Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: 1l7SfVI8KMDPKXWNaXhmtjsFfaNOU1+YFKv3ZG3XD7A=
Subject key identifier: A2:7B:90:AF:71:73:F5:BA:2A:63:16:71:C5:B8:AA:9C:FA:D1:EC:91
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 019511D957D4401AD578A13EF3738541D557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 03:00:11 +0000
Manifest this update: Mon 17 Feb 2025 03:00:11 +0000
Manifest next update: Tue 18 Feb 2025 03:00:11 +0000
Files and hashes: 1: 0SO2bdDSFS2jl_PJgU_l_j97XeY.roa (hash: b5x4PF/4pc6ecIpAqqWDUvsSnbLqRaDPB8YvR8rbRKg=)
2: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: 5V6PbdcF1nmyP3q4GwNZQ8Y9gtzp242/24OwuNjLWAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:57:d4:40:1a:d5:78:a1:3e:f3:73:85:41:d5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Feb 17 03:00:11 2025 GMT
Not After : Feb 18 03:00:11 2025 GMT
Subject: CN=a27b90af7173f5ba2a631671c5b8aa9cfad1ec91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:92:97:8e:d6:7f:16:ab:1a:5c:89:b2:1c:
35:1a:7f:70:d1:05:ce:36:22:1e:62:a6:20:b6:a8:
e4:e4:e1:ad:5f:23:4b:80:6f:fa:4f:a3:82:6c:87:
49:22:09:34:c0:24:17:5c:49:47:ef:75:4c:65:b4:
36:24:d6:f0:c9:e5:f4:12:32:2f:35:7d:eb:d3:69:
c6:ae:bd:35:4d:2e:af:3c:9c:c3:13:99:f1:2a:1c:
e9:8a:f7:4b:d9:5f:b4:42:0b:9d:e1:ff:61:27:fc:
04:2b:0c:75:88:79:43:40:33:5e:57:8f:28:0b:f7:
42:ba:cf:61:e5:7a:cf:eb:f7:e0:05:7e:be:45:67:
0a:db:21:9d:15:6c:27:86:81:0d:fe:ea:24:7f:c1:
7e:69:c5:49:e9:3d:13:32:d6:95:d3:49:dd:f4:73:
61:bd:f8:19:ec:17:4b:75:cc:75:52:5a:b8:c1:7e:
a3:0e:e2:88:a2:a3:7f:1d:4a:bc:7d:63:94:bb:5f:
18:7e:0e:eb:59:c7:f4:94:56:bc:63:0b:44:71:aa:
59:33:18:59:f7:84:26:1b:5e:c7:7d:ed:80:81:fe:
84:6e:dd:20:7d:9e:cf:09:1b:da:ba:90:20:2d:d4:
06:ee:33:62:46:49:fb:ed:9e:03:62:50:c1:bf:c4:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7B:90:AF:71:73:F5:BA:2A:63:16:71:C5:B8:AA:9C:FA:D1:EC:91
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:62:95:d3:0b:59:67:71:81:2f:88:66:57:38:7f:b7:77:b9:
7b:21:d0:75:f1:ac:61:f7:2d:97:93:75:bb:b3:13:d2:b4:8a:
39:fb:3a:4c:46:fd:a8:ba:f7:e6:f1:08:e5:21:51:be:1f:c7:
7a:b7:99:f2:0e:2a:7f:ec:29:0d:c3:37:d5:ba:9b:8d:f4:88:
90:84:50:21:23:1d:25:77:ee:9b:37:d1:d7:86:07:a9:e3:91:
17:31:dd:e6:32:18:c4:0a:38:b6:71:c5:15:89:73:46:8b:29:
f3:f5:ce:2e:47:c6:62:8a:f2:a3:57:93:fd:67:68:e1:70:3c:
45:dc:59:83:20:7e:01:67:90:de:2f:2d:4a:5f:16:08:c8:83:
8a:7f:51:e1:fe:ac:75:f4:0b:02:c9:b6:dc:3e:ac:d8:5c:9c:
2c:a7:f5:68:c5:d0:42:f4:48:65:d4:1f:d0:07:6e:c8:64:61:
e0:8b:d1:50:be:f0:ba:a6:e2:c3:dc:28:2c:54:30:07:cf:23:
6b:4c:67:09:7b:a2:b6:ed:bc:14:24:1a:52:cb:30:e2:9d:bc:
ad:6a:f1:2a:c4:ee:44:3e:e5:c2:21:96:6d:04:28:4b:bb:9b:
bc:c2:cd:69:4b:2c:66:3d:3a:d6:64:eb:6a:7f:59:f6:c5:6b:
78:50:e2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:47 2025 by rpki-client