Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File: R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier: 3g0WKeAx+nxkzqHqyKi35bgyF/HrCGb2uukTzFJqmvM=
Subject key identifier: 58:82:C3:DC:94:22:93:76:FB:77:4E:51:14:8A:98:1C:F5:66:DF:EC
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 01951210C5FF5C82C15C9EFD082DBE24897C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 04:00:43 +0000
Manifest this update: Mon 17 Feb 2025 04:00:43 +0000
Manifest next update: Tue 18 Feb 2025 04:00:43 +0000
Files and hashes: 1: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: KptQEfxQiK3azFVLbcvjNk8SAlNBqTHawTTWf03Y9Gw=)
2: fB3zFlody1nthwMkhJVJflJzOIE.roa (hash: J7sG0dYSoVKmJxeiq5++oBkxzchZIPPLFfINpg3QbHs=)
3: t7D4JJSP5z-u6M9bmWKtD19PybY.roa (hash: hgEfba4+416hOF8d8xJM4ix7obkJ8g22r+oy5Y4pB5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:c5:ff:5c:82:c1:5c:9e:fd:08:2d:be:24:89:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Feb 17 04:00:43 2025 GMT
Not After : Feb 18 04:00:43 2025 GMT
Subject: CN=5882c3dc94229376fb774e51148a981cf566dfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4b:09:a8:da:1b:f1:fb:5f:1f:86:e1:87:e2:
52:7d:1d:ea:9d:53:5d:87:8e:b0:07:55:da:3d:58:
e5:7b:40:2d:8d:05:57:1b:a9:f0:fa:8b:5a:c7:7c:
5d:2e:8b:7b:fd:49:0a:3c:af:41:eb:b3:04:94:b2:
97:93:24:6b:69:0c:83:a2:13:55:07:7c:7e:cc:87:
a4:e2:4a:d8:f7:29:8c:0e:41:c6:a4:d0:20:8d:de:
32:50:ee:c7:54:38:52:dc:ec:97:d8:4c:5d:73:32:
cc:a2:c8:0a:89:ca:9f:35:f4:96:6e:6e:85:50:c8:
32:91:56:73:ca:12:9e:f6:fa:5f:c6:cd:e0:88:ee:
80:75:9a:68:cc:6f:b3:9c:af:71:4f:e7:d0:95:74:
63:92:d1:98:30:6a:bf:77:2d:85:ed:ce:28:da:9f:
b4:f0:93:8c:fb:27:18:24:bc:2a:e6:9e:23:5a:46:
1e:0c:a5:88:92:a0:7d:5c:4b:2a:f0:bb:b9:51:32:
3e:fd:45:92:22:87:ef:13:4a:57:9d:9b:16:ba:fd:
96:d8:a1:64:e2:99:f1:bf:94:70:74:63:05:2f:e1:
c9:a3:43:b1:2f:51:0f:0a:9e:18:68:96:06:04:b5:
4d:5d:d5:09:0e:07:ac:84:f1:4d:f7:04:c0:d9:9c:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:82:C3:DC:94:22:93:76:FB:77:4E:51:14:8A:98:1C:F5:66:DF:EC
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8d:d2:d7:c9:2f:f4:81:0c:ca:d5:fe:fd:2f:d9:83:b0:16:
cb:79:df:99:24:70:e1:ab:b9:8b:51:74:23:54:a0:82:2f:15:
6d:92:16:48:a7:29:c1:26:ff:2c:90:c0:fe:f9:0e:1f:93:ea:
1c:11:54:ac:12:5b:6d:cf:06:eb:e0:60:7d:64:25:17:c8:b2:
87:97:cb:36:90:ec:3e:36:16:62:1f:44:9d:1c:40:2e:95:c5:
fd:4b:1d:74:6c:fa:28:d3:5a:2c:8d:ca:44:7a:8e:b6:35:9d:
ed:b0:5c:e0:be:35:1a:7b:84:b2:f8:7f:84:84:96:3a:dc:18:
9a:a7:98:86:c3:da:81:9b:96:91:43:15:93:2e:ec:d6:bc:dd:
a8:17:4e:c4:07:ed:78:e3:d5:7d:b9:ad:d5:ce:eb:1d:4e:9c:
8a:f0:bc:4c:0a:ee:94:63:b8:25:18:91:31:58:d1:57:13:40:
57:ce:84:cd:dd:ee:b7:2e:00:04:f0:df:4c:03:01:13:01:e2:
ae:f3:fd:6b:28:77:64:74:9e:f3:9e:1f:0f:9f:be:44:4f:98:
14:41:d4:da:46:16:fe:e7:79:3d:79:e9:5d:3a:99:c6:dc:2b:
85:fa:99:f6:b4:76:3c:7e:c2:aa:c5:90:43:a6:51:d2:0b:f4:
4f:1d:e0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:41 2025 by rpki-client