Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
File: eDLQYJMtR4WhDKR96AAvZcHvM64.mft (raw, json)
Hash identifier: d+32YEKeBxHADqxPFQIPpFeVBEMMh7TSGPDXr9Y9rxY=
Subject key identifier: E2:42:14:0C:4E:7C:59:F6:CB:3D:ED:CB:CB:9C:D7:07:DB:64:40:26
Authority key identifier: 78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
Certificate issuer: /CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Certificate serial: 0194C3BE2F136811C6D55E56C76A35A88E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
Manifest number: 0F2B
Signing time: Sat 01 Feb 2025 23:00:08 +0000
Manifest this update: Sat 01 Feb 2025 23:00:08 +0000
Manifest next update: Sun 02 Feb 2025 23:00:08 +0000
Files and hashes: 1: 8AKtonzRgJb3Ja4IuBBKa0ECij0.roa (hash: Yd5g5WuhuLbI/QlnW73qApQrtDLQd9VfH73OOEYkPcM=)
2: eDLQYJMtR4WhDKR96AAvZcHvM64.crl (hash: keVflTTRv1mYr3p1aq7RVD4rpN6NkyST86enpc5gn0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:2f:13:68:11:c6:d5:5e:56:c7:6a:35:a8:8e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Validity
Not Before: Feb 1 23:00:08 2025 GMT
Not After : Feb 2 23:00:08 2025 GMT
Subject: CN=e242140c4e7c59f6cb3dedcbcb9cd707db644026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0e:be:2b:6a:5f:30:42:39:80:e9:92:ab:cb:
d3:9b:24:6e:23:2b:12:d9:03:b5:7e:4f:03:a1:28:
c0:f6:97:c4:de:61:06:7e:4b:bb:d9:d7:98:48:44:
8e:af:6c:bd:8e:37:63:89:31:e2:1a:dc:ae:46:4a:
a2:2d:b0:c0:45:c8:78:78:ab:4e:bb:89:ab:96:65:
d4:e7:65:0f:ac:9e:92:84:db:86:38:ff:5f:76:86:
9d:4d:c9:5d:55:fe:0d:74:28:70:c4:b5:d2:94:28:
40:22:6d:42:db:8a:f2:4a:86:01:e7:49:73:9e:fb:
91:77:d8:3e:f8:86:4d:68:ef:95:42:55:ed:b4:b5:
f8:a6:68:7e:58:52:95:ae:d3:bd:0d:6e:18:80:c9:
f5:38:53:9e:8d:47:df:0d:3d:1e:96:08:bc:43:c0:
c5:a9:42:8e:5a:8e:6c:5d:44:38:24:11:0a:f5:4a:
60:c1:f5:63:8c:a3:5a:d1:ac:8b:fa:86:2d:f3:57:
97:af:13:0e:79:3a:81:49:cc:53:d1:e7:94:d0:f8:
f7:df:10:eb:a9:02:44:9e:7c:62:f2:93:24:98:1f:
c4:b8:09:3c:eb:42:a3:84:9e:19:ca:dd:b1:a7:91:
20:65:e6:39:15:ac:ad:3d:14:a6:4d:23:c9:5d:42:
57:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:42:14:0C:4E:7C:59:F6:CB:3D:ED:CB:CB:9C:D7:07:DB:64:40:26
X509v3 Authority Key Identifier:
keyid:78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d8:68:6a:ef:33:e9:d8:90:74:ec:17:d4:5e:80:56:ce:67:
38:95:ef:4b:a9:fd:11:1e:b5:22:24:22:60:70:9c:21:93:78:
70:d3:8c:07:dd:78:d3:9f:69:10:f5:c5:de:3b:46:83:7a:f9:
e7:0b:2d:e4:27:8f:a5:de:bc:92:47:d2:f6:05:6e:30:a7:48:
7b:dc:14:ea:0a:db:f7:d9:05:74:7d:4b:60:8a:9e:fb:7a:48:
56:8a:35:45:bc:b9:2c:61:67:53:a4:72:30:73:23:0e:08:a9:
f2:de:15:67:79:c7:1e:f9:02:a2:e5:ae:dd:a5:33:5f:2c:40:
c6:92:04:53:00:98:8f:30:98:9f:40:ab:55:04:58:91:fa:0e:
6e:87:8b:30:1e:43:7b:ab:1d:f8:9c:77:4c:35:de:fc:be:bf:
f8:21:63:fb:55:a1:96:9f:90:3d:82:63:57:c0:6c:9f:30:22:
f6:9e:33:17:0d:ad:98:8e:28:91:83:cb:ff:48:d5:af:53:33:
e6:87:7a:09:e7:d7:eb:19:a9:31:61:78:aa:79:03:b7:1a:07:
ac:98:f3:5f:b0:8c:66:72:d4:38:20:66:93:e6:fc:f1:9d:06:
16:6b:b9:42:94:52:20:db:87:bb:e0:c7:38:ad:3a:85:fa:fe:
d2:df:d5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:50 2025 by rpki-client