Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bd46a4-9997-4d27-838f-13547a1abede/1/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.mft
File: e-qEBv8Fb8tiO6bd0EPvwNuUxxo.mft (raw, json)
Hash identifier: HKe78ZK8GWfWybPwDjCvtauT0gEUe8+aGBDOEOweLAk=
Subject key identifier: 6A:14:4A:87:81:9D:D9:3D:0B:0C:96:14:86:B4:08:F5:F7:10:95:06
Authority key identifier: 7B:EA:84:06:FF:05:6F:CB:62:3B:A6:DD:D0:43:EF:C0:DB:94:C7:1A
Certificate issuer: /CN=7bea8406ff056fcb623ba6ddd043efc0db94c71a
Certificate serial: 0195116BD8E962B53529BD5AF1D155F831A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bd46a4-9997-4d27-838f-13547a1abede/1/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.mft
Manifest number: 03EA
Signing time: Mon 17 Feb 2025 01:00:35 +0000
Manifest this update: Mon 17 Feb 2025 01:00:35 +0000
Manifest next update: Tue 18 Feb 2025 01:00:35 +0000
Files and hashes: 1: e-qEBv8Fb8tiO6bd0EPvwNuUxxo.crl (hash: 9dTQc6WbRBJvmiKWSvFREAEO1ILqQniHgcbxoVJ+Qtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bd46a4-9997-4d27-838f-13547a1abede/1/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bd46a4-9997-4d27-838f-13547a1abede/1/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:d8:e9:62:b5:35:29:bd:5a:f1:d1:55:f8:31:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bea8406ff056fcb623ba6ddd043efc0db94c71a
Validity
Not Before: Feb 17 01:00:35 2025 GMT
Not After : Feb 18 01:00:35 2025 GMT
Subject: CN=6a144a87819dd93d0b0c961486b408f5f7109506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:ca:0b:8d:04:1e:ea:71:50:81:92:e4:0f:
4e:0a:a3:a0:1d:78:db:b6:e3:a7:69:25:a7:f5:47:
61:20:4a:78:14:4f:94:73:1f:dc:8a:2a:a5:77:52:
56:10:22:21:22:b1:96:1c:99:ea:25:5f:04:7f:ba:
42:df:ae:3c:4d:16:1b:ad:cb:11:17:91:20:01:c7:
e3:df:85:da:cf:82:a3:e5:9e:79:0a:0b:a4:63:65:
1b:0e:3b:a1:07:fd:c7:79:a3:10:d3:63:b4:e8:09:
fd:37:a2:d3:76:c8:b4:62:66:1b:6a:4e:70:f9:7a:
0b:09:9e:10:fe:eb:59:d5:ed:a2:02:f5:be:45:b4:
ed:8c:d1:32:08:27:ab:c0:8c:f6:77:b7:14:19:1a:
d3:5e:1f:24:40:76:a6:c5:22:0d:d6:11:ce:9e:ce:
4d:cf:9f:5a:7a:18:d9:d5:2f:c0:57:1d:57:b8:ee:
ea:44:35:04:0f:2b:f2:c3:2b:74:cb:14:03:1b:fd:
18:57:79:02:46:97:16:43:09:2b:84:7a:b3:e2:cc:
3e:1c:b5:4c:80:62:1b:bc:bc:c9:f5:39:fb:f9:82:
82:81:e9:7f:5b:f4:d9:10:e4:e6:b2:4d:4f:ba:d0:
68:fd:e7:b5:e4:1a:9c:c7:b1:cb:e3:a3:d8:5e:0e:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:14:4A:87:81:9D:D9:3D:0B:0C:96:14:86:B4:08:F5:F7:10:95:06
X509v3 Authority Key Identifier:
keyid:7B:EA:84:06:FF:05:6F:CB:62:3B:A6:DD:D0:43:EF:C0:DB:94:C7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bd46a4-9997-4d27-838f-13547a1abede/1/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bd46a4-9997-4d27-838f-13547a1abede/1/e-qEBv8Fb8tiO6bd0EPvwNuUxxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:23:e5:d1:60:dc:1c:6b:56:51:d9:6c:2f:ad:37:c2:10:6b:
1d:dc:41:a8:b5:39:60:ec:3e:f6:cb:df:45:77:1d:6f:ee:61:
00:ed:da:5f:49:8f:c9:90:95:b6:69:3b:67:de:be:eb:d5:58:
82:79:a1:22:a5:89:9f:85:33:ab:ee:c0:46:d7:f6:73:57:c7:
da:c6:20:3a:a0:3d:bb:e8:c5:12:66:1f:c3:08:16:c2:ba:31:
19:72:65:cf:5f:39:62:53:15:2f:33:70:df:06:40:f4:34:14:
66:90:de:d8:7c:36:44:eb:68:1d:32:ca:b7:b3:1b:80:1a:d0:
94:e8:bf:3b:4d:f0:37:c1:8e:a6:e8:c3:75:7e:29:91:53:2d:
48:e4:85:08:1f:4a:4a:6a:e8:dc:1a:68:3e:67:6e:b9:44:a5:
71:bd:dd:4e:bb:ab:8f:80:ef:82:6d:29:ea:16:ae:fc:f0:f1:
1b:24:b8:3a:2d:09:36:9c:c6:dd:ba:fb:2f:19:de:7c:c5:fb:
e2:27:67:b6:ec:3a:e9:ab:f8:fa:34:56:29:5c:a0:ed:34:3c:
c8:6a:3e:83:52:78:e7:a4:a3:ad:ff:db:5c:ab:44:e5:42:5d:
cd:ee:fa:80:af:e7:0d:e0:52:76:39:78:63:08:f2:14:fd:92:
44:2f:92:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:17 2025 by rpki-client