:9f:70:44:c4:a5:09:
44:73:47:51:d3:35:f0:1a:c2:d9:35:f3:4f:37:16:
9f:f3:d8:e4:de:c2:a5:d3:49:6c:ed:c3:a4:dd:d0:
0b:16:db:8f:0a:b4:44:06:0e:5a:53:d8:57:b5:56:
a0:85:45:2d:3b:dc:be:39:d7:ec:b8:e0:03:75:59:
7f:8c:c4:fb:19:f5:88:d3:b6:50:ea:50:26:17:d9:
55:20:cb:08:1c:1e:f6:21:fb:f2:1c:1f:64:72:91:
07:7e:3c:2b:2c:fc:f8:c0:79:82:73:5b:f6:56:9a:
06:54:3f:8a:60:1b:06:55:94:4f:1c:47:f5:97:ad:
e5:4b:0c:6d:e2:4d:10:8e:f3:96:63:19:e0:03:be:
ee:42:d6:54:5f:15:c0:67:9e:fa:f8:f3:25:ff:08:
5b:07:91:de:9e:49:7a:b1:93:c0:6c:af:1b:62:5d:
a7:e5:75:87:20:cf:a3:6d:c9:53:97:5a:f5:53:bd:
9f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F7:21:4B:F6:2E:E6:E9:37:0A:39:EF:28:70:F2:0D:46:33:66:08
X509v3 Authority Key Identifier:
keyid:11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7d:b3:18:e0:af:c4:15:9d:f3:9d:73:bf:f7:dd:15:1a:1c:
67:54:27:51:a6:0d:d2:ad:58:b5:6c:4c:dc:2a:bd:9e:00:be:
ce:1d:b7:49:29:03:06:e7:0d:66:1b:05:c1:99:83:b5:d2:04:
01:3c:96:26:16:e5:18:25:04:7f:eb:89:f7:b8:7b:41:bd:ff:
a1:f6:75:5c:93:7b:f4:df:7d:c0:c9:c0:0b:1d:b9:60:20:ed:
71:f8:ee:d2:c8:51:a2:ae:b8:4e:ae:d1:0d:b0:0f:8b:88:e6:
65:0d:98:b5:d4:36:ca:d4:e1:44:aa:08:9d:d6:f8:2f:37:73:
c1:7e:9f:4f:f9:28:26:48:56:e5:a4:ba:a6:cb:36:2f:f3:c7:
3e:1b:ec:c3:e8:b7:26:d0:18:a4:83:53:b3:bf:a4:6a:ad:8f:
64:71:1b:8b:01:dc:99:0c:8b:3a:98:d1:f0:7a:88:61:58:ac:
55:4a:b4:b2:bd:e8:4d:45:c8:df:32:72:a6:0e:43:f8:f8:97:
1f:4e:99:fd:f5:a2:4b:e7:38:9f:b9:0b:cd:27:c0:69:b1:99:
b9:83:09:a0:a6:ea:db:39:bb:fc:11:f4:56:62:71:4d:3d:9a:
de:77:ab:27:4c:61:95:b3:9a:b3:ff:0f:8e:e1:22:cc:71:49:
2c:41:36:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:13 2025 by rpki-client on console-fra.rpki-client.org