Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
File: eF70vSl2vykqtzMEkH9RDNAMyKI.mft (raw, json)
Hash identifier: nprIkAUS03DVadlLDc8t9QCEQ65AnZ0aI/yRLdRXgw0=
Subject key identifier: 28:35:39:63:80:0E:E7:81:57:40:A4:E5:4C:C6:C3:A1:38:F5:96:8B
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Certificate issuer: /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial: 0194C49A4D58D8138CEE7CA3F9E1DA6C8B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
Manifest number: 0B17
Signing time: Sun 02 Feb 2025 03:00:34 +0000
Manifest this update: Sun 02 Feb 2025 03:00:34 +0000
Manifest next update: Mon 03 Feb 2025 03:00:34 +0000
Files and hashes: 1: ENQ20xMkXGryE3-R9yWMozdkmQw.roa (hash: KvgZxgzrzbwhIVZaQOAAyDaKtwhWmv2kX8Vy8zgIZhY=)
2: UZ6oBAYvDqEIadhrw2DO49OXd4M.roa (hash: hNLRe7VoLal2kN+aDGwW7RFMXgmWRT2E6T33XzWJ1Fg=)
3: eF70vSl2vykqtzMEkH9RDNAMyKI.crl (hash: 68+lwt1lzqZ0LJbkO0GnzaCSEN7AKSypTsUGb/Ofb7c=)
4: ij_jY1B8G7JPOxZEgHI2au9jigs.roa (hash: 9ggbS2YlHgtm+sTyMI/V9GVMhp50lC25Zf0jsvILQrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:4d:58:d8:13:8c:ee:7c:a3:f9:e1:da:6c:8b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Validity
Not Before: Feb 2 03:00:34 2025 GMT
Not After : Feb 3 03:00:34 2025 GMT
Subject: CN=28353963800ee7815740a4e54cc6c3a138f5968b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:c4:5c:a1:2f:96:9f:07:11:4c:88:05:60:
27:90:4f:94:61:23:0d:c9:ce:ff:1b:92:4d:5f:71:
e9:47:39:24:e5:36:6a:7b:6c:9d:a6:6e:3e:ff:91:
32:75:af:ff:c8:5e:85:63:e8:d8:7f:66:57:50:4b:
91:0e:2b:f5:3c:94:e4:8a:03:e5:7f:90:3e:5a:ed:
8e:22:24:1f:cd:de:b9:92:9b:7a:ca:df:0e:5d:07:
b0:d8:63:41:b6:1c:4b:55:b7:a6:61:39:c1:ce:74:
36:72:57:41:f4:80:13:db:bb:47:ff:0c:68:f0:70:
14:d6:87:9f:0e:e6:5a:f5:66:d7:c4:cf:78:8b:44:
f6:0e:05:0c:2d:69:e1:10:42:67:fc:37:cb:5d:19:
a0:77:0d:1b:ef:04:d2:51:48:80:32:5c:18:11:58:
e5:2b:dd:c9:83:c2:9a:7b:e1:21:c9:26:56:b7:11:
af:99:6e:5b:09:63:28:fe:5f:d9:fa:00:df:ce:f0:
7c:ee:61:c5:b1:83:2b:44:9c:03:f9:36:e1:6c:23:
a1:d7:bb:f7:37:02:81:11:3d:55:e5:23:b2:99:48:
02:8d:a6:4b:1e:47:39:e4:01:bf:0e:e6:e0:b3:f2:
6a:5d:13:a1:83:ec:25:65:a3:19:e8:76:c3:5a:11:
a2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:35:39:63:80:0E:E7:81:57:40:A4:E5:4C:C6:C3:A1:38:F5:96:8B
X509v3 Authority Key Identifier:
keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1d:74:1f:d4:84:97:80:85:e1:26:c5:0e:38:03:ef:dd:06:
fe:90:89:f1:ff:c2:83:13:d3:86:bf:58:af:6f:51:7b:fc:82:
46:d3:be:75:b2:89:cc:e2:c3:24:3c:2f:43:d6:90:06:28:e3:
f8:d5:6b:08:77:4a:7f:c6:e5:b4:df:80:c5:17:a7:36:fb:10:
78:c6:14:4a:18:c2:06:ea:36:d8:4d:ac:d9:0a:15:c6:f3:4e:
29:46:8e:64:ff:79:79:a2:91:59:65:13:b6:e8:e3:8d:62:9e:
70:e7:76:ae:18:27:0e:30:fc:14:ca:72:0e:42:f3:af:d7:88:
c1:ae:54:12:fd:54:22:31:1d:97:71:98:8e:22:92:4a:ba:36:
e3:43:f2:8f:87:f1:8c:cd:68:55:bc:37:be:25:72:44:60:e0:
a3:73:1b:e9:f2:22:5b:8b:e7:7e:03:64:fa:9f:ea:3f:e2:4d:
40:7f:c3:f2:c7:2c:03:11:0c:84:cc:a3:48:81:3b:da:08:e8:
a9:d5:d8:20:fb:54:83:42:b8:1a:24:bc:a8:a4:f4:3c:4e:0a:
9f:e6:7a:cc:ac:21:ab:c6:2d:59:80:46:75:7f:ed:98:7d:4e:
79:89:0a:6a:66:2d:93:f4:c2:ec:25:d3:10:99:d0:fd:f8:fa:
13:52:4d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:37 2025 by rpki-client