Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
File: erdLATB_nD-nVhljhBcxFeZubFU.mft (raw, json)
Hash identifier: K73wfyeHFBKH3ryjgDQ410Njy4s6P2q9ktkUtvT+OGM=
Subject key identifier: 1F:81:8B:2C:09:A9:1D:98:C2:16:4F:D7:6C:2C:AC:2A:52:AF:4C:33
Authority key identifier: 7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
Certificate issuer: /CN=7ab74b01307f9c3fa756196384173115e66e6c55
Certificate serial: 0194C4D1327B8FD3251B6DFC3FBF5E91BFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
Manifest number: 13EA
Signing time: Sun 02 Feb 2025 04:00:31 +0000
Manifest this update: Sun 02 Feb 2025 04:00:31 +0000
Manifest next update: Mon 03 Feb 2025 04:00:31 +0000
Files and hashes: 1: H_cpBCvCutvAscvnVH0nAJ9bf8E.roa (hash: VsvUJKz6XTa2F/RmbCVnN0kjZP20tMHemCYqI67BJ4Q=)
2: erdLATB_nD-nVhljhBcxFeZubFU.crl (hash: /KxoDRzYaNPL28eyLZ5Ub/cqYdRfna4mr0bOWdRsIYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:32:7b:8f:d3:25:1b:6d:fc:3f:bf:5e:91:bf:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab74b01307f9c3fa756196384173115e66e6c55
Validity
Not Before: Feb 2 04:00:31 2025 GMT
Not After : Feb 3 04:00:31 2025 GMT
Subject: CN=1f818b2c09a91d98c2164fd76c2cac2a52af4c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:a6:ec:85:12:9b:0f:43:a3:70:d1:1e:45:
1a:50:8c:76:09:ea:b4:03:f2:30:46:d3:27:73:88:
ef:de:42:b0:c4:f7:a5:07:f3:b1:f7:f9:6b:92:ba:
98:e1:24:92:d1:b8:dc:c0:d8:c6:3b:b9:59:53:58:
85:d1:6b:79:4f:0c:20:d5:dc:90:e9:53:df:71:ff:
82:8b:a8:c8:7b:f5:c8:54:f4:dd:41:08:bc:c6:97:
66:3f:3b:81:9a:c5:0d:86:bf:99:65:d7:00:81:ca:
b2:b1:bc:71:e3:6e:ec:e3:a8:b1:66:aa:cd:e1:17:
59:4b:ee:d7:23:38:d7:ee:ca:14:48:5c:b0:79:d7:
b3:da:e6:c4:06:bc:b7:c3:6a:b0:8c:56:4f:f9:fe:
88:70:c5:78:44:2b:6a:f0:07:d3:0c:25:80:07:59:
f0:94:24:98:d0:9a:fc:83:d7:d2:57:24:6f:41:e7:
ca:4e:42:48:bb:7c:6e:28:c5:65:9a:5e:bb:16:68:
08:2a:01:dc:ad:1c:54:91:5d:df:f2:c2:81:a2:0d:
cd:4c:f6:b8:1a:9c:64:f7:57:98:0a:71:fe:2c:8a:
21:37:1a:c1:c2:53:f1:b6:13:e8:c5:8d:06:b8:fc:
49:3d:33:1e:07:22:32:af:45:a7:3c:22:77:5f:44:
8c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:81:8B:2C:09:A9:1D:98:C2:16:4F:D7:6C:2C:AC:2A:52:AF:4C:33
X509v3 Authority Key Identifier:
keyid:7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b2:c1:f2:32:47:d7:17:6e:6d:0d:5b:71:aa:72:16:78:e2:
47:e0:2e:1a:01:23:6c:ab:ea:81:63:18:64:38:55:49:93:98:
5e:8c:91:f7:a5:16:0c:22:41:e2:1d:4e:59:d7:b2:42:ad:05:
3c:bf:e6:fa:b1:e4:26:af:39:9c:3c:73:1f:4e:1c:85:ea:ef:
8a:ac:c9:29:f4:57:91:fb:1e:1a:9d:a1:89:28:f7:f3:b2:88:
01:42:24:2d:36:d9:69:77:ce:9b:ad:ff:03:97:f6:33:93:ab:
94:0b:74:99:a5:2d:c6:4a:a0:76:54:1f:2c:a2:0e:44:af:97:
bf:05:95:b3:7a:fa:de:9f:a9:f9:aa:0c:8d:62:80:a9:aa:a6:
21:a8:5e:36:b9:db:b5:4b:7e:64:79:49:ad:0a:97:06:3b:13:
01:12:59:6d:a6:b6:1d:40:66:41:29:8d:cc:92:32:ac:ec:3b:
06:1b:fe:7b:66:f6:af:a9:f5:86:e8:6d:01:66:47:c3:eb:9c:
60:24:c8:74:6e:5f:1c:66:5c:92:b4:74:fb:ae:a1:28:36:1a:
9c:53:db:73:36:b4:e2:a7:4b:b5:fd:18:00:1b:53:f5:63:4c:
90:98:44:a2:db:20:6a:48:fc:f0:9b:d6:37:cc:c6:38:51:d2:
62:59:eb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:32 2025 by rpki-client