Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
File: px4O7lkN4v2N7Epn6HvIlv_IsrU.mft (raw, json)
Hash identifier: oZXxE0qNIb/7d29qlt6Vd+WcsaUHhfmhMzsqyo5ve90=
Subject key identifier: 1F:21:53:FF:45:30:9F:BF:3B:FB:57:32:C2:78:48:FA:95:D5:2B:A9
Authority key identifier: A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5
Certificate issuer: /CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
Certificate serial: 019511A2B37EA3200662A1CFE019F1EE6B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 02:00:30 +0000
Manifest this update: Mon 17 Feb 2025 02:00:30 +0000
Manifest next update: Tue 18 Feb 2025 02:00:30 +0000
Files and hashes: 1: gACG_CZ-Iug99I2lwvBj2F9-h5o.roa (hash: nmlBka4iP6DO0ZjdL5pCRw7PZdQRFau0PkO/pT9dD0g=)
2: px4O7lkN4v2N7Epn6HvIlv_IsrU.crl (hash: wzcMjmQYNc0fvXlx1leeXeFFTAhaYFmX0ere7yC2c8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:b3:7e:a3:20:06:62:a1:cf:e0:19:f1:ee:6b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
Validity
Not Before: Feb 17 02:00:30 2025 GMT
Not After : Feb 18 02:00:30 2025 GMT
Subject: CN=1f2153ff45309fbf3bfb5732c27848fa95d52ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:79:e1:4e:e7:3d:d9:38:56:65:67:84:91:24:
e4:e6:e0:0f:4d:ee:ee:ba:ac:15:0c:fb:15:52:95:
57:a1:16:fb:7d:3d:d8:05:61:2a:bd:72:eb:45:d0:
33:89:73:66:a3:2c:89:8e:26:7a:ee:ee:9b:db:5a:
93:63:4d:3e:1a:72:d4:f0:b7:ff:79:42:62:c3:ae:
bb:7c:aa:ec:68:dc:a2:f9:34:f9:57:7d:b2:45:3d:
ea:d7:e3:bc:82:73:20:00:4c:27:9e:54:ee:ec:a5:
32:b3:f8:54:18:c7:f5:e4:fa:83:e3:91:59:80:83:
86:e7:f7:7d:c9:d7:32:e2:a1:4a:97:d8:40:ae:29:
54:1b:de:1f:56:5b:01:7d:6d:1b:02:05:ac:69:26:
ca:28:b1:28:59:4e:15:6c:59:c8:93:23:8e:24:16:
e5:d0:25:2f:5d:ac:08:c2:e0:70:09:14:a6:ad:ff:
7d:22:17:86:e5:86:ca:84:fa:4f:b0:e5:01:45:3a:
2f:e2:7b:03:62:1e:2d:c8:6f:66:cd:02:79:15:e4:
34:66:a2:23:6c:2c:81:84:09:67:cb:f2:ae:40:a0:
1c:2c:cd:a6:24:31:a7:3a:1a:a6:df:b6:8c:da:57:
dc:34:55:23:a5:15:4f:f9:16:65:ce:2f:e3:6f:bb:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:21:53:FF:45:30:9F:BF:3B:FB:57:32:C2:78:48:FA:95:D5:2B:A9
X509v3 Authority Key Identifier:
keyid:A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ce:74:28:bb:08:30:cf:9b:2b:d3:21:af:2c:35:5f:4b:dd:
20:26:f4:f7:17:62:ab:50:64:4d:cf:9f:53:77:2f:41:a3:7d:
e3:42:a8:e2:1f:cd:30:bd:55:5a:94:23:db:98:48:be:33:dc:
70:8d:9c:b4:dc:d7:32:3d:a2:35:56:5c:cf:bf:76:87:14:ba:
ac:db:08:e7:ad:e3:7f:a9:8f:73:14:c9:43:4a:88:18:83:34:
77:37:d2:34:17:68:11:b1:e4:6c:c6:7a:c5:7d:69:96:33:1a:
05:67:31:b1:71:50:76:18:fe:13:cb:d6:ff:ac:8c:c9:a3:66:
b6:54:ce:46:6f:d7:dd:2e:d4:bb:29:74:18:2b:26:4a:a1:17:
8b:57:ed:18:b9:14:46:b1:c7:8c:0f:95:7f:9a:08:84:b9:91:
9b:31:a1:db:5b:84:b1:54:36:fd:c6:91:65:ce:50:f9:31:02:
7d:f1:85:12:47:26:76:46:48:00:be:40:79:f2:57:de:71:58:
c3:ea:a1:86:af:45:b7:75:6b:25:99:f7:6b:de:4c:d5:e5:a2:
51:5f:4e:ed:60:83:be:5d:f1:9f:9c:4b:19:1b:49:2e:1e:80:
6d:ac:14:72:a1:ef:24:b1:6e:e7:ce:4c:85:0d:7d:4c:d9:36:
82:71:6c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:18 2025 by rpki-client