Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
File: eCMlMhowLwusExvuEcmuppblELo.mft (raw, json)
Hash identifier: R4C88I3vSnfrWSjecG6qmObunRpcz+sXnARoiCYCGdU=
Subject key identifier: 9D:8D:B7:93:D6:F0:E0:51:32:12:EC:4A:EE:3A:AB:E1:9A:A9:CD:59
Authority key identifier: 78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
Certificate issuer: /CN=782325321a302f0bac131bee11c9aea696e510ba
Certificate serial: 0194C50839558E3E02244F5A16187E03EE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
Manifest number: 0A43
Signing time: Sun 02 Feb 2025 05:00:37 +0000
Manifest this update: Sun 02 Feb 2025 05:00:37 +0000
Manifest next update: Mon 03 Feb 2025 05:00:37 +0000
Files and hashes: 1: HkPgyjtfc2I2XR8BvT3Oa9Siabg.roa (hash: AzeYfXAKdYBKYZ/1I42CQO+bIphQdlonjepjXKZIBPs=)
2: eCMlMhowLwusExvuEcmuppblELo.crl (hash: cSdS9LXt/2trvlJzD7V8Kqc1w0G9/fD6+wl62wFVPe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:39:55:8e:3e:02:24:4f:5a:16:18:7e:03:ee:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782325321a302f0bac131bee11c9aea696e510ba
Validity
Not Before: Feb 2 05:00:37 2025 GMT
Not After : Feb 3 05:00:37 2025 GMT
Subject: CN=9d8db793d6f0e0513212ec4aee3aabe19aa9cd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:b2:d5:d7:35:4a:98:4a:ae:a8:14:ff:d3:
e3:ad:a3:69:4a:29:db:8d:37:85:c8:53:50:35:f9:
b8:f6:67:8a:3c:a1:ec:e5:c1:ae:90:c1:5c:28:23:
b6:b7:a1:0f:85:71:c3:13:bd:c3:92:e6:e4:d8:84:
56:eb:88:d6:fc:02:09:1d:c6:8c:3a:02:52:91:3f:
b5:43:00:d6:fa:4f:4b:c0:80:8b:18:ce:97:1f:e5:
16:c0:d4:06:07:96:a1:dc:ad:4a:94:01:24:1b:a8:
e5:cd:e0:5d:90:59:2b:cd:77:f6:d6:65:c2:0d:05:
8a:85:30:30:ea:1e:8d:7c:4d:51:7e:96:66:0f:56:
5f:ed:c7:b6:96:85:72:85:79:e0:7d:df:29:65:c4:
9f:fd:dd:c8:a7:ea:a5:77:d6:d7:10:50:b4:93:09:
96:00:8a:ad:3d:32:d5:43:c5:4c:38:c8:e1:57:a2:
8c:c5:c0:6d:ed:66:89:1a:2f:44:47:5f:62:a8:ad:
28:0e:4f:01:a8:c6:a3:d2:c0:28:88:dc:25:25:5c:
f8:9a:39:b3:1f:41:90:2c:1d:ba:73:8f:7f:38:b9:
1f:fb:fc:9a:83:c0:d9:e4:6e:60:de:fe:30:66:32:
1a:a9:6d:cd:f0:cb:84:00:fd:19:e7:22:7c:dc:c5:
6c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8D:B7:93:D6:F0:E0:51:32:12:EC:4A:EE:3A:AB:E1:9A:A9:CD:59
X509v3 Authority Key Identifier:
keyid:78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e6:a5:ce:d5:21:82:b7:88:57:a1:10:54:ee:0c:4a:6c:52:
8d:f6:1f:01:3d:cb:93:78:f7:29:a5:cc:65:d1:22:a2:3b:a5:
f1:78:44:dd:f9:8b:76:5d:c3:80:8c:8e:92:5f:4d:29:43:4b:
cc:39:b6:be:11:c9:1a:66:3d:49:33:71:26:59:b5:9e:15:81:
83:48:f2:46:45:99:b9:79:8b:cf:e0:15:b8:e4:7a:ae:ef:2f:
e4:45:20:5c:0d:c0:f7:ce:20:c7:f9:ad:df:3e:8f:58:d6:16:
ae:20:38:96:14:37:72:3a:dd:5f:33:38:f6:de:10:16:20:1b:
f1:e0:88:67:f5:68:5d:1b:af:e3:07:c1:11:81:c3:58:c3:f4:
c7:78:e4:d1:16:f5:e1:e8:6c:3c:0a:b8:7b:86:91:7e:60:4c:
52:14:45:5f:73:28:e4:5b:2a:e3:4f:93:10:a8:81:87:86:d5:
0d:bc:87:ec:65:e6:cc:18:b0:41:e1:86:01:e7:2a:e2:9b:9e:
ad:d2:81:c3:b0:42:eb:99:64:ce:0e:ba:25:dd:c8:cb:41:22:
eb:ef:50:8d:9c:ef:86:14:fd:39:8e:f8:f9:be:a4:07:55:e1:
3e:45:5c:13:5a:84:89:3b:00:bb:02:99:4a:65:19:89:db:fc:
75:eb:37:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:01 2025 by rpki-client