Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: qe7a9Dr2vXQSWNndedJo3nemC6K68/f/YwSbUkYczW8=
Subject key identifier: E1:EB:6B:AB:4D:0B:BD:43:4D:9A:6B:E4:FF:68:49:13:11:EE:49:48
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 0194C3880C7590A38B25F0F086910C774029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 124B
Signing time: Sat 01 Feb 2025 22:01:00 +0000
Manifest this update: Sat 01 Feb 2025 22:01:00 +0000
Manifest next update: Sun 02 Feb 2025 22:01:00 +0000
Files and hashes: 1: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: jDeLoKJAC16D55hXySi70EcCUBEfzgkxyhEiDoBWCYc=)
2: SVWxJ2D9LYiMT8ED3t8Rtdt3qF0.roa (hash: CkroRGpwN+yaYir/P5uXG8yRXWWta2US1fRZkwQ1RIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:0c:75:90:a3:8b:25:f0:f0:86:91:0c:77:40:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Feb 1 22:01:00 2025 GMT
Not After : Feb 2 22:01:00 2025 GMT
Subject: CN=e1eb6bab4d0bbd434d9a6be4ff68491311ee4948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4d:05:93:ba:94:1b:21:4d:3d:2b:99:75:5d:
1e:91:2b:7a:67:26:61:66:7f:15:d1:ca:59:24:60:
c5:1f:94:5b:21:c8:e4:6f:fd:5d:2c:20:dc:d9:58:
dd:69:e1:e8:85:c7:ff:7a:f6:a7:56:44:3e:7d:f0:
c8:89:d0:60:ed:bb:b1:02:fd:79:7f:49:e6:ef:dc:
2c:64:14:6d:3b:bc:42:da:f4:82:c1:fb:21:13:3b:
e8:5d:61:ca:76:81:dd:f6:3d:94:92:02:a9:be:ee:
4a:e4:d2:52:40:56:61:61:f7:b7:21:c5:de:67:88:
50:81:f3:c8:75:63:a6:b4:fd:5e:94:51:d6:69:e7:
86:d9:da:fb:34:a9:6f:35:de:14:e5:f7:84:e1:71:
bf:2a:35:de:02:2a:ea:b8:20:e0:e3:10:30:4a:e6:
e5:ec:99:40:94:6f:1b:f5:5e:e4:de:c8:62:5b:45:
24:d6:da:43:f6:52:9c:22:3c:81:04:dc:95:29:4c:
19:28:17:cf:61:8e:e7:36:70:73:26:db:26:16:63:
af:cd:1b:31:16:ad:42:2d:1a:c2:41:bb:15:11:31:
b8:f8:25:7f:f2:f6:d7:24:63:6f:41:7f:21:9e:88:
87:de:8f:d7:2e:91:5d:2d:ae:b4:5a:70:4d:8e:01:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EB:6B:AB:4D:0B:BD:43:4D:9A:6B:E4:FF:68:49:13:11:EE:49:48
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ff:60:b7:0b:5e:1e:8b:33:89:fd:d5:e8:89:ce:49:a1:6b:
fe:23:7b:ce:7b:e5:a3:cf:a8:6b:41:be:26:f5:01:82:61:c5:
ed:90:e6:5c:b8:43:03:12:79:fe:09:40:3f:a6:64:d5:87:9e:
e0:2f:c4:85:99:7c:b2:2b:85:99:1e:14:b0:8a:77:84:55:0d:
d1:9f:47:ca:24:9e:10:25:25:6f:32:8c:70:7d:f4:81:74:af:
2b:b5:9e:72:45:fd:86:c6:26:00:d1:1d:81:ff:38:f4:4e:e9:
e5:92:f3:6c:8c:04:1a:75:ee:f6:b2:62:10:5c:b9:28:6c:76:
24:ba:13:62:45:4d:0c:43:3d:2e:19:5c:f6:9d:a9:17:38:fe:
6a:85:3c:f6:ea:72:35:ca:88:c7:d1:c3:21:1d:f8:e7:84:fe:
79:ba:51:56:11:21:25:b0:de:3e:9b:34:f0:6e:9a:f2:a6:c7:
86:2f:84:65:0c:db:ae:0a:b9:b1:e3:01:14:0a:45:f8:95:72:
f6:e0:77:39:21:9b:f9:43:ef:f6:d0:01:3f:77:03:da:b2:fe:
aa:dc:36:8f:ce:00:bc:f1:be:bc:e8:f4:ee:c1:42:96:c2:af:
db:d1:28:71:dd:85:e4:b4:c8:48:05:43:a2:17:08:1c:9b:fa:
6b:3f:23:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:40 2025 by rpki-client