Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
File: eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft (raw, json)
Hash identifier: j9DmlRF/NV34JBwruQKQbTQfovWqZ6Wbvd+BcI0n+DE=
Subject key identifier: 27:A7:1C:C5:F7:85:E1:01:B1:FA:A4:B3:8C:FD:4B:FD:52:BF:E4:21
Authority key identifier: 78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53
Certificate issuer: /CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
Certificate serial: 0194C4D1665339A769DB3FCE4F5FFDAB21FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
Manifest number: 0878
Signing time: Sun 02 Feb 2025 04:00:44 +0000
Manifest this update: Sun 02 Feb 2025 04:00:44 +0000
Manifest next update: Mon 03 Feb 2025 04:00:44 +0000
Files and hashes: 1: 0U0iwiffVettO-vogpqMch7csq4.roa (hash: uPiED/FamX8UNur9ecAQaLp7MXQZVhIJRf73CMOjMOY=)
2: eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl (hash: yZPVeAQwsOrP2eszjWAltvlmnqzd6StrgIs9w3DIJYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:66:53:39:a7:69:db:3f:ce:4f:5f:fd:ab:21:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
Validity
Not Before: Feb 2 04:00:44 2025 GMT
Not After : Feb 3 04:00:44 2025 GMT
Subject: CN=27a71cc5f785e101b1faa4b38cfd4bfd52bfe421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:8e:27:5f:28:59:b3:f4:b9:75:ea:d2:47:
94:39:df:b8:fe:09:16:1f:bb:47:4b:2b:c3:4f:2f:
22:ca:13:9c:36:f1:0d:44:55:24:15:41:42:0e:23:
28:37:1b:78:60:6c:7a:6e:54:2a:ab:3d:bc:ff:7c:
73:61:6c:8d:fc:cc:66:0a:29:2f:43:31:df:97:65:
01:20:59:a1:72:f3:7f:c3:dc:26:25:b5:be:0b:e8:
4e:2f:05:81:fc:d9:63:a0:18:75:6d:29:e0:39:a7:
99:5f:a5:ba:f7:4e:30:e8:02:11:dd:1e:53:b2:58:
01:2d:45:4b:1d:4d:ab:9f:27:12:0b:38:56:76:83:
62:35:d7:77:bd:8c:b2:32:14:63:4d:3c:fb:d8:df:
3a:02:a1:96:6d:f5:41:31:5b:3b:62:d1:b3:8a:6b:
ca:a8:92:a3:2f:0b:5a:79:b4:3f:92:20:ae:78:90:
10:21:07:7a:3a:9b:3a:3a:15:c5:c2:6f:ed:9a:54:
36:75:9d:34:01:c3:24:63:06:b0:24:ea:c6:78:10:
53:1d:d5:6d:c4:e5:6a:9e:c6:fb:99:75:10:53:3d:
4c:65:23:12:e5:bd:c8:4a:97:ab:5e:f4:1c:19:b8:
ea:af:47:e4:a7:69:d6:30:1c:47:d1:45:52:7a:b7:
11:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A7:1C:C5:F7:85:E1:01:B1:FA:A4:B3:8C:FD:4B:FD:52:BF:E4:21
X509v3 Authority Key Identifier:
keyid:78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:3a:30:fe:e4:33:98:27:76:3a:c5:e7:30:83:61:a9:c2:fb:
b2:c7:9b:22:af:45:03:ae:b4:e8:cd:82:c7:eb:f3:c1:e3:ba:
bf:78:e4:6c:64:5b:3f:c4:3c:a0:60:67:59:55:54:dc:22:be:
fc:85:98:cc:fd:f1:5c:cd:5c:ea:93:30:5c:61:17:fc:31:f4:
b5:54:5b:60:85:58:88:16:69:67:80:10:c1:89:af:0d:71:75:
8d:1a:e3:bf:37:c6:a1:65:b6:8d:b4:12:55:41:1b:11:ef:bc:
61:b4:ed:c2:a0:99:b1:1c:d7:04:e1:c7:2e:5d:fc:5e:5d:7d:
f9:5f:ac:ec:b5:42:12:e6:7b:8b:18:a4:66:33:a3:91:a8:02:
b8:30:96:d9:57:a8:c6:9a:c3:15:ef:07:bc:ea:d9:38:ef:05:
b7:51:5a:25:8e:89:f0:78:8b:94:83:47:29:ee:cf:31:3d:1a:
04:61:15:77:de:95:9a:b4:1f:21:76:ee:1c:73:3a:0c:67:36:
fa:f9:5b:3d:9b:4d:ee:8e:78:a4:6f:70:e1:1f:f7:ca:76:1a:
30:62:da:ed:8c:70:bc:41:f4:1e:6a:c1:19:c9:89:52:cb:56:
9f:c6:bc:6c:45:fb:ed:0a:ab:8e:40:83:b1:3c:b6:a3:34:41:
3a:43:53:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:58 2025 by rpki-client