Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: FE2nXQVlVsiRJh5G+o5HCcD4wY5Q2IjNc92hsDGv0/c=
Subject key identifier: EC:41:29:F1:E5:8B:C3:E2:1D:3D:35:6B:6C:8D:B1:CD:5D:CF:CA:04
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 01951135071A1208E80A4AE3C0A443D79034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 13D7
Signing time: Mon 17 Feb 2025 00:00:42 +0000
Manifest this update: Mon 17 Feb 2025 00:00:42 +0000
Manifest next update: Tue 18 Feb 2025 00:00:42 +0000
Files and hashes: 1: FA5kIU24hM_qMfpPw3H0FEFE5Rg.roa (hash: h787qQINJkY9AEcKodXyVYw/H10um2LVQVfl/N4LsrI=)
2: TMkhKaPUJB4LI1mMmf3sccZhBEE.roa (hash: SQD8a+jFccoVxuuqM1aTazg815YSaiMZNjfARcco9Jw=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: AMcaIQd6a4PNTzhT6aH4LrQ2MlNq1vDE/7bHXQcgX+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:07:1a:12:08:e8:0a:4a:e3:c0:a4:43:d7:90:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Feb 17 00:00:42 2025 GMT
Not After : Feb 18 00:00:42 2025 GMT
Subject: CN=ec4129f1e58bc3e21d3d356b6c8db1cd5dcfca04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3b:81:b1:dc:56:21:91:5a:b3:28:ab:a0:36:
c7:74:03:b7:2d:32:9c:5e:58:a0:b0:eb:b7:ab:1a:
af:bc:b7:c0:01:09:56:dc:f3:7d:f8:51:1b:9f:73:
e7:e8:ba:bf:d1:80:d0:db:c3:3c:60:50:bd:56:c5:
8a:e8:5d:f8:7d:25:63:b7:a8:a8:d6:ff:64:63:bc:
fb:d6:cb:13:7f:1b:e5:98:3d:fe:71:d5:7c:50:e8:
56:38:75:35:f6:53:77:0b:72:ba:cc:8c:48:65:ea:
3d:ee:cd:28:01:fd:22:2a:28:d4:d8:53:e9:e9:4d:
36:ca:cd:3c:e3:25:59:32:92:7b:ff:33:bf:46:13:
a5:f5:84:47:70:3d:85:4d:c7:82:b1:a8:61:89:fb:
dc:42:79:83:03:78:36:91:2a:e2:dc:ee:ba:7e:09:
ee:5a:11:12:f2:0e:c2:a9:b6:d3:fc:4e:6e:4b:26:
3f:0d:1f:5a:f4:31:8c:55:e8:64:7e:df:1e:12:4a:
21:76:a1:e7:44:a8:22:ab:47:9e:80:43:82:ab:15:
c4:27:7f:03:92:53:29:29:bb:e3:26:48:4c:e8:c4:
49:24:49:1d:7c:92:bd:9a:08:bf:3f:5e:e5:89:fe:
09:eb:bd:14:07:d6:2b:39:82:48:ee:16:5c:be:37:
e0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:41:29:F1:E5:8B:C3:E2:1D:3D:35:6B:6C:8D:B1:CD:5D:CF:CA:04
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:14:96:cc:6c:03:a5:d1:09:46:96:bf:d5:87:0d:6d:ee:75:
cc:48:7d:d8:4c:c6:80:c0:24:0e:60:51:e8:c2:70:6b:f3:d1:
57:2f:5f:9d:d3:8c:a1:f1:e7:15:69:b4:7e:23:32:f9:60:25:
27:d0:22:3a:7a:29:85:9d:b3:e8:42:ac:41:f1:c9:b3:bb:0a:
e2:92:30:1e:dc:c4:11:07:1a:6b:d7:34:f1:73:3b:4e:5e:8a:
b3:7d:3a:eb:64:d9:39:78:79:23:62:c9:a0:e2:45:3c:34:67:
ae:14:f1:39:c2:df:85:6c:51:60:8a:c7:aa:a6:f8:ff:4f:95:
60:63:ec:b4:a0:48:ff:de:ca:0a:31:39:7a:f3:89:3c:2f:b0:
04:99:ba:e1:e1:48:0b:84:ba:d3:b7:49:07:73:15:49:76:15:
74:3c:18:b8:eb:6f:67:46:6e:32:55:a8:de:75:47:66:60:06:
de:47:eb:44:ff:4e:28:ef:b2:69:31:17:0f:e2:b9:a4:72:f0:
17:66:71:0d:47:d2:e3:77:86:72:06:2a:8e:6b:95:0b:5c:fb:
9b:1c:ec:01:19:7c:17:e4:fb:d2:48:75:8d:98:eb:f0:c4:60:
ef:dc:47:22:3a:58:a8:c4:73:03:07:5a:59:37:56:b4:86:5b:
f1:f7:a1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:06 2025 by rpki-client