Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
File: E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json)
Hash identifier: miMi7NQKwfIl2HWVTjxt7MRgj0zYZrLcdyrW9motBa0=
Subject key identifier: 36:8A:9A:8E:C8:EB:2F:B7:70:78:C1:E4:75:19:53:E1:9B:DE:45:7F
Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
Certificate issuer: /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Certificate serial: 01951134A04D1D51DCE182F8BE94188FB3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 00:00:16 +0000
Manifest this update: Mon 17 Feb 2025 00:00:16 +0000
Manifest next update: Tue 18 Feb 2025 00:00:16 +0000
Files and hashes: 1: 0ISUdIwuZLNqVWNNfjNPjkkfb0A.roa (hash: X8YDNwD9PGK+IazmDttNRD5zMBvc8bSCuQ7N4xzf1ko=)
2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: VEWhVKxXfgaQ6jxdSE+zlHO+NFJ5k23hnuqx0nD62J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:a0:4d:1d:51:dc:e1:82:f8:be:94:18:8f:b3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Validity
Not Before: Feb 17 00:00:16 2025 GMT
Not After : Feb 18 00:00:16 2025 GMT
Subject: CN=368a9a8ec8eb2fb77078c1e4751953e19bde457f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:d4:16:8f:da:9c:16:df:22:d4:a2:cc:f4:
03:6a:af:2c:ef:f7:aa:5e:b4:8b:3c:7b:16:d7:da:
59:67:9f:ea:21:3e:c4:bf:a9:b1:61:5e:08:62:c8:
1f:b3:4b:38:5a:d3:1f:94:b0:35:29:39:22:dc:d8:
24:66:13:e5:d4:08:ee:f3:8b:9d:bd:6b:5c:6c:c7:
12:1b:db:1d:dd:4f:fa:69:d7:1d:02:a2:fc:8c:ed:
f0:fb:1b:0c:dc:d7:10:00:f1:f7:15:26:fb:c4:bf:
41:98:51:12:06:b6:a7:33:d5:8e:b8:36:76:9d:b0:
8d:27:c4:df:28:b0:36:db:06:e3:c5:8e:19:4e:8c:
0d:d0:a4:56:17:85:3a:c2:eb:ec:c9:42:cd:90:c2:
8b:77:db:22:f4:e6:70:dc:40:db:85:0a:c2:f1:ce:
30:fb:15:69:4a:28:a7:98:af:ce:92:d3:c4:55:76:
5a:5e:d0:2c:66:50:fd:a4:0d:d9:3e:4d:95:5a:60:
ba:d4:8f:54:14:22:28:fb:0f:c3:45:48:0f:88:80:
2e:1f:8e:a0:d6:54:c9:ff:bb:08:bf:0d:23:ab:f7:
17:33:c9:15:dd:88:14:b8:c5:75:c6:9f:33:4d:47:
21:c6:c1:41:d9:1f:06:39:1c:ed:ca:83:56:8c:af:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8A:9A:8E:C8:EB:2F:B7:70:78:C1:E4:75:19:53:E1:9B:DE:45:7F
X509v3 Authority Key Identifier:
keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a7:8b:8c:3b:ea:dc:bb:e3:7f:c1:55:b6:1f:bb:8b:98:7c:
b6:c3:04:22:d7:10:83:8c:42:ab:7f:35:27:8a:5b:98:ce:df:
2c:d0:f2:46:e0:aa:cc:59:f2:ea:ec:b4:33:28:a2:0e:58:6e:
31:38:03:81:c1:43:2a:c2:66:8b:0c:e5:b3:ae:3a:68:2c:2c:
0f:7d:28:ea:48:ff:54:7e:0e:7b:8f:25:52:88:29:07:10:06:
a2:30:64:06:22:f3:89:05:5f:cd:6d:83:60:b3:53:9b:81:12:
d1:5b:a7:f1:69:18:8a:74:a0:43:40:67:07:8c:6c:f1:d1:ec:
80:73:78:e5:58:29:68:1d:a5:a4:8a:05:6a:b6:7b:cb:19:33:
ff:1b:0f:dd:6a:dd:90:79:4b:31:9d:82:7d:62:00:66:60:63:
9e:e1:17:11:4c:4c:51:2c:64:d8:5a:97:e0:b9:81:39:c5:63:
ab:3d:19:a2:9e:2e:05:ba:77:36:81:04:32:d2:48:01:78:87:
a4:89:a7:68:b6:87:17:cc:52:89:c5:54:f6:0f:e1:41:63:82:
35:3c:db:39:31:39:30:70:4e:b1:54:fe:e3:5e:a8:f6:4a:85:
92:d9:fa:d1:c0:37:52:8f:70:5b:9f:c4:ee:d0:b5:35:a4:c0:
b3:62:d5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:19 2025 by rpki-client