Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json)
Hash identifier: hy3Ja9MvikdhlSx0B2N43hPNLZ0TijCIPMOU19vbuu0=
Subject key identifier: EB:58:55:16:13:D2:E8:44:70:D5:AF:4A:48:DC:F9:18:9B:3F:E9:4D
Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Certificate serial: 0195127E4C53820BC08D78782506899A4B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
Manifest number: 0251
Signing time: Mon 17 Feb 2025 06:00:21 +0000
Manifest this update: Mon 17 Feb 2025 06:00:21 +0000
Manifest next update: Tue 18 Feb 2025 06:00:21 +0000
Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: 98fp+HYinohlSzzD62KOp6oglBqHYepm+dQZk4CHsbU=)
2: sRNeT65rt6woLISuiM8vg1rgfeg.roa (hash: U0++MMBJLtG7d5c7Me3am120THV8UBDE/53t4i8cpqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:4c:53:82:0b:c0:8d:78:78:25:06:89:9a:4b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Validity
Not Before: Feb 17 06:00:21 2025 GMT
Not After : Feb 18 06:00:21 2025 GMT
Subject: CN=eb58551613d2e84470d5af4a48dcf9189b3fe94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:02:26:ee:61:6f:8e:9f:23:a9:fa:f0:8b:43:
28:a0:e0:71:b7:aa:57:9a:8d:e1:15:bc:64:16:24:
6a:61:80:9b:9c:c8:ff:a7:17:c3:12:17:d2:bb:a9:
f1:f3:03:47:d4:4b:c8:3f:8d:f7:01:bb:1d:c9:fa:
db:1c:e5:b0:e7:63:98:be:c1:cd:6a:06:a0:e8:7c:
48:54:0e:c6:7f:f0:32:b3:71:55:e2:6e:3b:07:5f:
81:86:2f:1d:53:ba:d7:a9:59:48:0d:8a:0c:60:bc:
62:4d:39:a4:c3:86:c2:e0:3d:95:1c:4e:cd:2e:46:
c5:23:d8:73:f1:9a:95:ea:96:84:be:16:cc:ad:7d:
ed:38:a6:13:7d:09:5c:15:4f:cb:34:1a:99:18:43:
7c:30:b8:7b:b2:9b:29:b3:4b:a5:bf:11:da:c2:61:
db:97:0d:29:9b:2f:d0:d9:68:94:f4:ac:a1:5d:52:
d7:6e:b4:37:c2:1d:4c:ea:57:b2:71:81:56:94:61:
4d:e5:6c:3d:53:50:29:ba:09:9b:5c:96:ff:91:be:
33:0e:b1:33:ed:94:2f:ff:fb:63:29:63:c2:65:5b:
72:f3:2b:bd:7d:06:4f:57:44:dd:0a:09:75:a9:03:
66:ff:a0:53:83:f8:c9:75:49:c7:2c:1c:ab:84:f2:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:58:55:16:13:D2:E8:44:70:D5:AF:4A:48:DC:F9:18:9B:3F:E9:4D
X509v3 Authority Key Identifier:
keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:06:e5:58:8a:0a:e9:d2:79:c4:7f:0d:3a:2d:fd:55:8d:b6:
38:5e:7a:08:61:15:f8:72:c0:a8:5b:da:04:ca:95:36:5b:93:
3c:7f:84:d3:db:46:4b:98:c3:c3:3f:ca:55:1d:46:5d:c6:2b:
66:a1:57:f2:2d:89:6a:a4:3e:95:2b:23:f7:84:67:a1:0e:fd:
4d:52:22:8e:28:05:ac:32:48:58:03:2e:f1:3e:30:5a:2a:b8:
aa:e3:2a:bd:62:bd:cc:e6:e8:19:fe:e4:36:bf:a2:ba:9f:f6:
94:9c:8d:a2:9a:14:40:a6:61:c6:f3:62:5c:47:f5:e3:6d:0a:
50:40:1d:40:e6:af:3a:37:4f:17:47:00:40:db:5c:43:d5:dc:
9d:e4:3f:ce:4c:ac:b4:69:9a:ca:c7:15:28:05:e7:31:01:36:
1f:74:e2:2a:11:fb:1f:ab:ef:b4:1a:1e:1b:1d:34:49:f9:52:
97:2f:cf:9e:47:51:61:41:5d:e5:11:02:30:97:28:c8:0a:ee:
5c:dd:99:e4:f9:5b:51:9f:a7:f5:d9:84:fd:fe:9d:ba:54:1a:
24:56:06:a7:14:fd:96:0e:58:d1:9f:9c:c0:79:60:bf:98:f4:
df:be:56:56:67:a2:5a:0f:45:19:c2:23:8f:33:c1:3f:ad:11:
05:cd:a9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:44 2025 by rpki-client