Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
File: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft (raw, json)
Hash identifier: iBMYr3Zb0C5IQodl1jR+cUuT4XndGNF8KEpnOHqdjiI=
Subject key identifier: 54:5A:DF:A4:A3:89:E6:78:99:C1:73:56:0B:81:12:DF:40:B6:00:91
Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
Certificate issuer: /CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Certificate serial: 0194C42C11E54252B763236A93E4C690B298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
Manifest number: 07C1
Signing time: Sun 02 Feb 2025 01:00:09 +0000
Manifest this update: Sun 02 Feb 2025 01:00:09 +0000
Manifest next update: Mon 03 Feb 2025 01:00:09 +0000
Files and hashes: 1: J7p5wtvbY-cMGJ6nvKT1OtYA-Zs.roa (hash: /UHQgN6Hv0VvhpZbRReiWBOzZfKm+MHd/Eg+DBeHzxk=)
2: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl (hash: u1ml+tuP6xKPVhvST5inHQhvPumcmuvJb1TRP0zDvSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:11:e5:42:52:b7:63:23:6a:93:e4:c6:90:b2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Validity
Not Before: Feb 2 01:00:09 2025 GMT
Not After : Feb 3 01:00:09 2025 GMT
Subject: CN=545adfa4a389e67899c173560b8112df40b60091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:8a:55:8c:fc:bf:52:a0:10:82:c0:93:05:
f0:da:15:e6:1f:16:b1:ea:84:f8:de:8e:7a:55:1f:
09:5f:ab:8f:25:28:b2:2e:5a:0a:0d:26:66:13:d5:
ba:24:73:9c:47:cb:49:d9:7b:a2:74:a5:54:1d:e1:
f2:ce:ea:c2:c7:9b:bc:30:e4:36:47:07:69:4f:56:
c6:ac:61:01:71:29:82:a6:b6:85:0e:26:99:37:99:
00:4e:22:10:a0:a5:64:5d:76:fc:5c:1e:53:9a:8e:
92:44:58:cb:5a:ad:8c:42:95:8b:02:cb:23:da:ac:
e5:f1:d3:e5:07:d1:0f:d1:cd:61:ad:d1:39:81:8f:
3e:e0:64:c8:ed:a5:95:00:5f:fc:39:66:64:9d:82:
e7:53:81:48:0f:a7:5e:a1:93:d4:ce:f2:03:b8:bb:
1a:a2:e1:b8:ae:53:df:61:45:da:6f:28:06:a3:46:
ca:a3:09:e3:c6:f3:97:72:2c:8c:aa:cb:93:6d:45:
2e:df:dc:93:cf:ed:60:5c:5b:6c:d5:2d:cf:d0:5d:
4f:0d:19:51:9a:e4:f2:85:fc:8a:17:11:26:0f:49:
e4:11:24:c3:90:d6:4d:d4:d9:3b:7b:d7:71:61:e5:
d9:d3:a9:1a:56:bf:49:cf:d8:d9:00:b0:5d:e9:14:
5c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5A:DF:A4:A3:89:E6:78:99:C1:73:56:0B:81:12:DF:40:B6:00:91
X509v3 Authority Key Identifier:
keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4f:26:63:45:42:ca:e8:99:51:f1:37:64:fd:ab:80:5c:9d:
5b:d9:28:c0:f2:d9:31:13:ff:e7:d6:7f:9e:3d:ef:04:98:75:
27:58:35:c0:b5:04:0d:4c:9e:b7:5d:1d:8f:af:37:37:42:4d:
82:5a:f5:22:9b:f9:cf:6f:04:0b:34:1d:7c:c0:06:7a:3f:2c:
53:b0:cd:32:fc:88:f6:cd:77:94:e8:39:19:42:23:c7:93:8f:
62:63:a9:f5:8b:98:3f:e6:5f:99:b7:ab:72:96:5b:2d:04:3b:
fe:50:30:05:49:30:8b:1a:a3:8b:cc:f8:89:92:7d:21:b0:fa:
f0:57:de:db:91:05:20:ec:21:3d:9e:95:a9:cf:a1:f4:69:bc:
82:b3:92:b5:14:df:7b:6e:49:ec:bd:77:7c:c4:24:af:34:24:
df:9e:eb:48:0d:fe:2f:98:00:5b:6f:97:01:6b:cb:c1:c7:6d:
83:cd:01:d0:1b:b4:0a:02:49:5f:c5:20:d5:4d:a5:4d:ed:44:
16:06:5b:bc:4e:f6:6c:42:c1:0d:91:bf:a6:44:76:51:98:71:
30:c1:29:a9:07:e1:8b:36:f6:44:d2:9e:a0:5b:67:63:c3:8f:
7d:70:ba:bd:40:91:fa:22:03:93:11:04:7f:cb:44:80:a0:3e:
8d:10:9f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:55 2025 by rpki-client