Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier: lmF8V84cTexgI+n+WQoF3M1qPNEwcWhNVgNbiA8KNw8=
Subject key identifier: 26:B3:00:5A:BA:07:DA:4A:0A:69:F0:AF:4B:8F:E2:8C:99:0B:B9:EC
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 019512478FC8D5BA366F33A5C05BCEC3391A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number: 0C24
Signing time: Mon 17 Feb 2025 05:00:34 +0000
Manifest this update: Mon 17 Feb 2025 05:00:34 +0000
Manifest next update: Tue 18 Feb 2025 05:00:34 +0000
Files and hashes: 1: 5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa (hash: O5AF3h5GUvVjXi+fdnM5KUl9Mafj4SPh9elj1bhbK30=)
2: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: 8CrcXXwCmJY9BOqjsjsHfWzM3vH9QI1DTeFY3WECWvg=)
3: jAeBGrf8BFIRbqKfW6MMAFHsAAY.roa (hash: XkntMpJexF4yO1fbtCkxhPtOe5hHQjbro7XU8mxBw50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:8f:c8:d5:ba:36:6f:33:a5:c0:5b:ce:c3:39:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Feb 17 05:00:34 2025 GMT
Not After : Feb 18 05:00:34 2025 GMT
Subject: CN=26b3005aba07da4a0a69f0af4b8fe28c990bb9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:d2:9e:d5:ba:2e:bc:54:37:29:40:63:99:
f4:1a:91:a1:6b:5c:0f:60:33:c1:1c:73:cd:21:f5:
56:63:ab:78:de:0b:ea:2d:5e:64:ab:fe:bf:77:33:
25:b0:22:3c:e9:66:6e:a6:e6:8f:e6:28:ac:8f:b7:
48:71:6e:90:d4:7a:8c:c8:ad:2e:c0:41:f6:44:95:
9d:52:75:6b:3e:d6:fb:ae:e0:65:59:95:9e:c4:e4:
ea:09:92:8d:76:36:08:d7:bb:5d:54:95:21:29:eb:
92:af:bb:5e:5a:cd:87:ae:f9:a3:75:f9:52:6d:bf:
55:42:a4:c9:ce:ae:c6:11:16:d8:5c:3c:a8:33:71:
9e:8b:cc:2f:a3:02:fa:8d:04:bf:b9:34:74:a9:4e:
e6:71:c9:94:a2:ca:a8:93:0f:70:f7:ff:2c:ed:6e:
e3:c0:b4:85:5f:bd:a1:ae:7b:dd:73:7d:e4:a3:72:
df:92:63:d5:73:54:ad:61:c3:8c:8b:38:db:3c:7d:
1d:a1:47:ee:30:2a:0d:4b:21:2f:fa:2d:f6:04:5b:
78:29:fb:84:b1:e4:70:30:a5:7a:23:87:ca:87:3b:
e4:bd:50:c1:be:72:1c:a4:06:0e:20:48:0b:f5:98:
cb:f7:fe:24:12:9c:ed:fb:fb:af:45:a6:67:55:58:
8c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B3:00:5A:BA:07:DA:4A:0A:69:F0:AF:4B:8F:E2:8C:99:0B:B9:EC
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9d:d9:55:62:5b:92:fe:f8:0b:00:2f:65:c4:00:ae:66:17:
a0:d2:88:97:76:cf:5a:f5:51:7d:33:1a:e4:95:cb:34:dc:cd:
8c:fd:6d:14:9f:35:d3:cc:73:e1:e4:d2:fd:41:5e:64:f4:df:
9e:63:ee:8f:0a:c9:34:3b:a8:b7:ee:0b:08:25:9d:5e:a9:e1:
05:65:04:7b:3f:e1:f0:bb:05:b9:30:2d:4a:b2:b7:25:01:5e:
30:cb:6a:5d:3f:b6:f4:63:fb:08:b0:72:54:8f:ee:b3:6b:77:
0d:29:96:ae:34:f2:b8:92:3b:8d:a8:94:d1:72:4a:26:fa:7d:
4d:1a:7f:af:2c:32:07:bd:1b:c1:ca:07:d0:6e:72:aa:2c:43:
e7:55:95:d9:ff:1e:96:d4:95:80:d8:e3:08:c0:00:a0:53:ed:
93:35:57:d8:84:e5:c9:53:85:ef:45:91:9c:f3:a0:6d:bf:5e:
39:a4:ea:6f:f4:c7:6f:e8:b2:5b:f6:1c:ca:11:de:23:4d:96:
bc:04:92:0c:6a:ee:e4:1c:e3:bd:8c:96:30:33:c2:df:a0:0b:
80:96:35:c6:ff:77:88:1a:84:36:28:62:38:8b:d7:cc:ae:75:
95:32:31:ea:d0:b6:54:89:ed:63:81:20:7f:67:96:1f:81:9c:
f9:da:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:54 2025 by rpki-client