Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
File: eQ3IFFdVEBrMCIiqALsouZW5xPE.mft (raw, json)
Hash identifier: VBUEr9NbLxLz2GaA5ES++PUV5J+5F05FyuPukHMreFM=
Subject key identifier: 85:6E:0F:73:38:90:44:2B:CF:64:78:F1:0C:04:7B:00:B8:4D:71:9B
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial: 019510C7C37D67776F6EBEFBC7121C8CA424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
Manifest number: 1457
Signing time: Sun 16 Feb 2025 22:01:21 +0000
Manifest this update: Sun 16 Feb 2025 22:01:21 +0000
Manifest next update: Mon 17 Feb 2025 22:01:21 +0000
Files and hashes: 1: 1qgt4GAyW_3c-IECItJTlUngLgw.roa (hash: JMxnB6RQt5YXqrAyQkabjodjhDTimqSiK2ILClsZiRA=)
2: eQ3IFFdVEBrMCIiqALsouZW5xPE.crl (hash: 3gZ74rRGOUZF3LDjhXXx/woWs9m5jXatSGMkVJvGBic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:c3:7d:67:77:6f:6e:be:fb:c7:12:1c:8c:a4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Validity
Not Before: Feb 16 22:01:21 2025 GMT
Not After : Feb 17 22:01:21 2025 GMT
Subject: CN=856e0f733890442bcf6478f10c047b00b84d719b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b7:0b:01:f2:02:ca:54:22:62:fc:b2:fc:d4:
c0:a4:29:ce:55:5d:54:3a:d8:f0:04:af:b0:79:94:
2c:18:6b:8e:74:f5:6b:f5:64:ce:8d:6f:30:ac:67:
d3:75:37:29:07:56:29:42:73:2c:e8:b6:16:0a:4f:
5c:20:0b:b8:b9:47:dc:8a:81:b3:26:26:a2:55:cf:
11:e9:0f:f1:56:38:1f:96:6a:6d:22:5c:ce:15:da:
41:7c:b0:8a:d4:93:c4:5c:6a:e7:43:3e:43:a6:ce:
8f:85:47:00:e7:17:b9:3b:68:99:01:3e:e3:f7:b7:
d5:5c:38:12:de:f2:c9:74:fb:21:46:51:f8:36:66:
26:0e:2b:ae:61:61:9d:43:45:f2:18:ac:b4:67:34:
e5:16:b4:64:ce:60:f5:87:88:f0:72:42:1f:6b:d2:
06:f5:eb:a4:1f:f8:dd:02:be:34:d3:e9:db:19:07:
df:93:24:c2:1b:5c:cf:ee:da:54:79:c2:b7:d9:68:
c6:16:5e:39:e3:5b:57:ce:81:34:4a:be:96:79:b3:
cb:e3:d5:17:27:8c:9c:2b:f5:20:b3:48:95:49:62:
23:67:e0:91:74:02:f7:68:dc:90:0a:74:d4:c0:84:
6a:4d:d6:7c:21:b8:a0:f2:8c:90:27:01:a6:78:67:
fe:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6E:0F:73:38:90:44:2B:CF:64:78:F1:0C:04:7B:00:B8:4D:71:9B
X509v3 Authority Key Identifier:
keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a3:80:56:cb:36:28:1d:81:f0:2e:b6:60:aa:25:f9:55:b2:
65:c9:a2:e8:e3:35:e9:af:1d:8f:85:26:a7:67:1b:41:88:39:
7e:ca:80:3b:74:e1:fe:a3:af:0c:12:20:72:bd:31:e0:33:37:
b5:5f:e4:3c:cf:3d:5f:34:6f:46:88:fc:bc:1f:0e:fd:79:fe:
8e:12:fb:29:85:fb:b8:ba:8f:07:03:8f:ef:fd:3c:aa:ec:63:
f9:e1:43:14:94:2a:de:77:be:8f:93:e1:07:92:26:f3:6d:3f:
07:0a:04:33:89:18:fe:ef:de:cb:44:43:80:84:5d:df:f9:af:
77:1b:96:12:44:7c:73:66:ed:8b:69:19:f9:60:21:69:26:a6:
4d:4d:cc:0d:6b:d3:44:09:57:77:88:e2:69:8f:86:49:66:64:
f0:00:06:ce:0b:31:4f:a0:17:43:c1:67:e8:dc:48:e1:f9:d4:
35:a4:69:cd:d2:39:f7:0c:e2:13:9c:52:aa:c4:94:3c:3b:fe:
be:97:c2:c8:a9:00:ba:39:5d:7b:e3:d3:b4:91:67:5d:8a:57:
29:8e:7f:21:22:5e:55:b4:74:0c:ae:38:d6:de:cc:50:c2:cf:
e0:ca:84:b7:ba:88:af:88:71:3c:af:1b:25:5f:a3:98:d5:8e:
8e:56:9b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:27 2025 by rpki-client