Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
File: eh_3AnJudbOmjxGC5H_7zcrlFeU.mft (raw, json)
Hash identifier: jdcvTncsWJqVHyrvLN52beWkZlpjR+6qqEzU8LvbjkY=
Subject key identifier: CF:14:ED:77:CD:A2:8B:A4:94:D3:B6:35:C6:18:DD:00:F0:D6:EB:C5
Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Certificate issuer: /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Certificate serial: 019510C7214327345F0F97694660A44B6DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
Manifest number: 12FE
Signing time: Sun 16 Feb 2025 22:00:40 +0000
Manifest this update: Sun 16 Feb 2025 22:00:40 +0000
Manifest next update: Mon 17 Feb 2025 22:00:40 +0000
Files and hashes: 1: eh_3AnJudbOmjxGC5H_7zcrlFeU.crl (hash: ObBxsgjHPNjg/2CgeqZm9hwOd8qfTnovU8kLt9BoVZM=)
2: mp3Ps9Wb-eE83MSoTQrKorxtZTg.roa (hash: Whr3Evryw6Na+L//5TTMD5LCJqnqbVVaoyp0nqLqIfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:21:43:27:34:5f:0f:97:69:46:60:a4:4b:6d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Validity
Not Before: Feb 16 22:00:40 2025 GMT
Not After : Feb 17 22:00:40 2025 GMT
Subject: CN=cf14ed77cda28ba494d3b635c618dd00f0d6ebc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f0:12:d2:02:4e:e7:ce:5e:c5:a9:91:3c:1b:
e6:86:83:bb:c4:14:45:35:64:e1:d8:36:dd:cb:32:
15:eb:34:e7:eb:d1:e2:7e:a4:4d:28:3e:e7:76:d5:
6b:6b:a9:31:09:db:b5:0d:eb:1b:79:2a:7e:c2:4b:
4e:f8:4c:95:97:8d:6a:87:49:10:47:1b:89:20:82:
20:bb:71:69:08:43:f5:67:1d:58:59:54:b2:a5:65:
cf:21:da:ee:bc:48:ca:77:37:52:0b:19:e7:4f:bb:
89:d6:19:cf:58:eb:ae:f1:f7:d8:3f:3a:da:44:bb:
eb:20:60:66:e4:e0:cf:20:ef:84:ed:59:ca:66:c6:
b4:c8:b6:12:3a:21:3b:ad:12:48:97:d2:5c:71:1b:
99:be:c1:0d:db:81:0c:ea:6e:93:d0:4d:8f:6c:ee:
b6:09:62:78:6f:55:9d:50:0f:7d:8b:e7:cf:bd:97:
e8:ac:9e:c0:29:0b:f7:3b:2a:85:ce:5f:c1:a5:66:
82:d5:f0:00:15:0b:02:ba:63:33:bf:79:8f:cf:30:
43:db:38:25:27:e9:f0:d4:56:e7:bc:1c:f7:8c:92:
ed:25:e9:82:db:ae:ef:d9:53:aa:72:7a:04:1d:87:
94:53:c4:03:e6:2c:b6:6f:36:38:35:2b:5d:3d:7c:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:14:ED:77:CD:A2:8B:A4:94:D3:B6:35:C6:18:DD:00:F0:D6:EB:C5
X509v3 Authority Key Identifier:
keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4b:5e:01:16:30:9e:b1:79:be:92:1a:73:40:cd:7f:87:01:
ea:69:20:1c:62:54:a1:b9:86:9c:58:b0:23:cb:c7:66:2f:ac:
c7:dd:b2:cd:fa:a7:8e:e9:b7:53:b5:29:eb:bb:76:f7:4e:22:
2b:d7:c3:f2:0a:76:20:32:ef:41:24:87:ed:6f:2a:74:5a:b8:
67:18:e1:26:2d:83:5e:0e:be:97:0f:cf:13:3c:89:bc:31:da:
71:f7:46:3b:34:23:a9:7d:b5:d5:ac:72:d8:7f:11:be:e6:b0:
b6:d9:36:63:80:6c:e5:dd:32:1d:db:78:a0:d5:1c:b0:4d:0f:
59:10:01:28:26:2f:7d:94:3e:5a:53:3a:78:be:71:05:ff:bc:
73:44:b0:26:5c:39:00:19:e8:42:55:4b:6b:21:32:6c:82:dd:
fe:df:91:77:cb:d6:6c:0e:e7:78:de:3f:36:7b:5a:47:16:a7:
b8:3c:34:d4:b6:3c:19:7c:f2:5c:b3:1d:fc:30:d1:79:b6:80:
a4:9a:a1:0e:cd:9a:3b:20:12:1d:5b:b3:fc:09:bf:e4:bd:c6:
e2:48:d9:02:f2:99:b9:5d:85:a8:df:ad:93:a0:fe:0f:c0:d6:
a3:3c:99:88:44:a4:5f:c3:22:1b:7c:f9:d3:34:9e:f9:52:22:
c2:68:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:48 2025 by rpki-client