Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
File: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft (raw, json)
Hash identifier: wKWHdGmB/V8WG4GDIPyZ7ZTv2fHnGfrK3WS5ha42PlE=
Subject key identifier: 2A:7F:53:D8:AD:AD:05:F9:A8:7C:19:BB:F6:A9:AB:13:A4:8C:E0:B3
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 019512105D4B2FFC2E6E3C49C653AD581A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 04:00:17 +0000
Manifest this update: Mon 17 Feb 2025 04:00:17 +0000
Manifest next update: Tue 18 Feb 2025 04:00:17 +0000
Files and hashes: 1: LhDegbR4xFlO6pz_ANDkPzTlFGk.roa (hash: xMGN0Z+cCcbH3arqVxwuW4j6b8JSM83DRHp4H/CfXzQ=)
2: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl (hash: 4kV9Uy5g6M8JWJ191mP59VPWoFkqfrz1yJE54jyieoQ=)
3: pleHW6nWDcc0xfnD71P7Zj02Qrw.roa (hash: jUunyevGvx7qOlFlsS+9kK0/bbvq3BE2/HQ+8URjUz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:5d:4b:2f:fc:2e:6e:3c:49:c6:53:ad:58:1a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: Feb 17 04:00:17 2025 GMT
Not After : Feb 18 04:00:17 2025 GMT
Subject: CN=2a7f53d8adad05f9a87c19bbf6a9ab13a48ce0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:15:dc:f9:81:4b:9e:4b:38:f4:45:cd:d5:
71:11:87:63:1f:11:06:56:8e:d8:eb:e5:39:ad:37:
8e:cb:9b:6c:1b:67:b6:4f:fa:76:90:12:e5:85:c7:
33:68:80:3e:39:ed:02:8c:44:b8:48:4c:5d:ab:76:
3d:69:a4:1a:7b:04:82:4f:db:5b:33:5c:1d:95:cc:
be:21:95:0d:a8:3f:58:9a:07:43:32:54:c2:f6:a4:
6d:27:aa:a7:87:ab:bf:d3:ea:39:11:1a:8d:56:77:
c9:81:0f:29:0c:e0:45:5d:d0:c1:64:c2:b6:01:c0:
dd:02:75:f8:7b:7d:e1:cf:88:ef:51:db:63:6a:2f:
5d:d6:41:27:92:6e:55:68:75:13:73:a8:d5:2e:af:
8f:c4:48:47:82:54:a8:0d:d8:15:46:79:9b:37:08:
fd:17:8c:60:2a:2f:c8:2b:e4:4e:28:b3:0f:fb:9d:
25:15:cc:11:63:7a:f7:a8:8b:2e:e1:78:e9:2a:94:
20:5a:b4:7e:7c:7b:ab:e4:0f:08:07:d3:9e:11:c9:
cc:b5:46:eb:1c:de:d0:f9:ba:0e:75:10:0e:9d:73:
99:cd:fd:5f:11:41:e9:cb:44:8b:0e:0c:aa:c6:83:
53:6e:ff:2e:6f:bf:17:be:fb:d2:bb:ad:d1:ff:e3:
31:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7F:53:D8:AD:AD:05:F9:A8:7C:19:BB:F6:A9:AB:13:A4:8C:E0:B3
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a0:fa:ed:58:75:e4:c3:74:17:68:a1:4e:ae:b9:e3:cd:18:
c0:cc:fd:37:8a:6b:d3:b8:dc:96:be:55:18:3a:e4:9a:94:7b:
fe:97:c4:57:7d:81:4a:60:c4:75:df:73:9f:ea:d5:b0:7d:04:
78:ed:52:72:68:de:db:b3:1d:c8:4d:e6:89:8e:ed:0b:87:3d:
18:62:e9:0c:46:23:da:a0:62:96:78:66:6d:b4:d7:71:d4:4c:
b4:27:8c:5e:f6:fb:07:62:1d:d1:d2:17:83:81:ff:b2:72:a5:
95:84:1d:7d:13:82:c9:31:d8:8c:cb:53:f4:a1:42:cd:cc:6c:
ec:b6:76:2a:c7:ba:85:38:6e:e9:8d:e2:38:c0:0c:d1:2a:7c:
ba:bc:a4:bb:23:e1:e0:3a:41:78:20:61:81:8c:78:01:9c:6e:
9b:2d:27:41:8e:bc:35:37:9c:48:25:94:a9:2c:aa:3e:eb:1f:
6b:b5:64:1d:7a:bf:b8:cb:47:42:43:dc:31:0f:7c:7b:17:ba:
bf:03:7e:19:eb:c1:84:9b:3a:1a:0e:a9:70:59:48:c9:54:c0:
27:85:70:0d:6d:fc:37:cf:50:33:9b:bb:f1:73:97:d4:fd:42:
cd:51:12:8f:b9:d6:78:f2:47:b5:04:93:cc:80:e4:b5:bd:89:
f5:23:7b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:39 2025 by rpki-client