Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
File: Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft (raw, json)
Hash identifier: ENRWtQJIRVC+23VMNlNRDM4EYKOgZFIPRgyoU+KD1fU=
Subject key identifier: D7:73:80:1B:40:EE:37:9A:31:B8:A5:32:10:16:B2:F9:B3:D2:DD:14
Authority key identifier: 51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
Certificate issuer: /CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Certificate serial: 019511A28C802CA96ED30D94FA64C41A895F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
Manifest number: 1359
Signing time: Mon 17 Feb 2025 02:00:19 +0000
Manifest this update: Mon 17 Feb 2025 02:00:19 +0000
Manifest next update: Tue 18 Feb 2025 02:00:19 +0000
Files and hashes: 1: 4ve1bR44fXpzC4OLaMdoWgSf4Wg.roa (hash: ORYpvPkbfZNFI/vr3Fjdbyn/Yoia3e4Tx4qioep5WQs=)
2: Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl (hash: IgLIRJQrrVuedl2JykvAEreIwTFLYvByfv41exfKr8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:8c:80:2c:a9:6e:d3:0d:94:fa:64:c4:1a:89:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Validity
Not Before: Feb 17 02:00:19 2025 GMT
Not After : Feb 18 02:00:19 2025 GMT
Subject: CN=d773801b40ee379a31b8a5321016b2f9b3d2dd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:54:82:42:58:0a:49:2f:30:69:d1:97:af:f0:
fb:fb:96:5e:54:78:e0:df:18:e6:09:7d:bb:62:8c:
c4:8d:40:37:bc:9e:d5:b8:2f:1a:eb:44:3f:7f:6d:
53:25:4b:5e:4b:23:24:1b:f1:0d:cb:c8:84:ed:ef:
64:37:ad:a3:b9:29:d5:90:ca:b3:7b:88:b8:ee:30:
dc:97:ea:61:0e:75:71:b5:36:75:21:dd:c0:bb:e7:
f6:78:d4:33:c0:a9:6e:7d:e0:dc:f8:0a:cf:b3:24:
a5:a0:73:7b:85:99:50:59:ad:73:43:a8:93:7b:4d:
36:05:60:77:6a:08:e4:ce:a7:68:3e:a0:57:73:03:
3a:eb:19:95:1e:d2:a5:28:73:62:dd:e5:c5:d7:a4:
ee:6a:b5:1c:b4:55:43:09:d8:51:7c:b4:b0:36:82:
ad:2f:3b:f7:cd:ef:50:e1:29:38:9b:4f:dd:bf:6f:
e0:3d:b6:1a:f0:b7:f5:2f:f6:30:11:f3:9d:aa:20:
e4:1a:3d:05:2b:e8:48:de:df:1b:17:50:4d:2f:62:
20:35:6f:10:e6:cf:f8:f1:53:25:8d:24:27:5f:98:
a0:2f:d4:0e:d3:c7:bd:28:0a:0f:3a:69:c7:56:67:
6f:cf:d5:96:a4:42:ea:95:65:88:73:ec:b2:3c:55:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:73:80:1B:40:EE:37:9A:31:B8:A5:32:10:16:B2:F9:B3:D2:DD:14
X509v3 Authority Key Identifier:
keyid:51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cc:42:28:9f:dc:69:62:ed:f3:f4:31:fd:6b:ac:69:4b:f7:
a5:08:bc:33:bd:52:96:ca:9a:01:ac:20:57:a4:41:1c:2d:27:
5e:22:2c:03:15:9b:a4:6d:ef:e7:b5:d0:17:9a:b1:81:0e:22:
bc:1c:46:75:b7:6c:27:d9:ad:b2:d3:8b:32:78:82:ee:58:13:
27:6c:c6:55:74:d0:89:8e:45:56:c5:8b:50:15:5a:54:24:62:
83:9f:f5:25:2c:43:c1:e8:5d:ac:38:56:24:d9:4a:df:f3:97:
cb:22:7c:15:c3:cd:e2:10:4f:41:bc:99:81:c9:34:f8:73:13:
9e:dd:23:99:3a:b0:93:91:fe:b0:ec:c2:7f:50:a1:db:2a:b5:
c5:15:12:51:8c:eb:b5:7f:fe:f4:99:d3:a7:26:96:9b:b9:29:
09:2f:90:00:b0:3c:98:18:12:6f:27:b0:12:45:23:f7:dd:6f:
17:03:d2:42:cc:0d:9d:4f:d6:23:45:82:81:0c:be:97:24:06:
c2:86:85:8b:39:45:08:da:8c:df:bf:aa:08:2d:1e:a2:f8:f6:
84:c8:21:5e:2c:09:a6:9f:80:32:da:ad:e3:fd:ec:9b:bf:88:
dd:60:2c:ae:9b:ea:6b:d7:64:d4:a0:3d:6d:75:85:7f:e4:26:
2c:bb:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:39 2025 by rpki-client