Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
File: e20oQEBEI571gkLyEOCxZmfrQNA.mft (raw, json)
Hash identifier: 8MoLaT9bRb61y/UXZOFD9E8+5DlpnOYhIPZcukXzvmQ=
Subject key identifier: 4F:7F:B7:1B:FE:7F:18:20:CE:BE:1B:38:2E:0D:F3:BF:95:9C:F8:A8
Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
Certificate issuer: /CN=7b6d28404044239ef58242f210e0b16667eb40d0
Certificate serial: 01951134EC90C74D7FAEBCD9AFF9621F6A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
Manifest number: 13E6
Signing time: Mon 17 Feb 2025 00:00:35 +0000
Manifest this update: Mon 17 Feb 2025 00:00:35 +0000
Manifest next update: Tue 18 Feb 2025 00:00:35 +0000
Files and hashes: 1: e20oQEBEI571gkLyEOCxZmfrQNA.crl (hash: i7W/g3+fG3U5Iwt24zybFbL2HDuI3zzazyURNgB2+K0=)
2: hlbCnpGhMRluMY_1waDMmeV9vY4.roa (hash: KZsIHpuRlGx7ybmtLKdiNmONLiSIwlKsEPr24QJ/98Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:ec:90:c7:4d:7f:ae:bc:d9:af:f9:62:1f:6a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0
Validity
Not Before: Feb 17 00:00:35 2025 GMT
Not After : Feb 18 00:00:35 2025 GMT
Subject: CN=4f7fb71bfe7f1820cebe1b382e0df3bf959cf8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:aa:82:25:b9:d2:b2:e5:73:d4:92:4d:f0:
f3:b0:86:dd:7d:0d:7c:eb:b8:bc:ce:c0:47:5a:ce:
3c:50:39:5c:97:f0:c2:bf:0e:0e:fd:b8:9d:af:94:
fb:2a:24:e5:8d:b8:01:3b:9b:5d:bf:a0:a0:51:85:
a9:87:7b:35:b1:d0:3d:74:75:3b:de:8b:bc:89:3b:
de:ce:c3:af:24:dd:3f:e8:8f:9e:d3:e4:c4:a9:df:
ee:34:f5:86:6f:d8:7a:f3:46:16:97:c4:98:18:43:
52:e2:68:28:3f:1e:b6:f0:ef:5b:81:7d:08:d6:e4:
2b:01:df:17:b2:93:4e:c1:10:ac:c9:0b:41:dd:27:
54:f8:09:a2:e7:d3:1a:8e:34:4c:64:4e:38:e3:c8:
02:01:25:9f:24:4e:b4:36:d9:64:80:c5:d8:12:c4:
1a:66:1e:85:82:b6:d8:7a:d5:62:c7:3c:2c:65:28:
2c:ef:64:31:b1:26:8d:e8:6e:14:af:21:2c:d6:e6:
9d:e2:55:41:19:35:4c:df:e0:4e:96:1c:d5:ad:3d:
74:97:2b:05:ef:8b:d9:25:5b:03:22:f0:15:b1:87:
07:e4:44:63:b9:73:f0:83:7e:db:e4:a3:40:09:95:
a1:f8:4d:9c:9a:e2:35:cd:fa:c0:bb:4b:fd:df:f4:
dc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7F:B7:1B:FE:7F:18:20:CE:BE:1B:38:2E:0D:F3:BF:95:9C:F8:A8
X509v3 Authority Key Identifier:
keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5c:2e:ea:e6:b9:c6:89:73:dd:0f:6a:3a:e1:42:58:e4:86:
4b:95:0b:80:37:a0:d0:db:4d:a1:a7:40:60:c3:b9:e2:b5:fc:
8a:10:5e:81:af:00:2a:02:8d:8c:75:59:ac:ea:a1:cd:11:9b:
8b:81:bd:7f:a0:5e:89:93:31:f5:9f:3d:53:b1:4f:9b:f6:98:
cd:74:c0:23:d2:72:e0:ec:c5:4c:f7:ba:90:97:2a:6f:57:6d:
4c:dc:71:7b:79:aa:39:9c:46:a7:ba:95:e4:63:1c:ba:83:2d:
a1:0f:de:79:2c:ce:09:36:f0:66:40:b0:27:5a:38:df:1b:23:
fc:0d:bf:c6:24:36:d2:53:0a:46:88:1b:25:97:ec:78:76:2b:
55:be:af:67:3c:33:d6:52:9a:df:e7:d6:9e:30:19:f5:b4:f5:
96:fe:76:19:af:e4:f1:2a:f3:b0:d6:77:01:7a:2c:d1:c1:fe:
0e:e1:36:53:81:ed:0f:a4:b7:94:c7:9e:a7:1f:98:f8:78:c6:
65:50:34:bb:fd:b0:24:e1:de:ca:43:c7:71:91:c1:ea:0c:f8:
fa:c6:24:16:3a:1f:0e:fd:96:e3:aa:0a:20:79:3f:8d:b0:62:
1b:e3:4e:f1:22:23:2e:2c:70:ca:11:e0:02:db:fd:11:2f:f3:
ad:01:47:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:09 2025 by rpki-client