Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
File: ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft (raw, json)
Hash identifier: QEKyGIrPVPQcjcFGFHElNXOJjtUPAXCg8vyW00RabUw=
Subject key identifier: FF:8B:D6:21:50:32:6C:4C:35:29:14:85:B4:55:93:96:FD:6F:3C:4C
Authority key identifier: 10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75
Certificate issuer: /CN=1024e66d7cba77b977685559c2481bb9044c5b75
Certificate serial: 0195116C1FA89427835A85DD41CAA25E95B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 01:00:53 +0000
Manifest this update: Mon 17 Feb 2025 01:00:53 +0000
Manifest next update: Tue 18 Feb 2025 01:00:53 +0000
Files and hashes: 1: AqNcisECeia8r42sdVkCO6MArLA.roa (hash: 18o7z7bmdzyzqumEyVAcE9Q6zGKgPT0KV/iWQ82M7jg=)
2: ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl (hash: /rccE5MLhH6QP+QE+NPL7czP0TqMn7f3bU8kZqWnXA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:1f:a8:94:27:83:5a:85:dd:41:ca:a2:5e:95:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1024e66d7cba77b977685559c2481bb9044c5b75
Validity
Not Before: Feb 17 01:00:53 2025 GMT
Not After : Feb 18 01:00:53 2025 GMT
Subject: CN=ff8bd62150326c4c35291485b4559396fd6f3c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:a5:90:f4:06:5e:f6:cf:90:0e:44:84:cb:
e9:8b:98:25:f7:35:3c:fd:ae:c2:8e:07:5d:15:48:
63:65:d5:5b:e9:f2:6c:75:6b:5a:f4:f1:de:d4:7d:
a2:e5:f6:f6:dc:58:f8:1d:e0:1e:0e:e4:30:26:d0:
24:85:10:3e:3b:42:6d:53:9e:5d:39:32:72:f4:e1:
3a:99:c3:73:e9:57:34:45:af:3a:9f:0a:80:f2:e5:
a5:b8:4d:ea:7f:7c:26:71:e1:95:4b:fc:1b:ec:a2:
de:8b:51:66:d9:d2:ab:1a:48:06:6a:26:5b:88:ea:
9a:42:61:b6:2b:4e:cd:11:eb:99:a2:d4:0b:44:0e:
1f:00:a1:fd:fe:48:83:10:52:c3:4f:26:fd:03:4a:
fa:e5:48:0a:a6:3c:75:f3:54:a1:e4:55:4c:71:05:
5e:2c:4e:f5:02:7d:70:74:1c:da:2f:8f:c5:71:63:
0a:ec:1d:36:58:07:39:b0:d4:03:aa:13:a9:34:83:
e1:b8:eb:be:de:77:01:56:e8:cf:5c:48:b7:12:1a:
4d:42:70:4e:57:47:ba:f8:69:55:f5:20:6b:bc:f0:
a9:cb:f9:69:99:88:c0:4f:96:c9:2b:43:f2:96:56:
3a:2a:66:2d:98:48:c0:08:e6:2a:07:4d:c4:15:9a:
84:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8B:D6:21:50:32:6C:4C:35:29:14:85:B4:55:93:96:FD:6F:3C:4C
X509v3 Authority Key Identifier:
keyid:10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:78:87:5d:e9:3c:93:38:3f:31:18:61:06:e2:c0:f4:75:fd:
8f:85:74:e3:22:7b:af:d8:ba:83:64:5f:14:7f:db:62:ae:63:
17:ef:c7:71:b9:fe:45:1a:3a:30:cd:bf:59:df:09:2f:6c:bc:
10:da:d4:95:bd:5f:fb:7d:8a:17:0c:28:fc:43:9e:17:50:f0:
48:e0:e7:a8:05:ce:98:29:5d:06:50:0c:e7:90:73:19:13:2b:
2b:12:ad:86:78:de:f0:e1:ef:91:3f:65:c0:74:4a:05:b9:d1:
15:14:7b:82:19:7f:00:b3:c1:5d:da:7b:dd:35:e4:43:1e:4a:
dc:21:af:e9:9e:2f:32:30:f6:25:09:f0:cc:f3:43:cd:0d:e1:
4b:7f:0c:93:01:72:77:5a:6b:d4:00:7b:a9:f0:f8:2d:69:c0:
39:00:90:b7:6a:6c:55:c5:32:e5:2f:8a:93:8e:44:b4:95:49:
77:27:39:c4:e1:81:1b:6f:5c:22:ba:0a:6f:68:ea:09:4f:1c:
ec:66:92:18:2d:05:6e:5c:21:97:09:58:3b:49:88:9f:08:27:
bf:c0:32:f9:87:88:11:20:f2:43:fb:74:be:cb:fb:0a:8d:a1:
96:7a:5e:5f:af:fa:50:ce:b1:5e:ec:4e:68:22:8e:f5:67:3c:
8c:a6:95:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:01 2025 by rpki-client