Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
File: eU9VHpehMlQuOwVukF3o89uiTJw.mft (raw, json)
Hash identifier: TVNDNrCPorTR10SSGF9TFAivoKTtS+aeIv9O6+Zyuk4=
Subject key identifier: D0:79:EC:F1:B9:76:53:01:CD:73:36:36:B0:51:BF:08:A5:50:85:C0
Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
Certificate issuer: /CN=794f551e97a132542e3b056e905de8f3dba24c9c
Certificate serial: 0194C499F66C4E54629F07D5A8C8BAB2BB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
Manifest number: 142F
Signing time: Sun 02 Feb 2025 03:00:11 +0000
Manifest this update: Sun 02 Feb 2025 03:00:11 +0000
Manifest next update: Mon 03 Feb 2025 03:00:11 +0000
Files and hashes: 1: UrEAfPM3ogM6wM7GXnQkYHAZCco.roa (hash: fCwnlgtSJ3KON1AeMwzLRLTyiBxs5QtE3rqvCIKKpp0=)
2: eU9VHpehMlQuOwVukF3o89uiTJw.crl (hash: OqXQE8l8ixUwTcV7EYWwkbhDoxc5Vx3ZtTzdHH/p1d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:99:f6:6c:4e:54:62:9f:07:d5:a8:c8:ba:b2:bb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c
Validity
Not Before: Feb 2 03:00:11 2025 GMT
Not After : Feb 3 03:00:11 2025 GMT
Subject: CN=d079ecf1b9765301cd733636b051bf08a55085c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:b0:e2:50:1c:bd:bd:dd:2f:2b:96:01:35:
11:c5:0d:a7:55:df:90:4e:58:6d:1f:bb:60:23:bb:
c1:da:2f:12:dd:d3:b5:f8:fe:78:ea:5d:9f:69:b0:
25:ee:72:b4:a2:2d:0f:e0:13:b5:23:b9:c1:b4:2f:
8c:b5:96:22:dc:03:ef:c5:41:c3:db:ad:2f:1b:7b:
16:a6:78:08:64:2c:e7:77:18:5d:89:04:38:de:1b:
13:d9:0b:c6:ff:67:92:d8:25:17:5b:d7:94:33:53:
69:a1:b8:91:0c:7a:3d:ba:c6:e6:40:c9:14:4b:05:
c5:25:7a:c8:3e:c3:05:14:b2:07:b7:b4:04:3f:29:
09:ee:dc:49:f7:e8:0c:87:07:f7:fe:c0:66:bf:85:
70:69:e4:37:4d:61:59:5b:f2:a5:8b:d6:3b:46:05:
c7:d1:c5:6b:f6:1b:ce:89:61:0f:fd:23:f6:20:c0:
cf:af:98:9d:de:60:be:2d:f9:af:77:27:34:70:76:
c6:6d:11:18:f2:3b:45:54:cd:6f:bd:ae:1e:3e:2a:
d2:85:02:f6:e5:71:ef:3f:a8:a5:31:d2:8e:d1:ae:
c0:5a:fc:e1:5e:b6:fb:68:65:24:19:2b:41:cc:3f:
51:dd:8a:a8:8e:62:c7:ef:e3:73:5e:bf:86:9d:59:
4e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:79:EC:F1:B9:76:53:01:CD:73:36:36:B0:51:BF:08:A5:50:85:C0
X509v3 Authority Key Identifier:
keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:75:4c:89:8b:e6:d4:d3:62:da:02:d0:0f:b1:96:16:3c:2e:
71:76:45:67:4c:e9:8e:09:19:3e:dd:f2:5b:87:14:5f:76:74:
eb:2c:a5:05:61:31:97:4a:54:f3:80:c0:7d:00:47:6e:d2:20:
aa:2a:ef:b0:b6:76:1f:1f:f9:f5:b2:b2:9c:47:fa:4d:d9:24:
da:a0:66:5e:9c:d7:cc:d1:00:3c:db:65:57:43:a5:4b:0a:77:
b9:85:a2:31:22:9d:7e:70:f6:84:f1:ea:d1:75:db:7d:09:07:
17:4a:e1:12:33:80:20:a3:d1:14:64:26:75:58:53:07:8a:13:
0f:3d:d4:67:8b:0b:0f:b2:9c:db:f0:3a:d2:8a:9d:6b:19:05:
82:9f:be:cf:06:28:9d:9e:e1:83:55:02:36:34:9d:9f:f6:3c:
e1:fd:ad:e2:dd:26:3e:75:66:e5:37:48:23:e3:f1:d2:33:be:
d5:15:38:66:d3:0a:8b:db:33:dd:e2:4d:7f:a6:03:0e:da:d7:
24:df:59:84:8e:9f:de:cf:59:24:57:2a:15:df:01:45:19:58:
33:0b:d6:39:b7:dd:53:ce:c1:a8:a9:20:75:32:9a:a2:09:c5:
ab:14:8a:57:03:8f:05:a6:7c:3c:ab:34:6c:c8:ec:ab:be:ea:
ff:f3:41:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:14 2025 by rpki-client