Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier: z1P0gaOgIZ0dplNhDk870NUArZjMhONZMKxTXz0HTZY=
Subject key identifier: C1:30:DF:39:49:CD:C6:53:88:81:14:AA:BD:34:8F:8D:D5:12:F8:D0
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial: 019510C74EDFFA2324A54E83445F11F7A941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number: 0665
Signing time: Sun 16 Feb 2025 22:00:52 +0000
Manifest this update: Sun 16 Feb 2025 22:00:52 +0000
Manifest next update: Mon 17 Feb 2025 22:00:52 +0000
Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: H7pcxD1zd6vQ+OzwZqeeAMORD8RgApgB3byWfzvNeMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:4e:df:fa:23:24:a5:4e:83:44:5f:11:f7:a9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Validity
Not Before: Feb 16 22:00:52 2025 GMT
Not After : Feb 17 22:00:52 2025 GMT
Subject: CN=c130df3949cdc653888114aabd348f8dd512f8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:73:b6:94:6e:4b:d8:d3:93:cc:25:b4:18:
93:2f:3d:66:14:2b:28:f0:0e:fa:48:97:15:23:ad:
e6:67:94:3d:56:89:75:f2:f6:8b:8d:84:92:99:16:
ad:27:4b:96:9b:87:be:d7:5a:44:b3:f3:6c:ab:d5:
21:22:13:88:0b:0f:9d:e3:87:fe:fe:2d:96:ca:71:
6f:c2:75:d6:b8:1b:af:d5:cf:38:2e:5a:5e:39:73:
a4:15:5c:ca:46:24:55:57:a2:75:ee:64:9c:7e:1f:
40:92:67:5c:c3:ae:0a:fb:08:d4:ac:18:e1:f7:c8:
26:1b:7d:d1:49:12:ad:c0:ff:02:1e:ec:da:bb:0e:
65:76:64:09:17:33:e3:8a:54:35:67:fd:1c:05:ca:
d7:83:17:5f:47:bd:4f:9c:9f:0c:d5:cd:08:91:b8:
7a:79:c3:b8:cd:8f:27:64:e1:a1:06:e5:81:02:2b:
e0:53:a5:56:fd:4f:4a:f3:67:93:1d:a2:46:99:1a:
0d:c6:7a:4d:f9:60:e0:85:91:e8:e3:db:db:e0:28:
fc:93:7c:e1:f0:6d:e4:10:f3:d1:6e:0d:68:7f:cd:
ff:00:70:ec:ea:78:97:59:62:2d:33:e5:a1:68:31:
b8:47:1a:ce:f5:f3:5a:0a:72:68:1f:39:fd:e3:3a:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:30:DF:39:49:CD:C6:53:88:81:14:AA:BD:34:8F:8D:D5:12:F8:D0
X509v3 Authority Key Identifier:
keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:10:a2:46:d3:e1:1b:d1:81:37:b1:00:33:b1:ed:32:1a:fd:
69:aa:ab:34:cb:c4:0c:b7:88:08:db:32:bd:4e:cd:c0:85:af:
56:cc:64:c1:7b:f7:65:45:c7:c0:3c:80:97:02:3f:39:a6:ad:
0f:52:e9:ea:b1:de:1d:6f:00:b6:81:6e:0a:97:c8:b6:2d:73:
42:01:8e:07:a8:28:9d:e3:5e:ce:1e:91:dc:c4:b3:b6:ff:ac:
3a:9c:08:03:10:bc:c4:fb:93:2b:0e:e2:be:47:51:80:b3:ae:
1c:5f:fb:42:83:e8:d5:d9:c2:85:30:4b:ad:b8:93:02:53:17:
56:72:f0:99:77:a4:31:31:90:a7:e7:2c:01:8d:79:fd:a4:24:
b5:38:1a:b2:6a:70:f6:14:04:1c:71:79:b5:1d:64:4a:18:87:
c5:46:51:89:77:85:1c:27:8a:76:32:05:a1:a2:57:fb:4f:fb:
e4:e6:cb:9e:b4:e3:05:f9:ed:d7:e8:83:aa:60:fb:50:c8:47:
53:df:ed:77:d5:20:f7:ab:94:68:a3:21:41:54:a7:bb:9b:ab:
e1:05:23:1f:d3:aa:ac:bc:37:13:0e:5e:a2:04:c0:c8:39:4e:
64:a5:c7:40:d5:b2:f0:be:2a:40:ba:cd:e8:d3:fe:b9:c9:6b:
ad:a9:82:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:54 2025 by rpki-client