Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
File: 4uevc8B6V4KvJINOvdt0qciXxP8.mft (raw, json)
Hash identifier: rn777+bK3uvQEWRGm3F4uId8c1luIu4r8C0TgsQBqBo=
Subject key identifier: 79:4A:F5:90:71:4A:FE:D1:6D:BD:46:89:E9:CE:72:F9:22:06:BA:2B
Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
Certificate issuer: /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Certificate serial: 0194C42C429AD857EFE1311CC0DD389FC6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
Manifest number: 89
Signing time: Sun 02 Feb 2025 01:00:22 +0000
Manifest this update: Sun 02 Feb 2025 01:00:22 +0000
Manifest next update: Mon 03 Feb 2025 01:00:22 +0000
Files and hashes: 1: 4uevc8B6V4KvJINOvdt0qciXxP8.crl (hash: 8t1Ov1mwV8Qd3wrJSsr090QCmgGlHS/m87mOIXzYiu8=)
2: k33f_PMIoHn5FXjWs9o_hAagQPU.roa (hash: CQN6YPAgrfc6UnCswx4tiN7JfnanWIcuyP1dM7rzekg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:42:9a:d8:57:ef:e1:31:1c:c0:dd:38:9f:c6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Validity
Not Before: Feb 2 01:00:22 2025 GMT
Not After : Feb 3 01:00:22 2025 GMT
Subject: CN=794af590714afed16dbd4689e9ce72f92206ba2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1e:1f:a3:bb:13:55:6b:eb:e5:11:2a:ee:72:
15:4e:00:c9:63:5f:6f:6f:90:15:3d:18:38:74:cd:
19:a2:89:53:96:4d:2d:3f:44:59:09:8f:44:fe:b1:
1e:19:f1:c7:38:c8:1e:46:0e:d1:35:c9:6e:7b:80:
e4:be:96:ec:fc:cb:44:dc:d6:4b:bc:2b:a8:0b:55:
fa:c9:1d:99:0f:8e:cc:db:3b:9c:62:28:a1:34:8a:
cb:05:c2:9c:e5:44:79:3e:e5:2c:a5:74:3f:03:8e:
e7:d5:a1:61:b0:69:8b:f9:49:69:ff:03:16:a0:a5:
dd:48:7e:bf:6c:03:22:99:c1:66:89:1d:10:65:01:
6b:e9:1f:7d:f9:2f:37:d4:81:d1:9c:55:a1:39:d6:
fb:59:8d:99:17:a0:ba:15:2b:24:b4:30:fb:83:45:
ea:fa:40:6c:a1:64:7c:bf:10:2e:fd:11:06:63:6b:
db:90:34:05:66:19:71:22:13:51:ff:6d:87:b3:b7:
95:e6:ae:c7:44:9b:9b:47:1b:c7:3b:cb:b4:15:3e:
0f:a5:10:df:3e:e1:d4:5b:97:04:ad:d6:64:89:ae:
b9:a1:13:54:e3:18:d5:9d:f6:1f:30:11:96:d3:c6:
ae:ea:d5:81:3f:6d:41:44:c2:7c:eb:dc:85:33:4a:
55:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4A:F5:90:71:4A:FE:D1:6D:BD:46:89:E9:CE:72:F9:22:06:BA:2B
X509v3 Authority Key Identifier:
keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:20:97:50:97:96:c5:ed:ab:3a:7c:49:83:d0:96:83:07:b7:
76:3f:94:c9:69:3c:f3:ed:b5:07:9a:22:d0:1d:38:02:3d:11:
c9:21:28:64:f5:77:88:24:9d:16:71:9d:5a:1f:39:87:21:37:
c0:ec:1b:1f:80:f0:0c:5c:29:2d:75:74:55:3c:42:ec:80:78:
9f:a0:8a:76:e9:7f:d0:07:8a:57:cd:6e:81:2a:75:48:22:18:
3d:17:f3:f7:25:2b:9c:67:b9:a2:f0:37:40:d2:fe:fe:22:1e:
fc:05:56:ec:51:fc:d2:88:08:5b:8a:73:80:73:30:77:46:62:
35:ee:ea:cd:f0:16:54:8e:bc:fa:97:08:49:49:88:72:4d:14:
05:e5:04:48:1c:12:17:cd:7a:35:58:24:e4:9a:34:11:06:3c:
5b:36:50:89:2e:cf:d5:aa:39:75:10:fa:e5:ff:6c:f4:14:87:
1b:ba:cc:31:c0:4e:c4:8e:51:34:f6:76:e7:3c:b4:a6:b5:b6:
58:f0:0b:8f:c9:c6:1b:4f:c7:b3:d1:ef:16:ed:65:6e:79:d2:
fc:5e:56:5c:a9:2d:a5:24:e0:e1:f4:88:c9:af:ad:1f:e0:cb:
cf:ee:68:4e:7e:8c:bb:14:c1:64:d4:d9:bd:5a:3d:ec:6a:ed:
c6:60:0c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:43:54 2025 by rpki-client