Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
File: meh9VkzLhhHhQKeyvyYMSiIrWdY.mft (raw, json)
Hash identifier: cvgz3AGKqmXSXAddymkzYn/vZsFK0qdBTP0VUAQmVFQ=
Subject key identifier: 49:4D:51:03:68:0D:DD:5C:5C:8A:A6:E1:B4:DD:01:76:8B:B1:58:76
Authority key identifier: 99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
Certificate issuer: /CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Certificate serial: 0194C350BEF45761BF86EF825BC34DCCF0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
Manifest number: 044B
Signing time: Sat 01 Feb 2025 21:00:36 +0000
Manifest this update: Sat 01 Feb 2025 21:00:36 +0000
Manifest next update: Sun 02 Feb 2025 21:00:36 +0000
Files and hashes: 1: meh9VkzLhhHhQKeyvyYMSiIrWdY.crl (hash: 0nWREgcMGm7Trkv3j/TmvWf3VKWO5AKLplObvbtSzpE=)
2: nFnXzGX9x8WjQH0WTEkYEV58ntE.roa (hash: qp697Wbqn7eonfV2epdNmLzMoHnyKSRFdJF1JaKpdqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:be:f4:57:61:bf:86:ef:82:5b:c3:4d:cc:f0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Validity
Not Before: Feb 1 21:00:36 2025 GMT
Not After : Feb 2 21:00:36 2025 GMT
Subject: CN=494d5103680ddd5c5c8aa6e1b4dd01768bb15876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:77:cc:a5:de:90:bc:41:0c:53:e2:d3:9a:
23:a5:fc:9b:10:fb:c1:96:f9:81:f1:b2:65:15:6e:
a2:cb:77:2d:12:7e:e3:aa:f6:86:a9:ed:5d:92:da:
2e:ca:2f:85:44:59:90:bc:59:6c:91:e3:b4:86:63:
f4:22:78:8f:e7:a9:f1:13:ac:03:b8:29:92:06:e3:
98:91:16:1e:7c:87:d3:92:3e:27:61:86:cf:fc:3a:
9e:f7:22:19:bb:ab:7e:d7:c9:1a:91:18:d7:95:b4:
fd:6b:2e:51:8d:30:f4:7a:91:ea:84:6d:5f:3b:93:
c1:da:a5:79:1a:73:98:37:64:e7:b2:3a:06:d4:bb:
26:fa:f3:f6:18:5b:f2:7c:a4:3e:24:ca:15:df:89:
1a:54:cd:24:ee:75:e8:d3:5e:e0:43:bc:8f:d8:c7:
13:f0:28:c6:d4:52:52:26:b6:d8:08:40:44:56:ef:
b9:75:53:f6:88:c3:b2:b1:ee:b4:af:a5:4a:44:51:
96:2c:64:b6:bf:18:8a:c4:f8:fd:da:6f:72:3e:03:
32:77:f4:95:84:87:32:1a:21:ca:3d:b5:69:7b:cb:
4a:44:77:dc:2e:54:19:31:ed:b2:e9:aa:8a:a2:ec:
35:f6:c6:d1:46:aa:5e:eb:8b:6d:b4:cb:43:5e:96:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4D:51:03:68:0D:DD:5C:5C:8A:A6:E1:B4:DD:01:76:8B:B1:58:76
X509v3 Authority Key Identifier:
keyid:99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ee:71:13:54:1c:62:03:77:31:c2:e7:6b:31:37:87:fe:39:
04:ab:1f:d6:38:2f:a3:96:64:46:c6:18:a3:9b:aa:48:58:18:
91:9e:4e:3f:32:f9:93:b9:b9:c9:57:d8:75:03:17:e8:f9:de:
6a:94:10:d2:f2:56:d2:93:ec:87:96:24:7e:ce:35:e4:47:22:
09:a2:cd:9c:0e:eb:eb:65:0e:9d:ea:4a:54:70:84:ce:a4:d8:
b0:3b:21:b7:87:30:67:8e:ec:8a:43:56:a6:d6:29:1e:48:28:
e2:6c:6a:03:d1:94:bf:3b:e0:ce:9d:7b:93:09:f0:c3:f7:f2:
cc:bb:8a:21:38:b9:64:7f:6b:34:ca:ba:7a:ac:86:43:ac:92:
9e:7f:f1:ad:1f:08:be:a7:24:f9:d6:2d:08:4b:c7:af:1b:59:
93:ad:01:bf:87:cd:fa:f9:7d:f2:9c:b8:12:44:81:c7:bb:9f:
72:0e:8f:07:b3:aa:14:d5:12:29:42:e9:4e:c5:54:67:db:ce:
88:66:cb:38:e4:fa:49:33:bd:c9:11:43:21:29:e9:46:9f:3a:
32:88:0f:8a:8d:e4:0b:6e:97:0a:f2:39:ee:0b:c9:b5:dd:ee:
3a:bd:38:3b:7e:8a:bd:9f:0e:4c:5f:cc:0a:bc:80:56:aa:28:
a8:ab:9d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:00:55 2025 by rpki-client