Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
File: aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft (raw, json)
Hash identifier: nSJaoZvlT5omas3vzlqixDLUWjXDFNQ3r0IHuLxZfDw=
Subject key identifier: C2:E8:7A:21:DC:D8:13:46:F2:DB:5D:DF:D5:83:D9:34:08:FB:EA:70
Authority key identifier: 69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
Certificate issuer: /CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Certificate serial: 0194C3884AA4C34323C5688231CED4FE932E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
Manifest number: 132C
Signing time: Sat 01 Feb 2025 22:01:16 +0000
Manifest this update: Sat 01 Feb 2025 22:01:16 +0000
Manifest next update: Sun 02 Feb 2025 22:01:16 +0000
Files and hashes: 1: ARb5ZPDad5FfTT7dZ8xHZ7gMy6A.roa (hash: 8snm/YmhdjNlAruJqhnmmmr90GFSb4amikZSdNm3KvA=)
2: aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl (hash: eVdYwMUFacXfZrvsGfAick0SICYhIRFArQzGL5jv39Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:4a:a4:c3:43:23:c5:68:82:31:ce:d4:fe:93:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Validity
Not Before: Feb 1 22:01:16 2025 GMT
Not After : Feb 2 22:01:16 2025 GMT
Subject: CN=c2e87a21dcd81346f2db5ddfd583d93408fbea70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:07:38:51:2c:43:99:e2:73:ec:90:4a:60:
4a:6c:59:8e:21:ef:eb:d6:c7:3a:84:15:87:45:68:
5f:68:8f:e8:c4:fe:ea:e3:3c:0e:05:a1:15:8d:36:
c8:20:76:d4:53:bc:41:09:e5:0b:c2:f8:0b:5f:52:
13:eb:7e:87:bf:82:a7:e6:6b:70:77:b7:ff:e3:e9:
0a:01:b3:21:dc:74:e9:20:22:95:7c:02:59:6c:9b:
1f:7f:c6:2f:37:8c:be:66:fa:ed:8f:c1:f1:c0:19:
26:d1:c9:5b:99:e0:d8:b4:2b:b3:25:7a:e6:bb:5a:
8b:f1:27:21:da:a5:05:db:9e:48:da:36:5b:02:a6:
5f:a1:da:58:c2:a5:36:0e:ce:11:ba:dd:ce:6d:1c:
9a:b8:4a:fc:73:13:02:ac:c4:b9:cb:63:dc:44:c1:
75:26:61:3b:31:df:d3:95:e2:3a:59:01:f3:62:7a:
61:28:96:58:e4:2f:e5:b2:5c:53:44:cd:a4:ed:1f:
ec:c9:32:d2:9b:68:e6:cf:1c:f4:f9:02:9f:76:95:
c9:9c:12:d3:40:c3:4f:ec:0d:4d:90:91:51:06:eb:
32:f0:2b:31:67:c8:fa:8b:8c:79:57:35:8f:45:63:
cb:1e:a6:c5:0a:71:bd:93:12:09:80:28:d0:23:11:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E8:7A:21:DC:D8:13:46:F2:DB:5D:DF:D5:83:D9:34:08:FB:EA:70
X509v3 Authority Key Identifier:
keyid:69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e7:d2:0b:08:79:b7:f2:d1:43:dd:7e:64:b5:31:50:cf:fc:
5b:96:56:a3:28:1b:84:49:56:43:ce:7b:d5:b8:60:7b:64:77:
81:b4:94:5a:b0:91:9e:11:18:a9:2d:47:1f:bb:aa:80:2b:d8:
35:59:bf:8f:2a:71:e2:36:15:ab:48:29:27:12:cb:89:28:79:
49:d4:2b:81:94:f3:f7:5c:89:a5:67:1e:b8:3f:e3:34:bb:db:
00:be:da:1a:6a:7e:d1:34:4f:8f:3c:3f:ab:bc:71:c6:35:72:
ec:7d:4e:d2:c3:75:18:3f:db:83:39:bc:da:25:d4:be:70:97:
09:33:6a:f5:fd:10:dc:73:de:f2:ac:5d:62:f3:3c:18:6b:79:
cf:b5:df:c1:26:c7:e6:27:60:40:62:10:c0:e0:bf:52:31:0c:
78:dd:a0:6c:1a:9e:be:71:97:ec:cf:86:9d:0f:d7:98:b7:0e:
f6:e1:25:14:73:7c:2f:3f:f5:f3:92:4d:58:40:f7:5d:29:65:
c4:47:e3:89:d0:48:73:9d:72:5f:64:d6:b6:e1:7e:8c:74:5c:
df:59:5b:8a:5e:47:d1:b9:d2:c4:89:52:86:8c:21:5f:fa:33:
81:8a:8b:16:a2:f3:30:f3:45:95:c2:20:b9:d6:1c:98:50:6c:
80:8f:03:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:50:27 2025 by rpki-client