Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: cjahLmd98CFSarZPF0sLzejBF62jTtqM1CoPkPNolBU=
Subject key identifier: 1E:1B:D0:DE:3F:EC:53:52:6A:2E:43:F8:44:4B:96:40:38:9D:C9:28
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 0195127E531BE898BAAE78815A90B3CDF095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 0F55
Signing time: Mon 17 Feb 2025 06:00:23 +0000
Manifest this update: Mon 17 Feb 2025 06:00:23 +0000
Manifest next update: Tue 18 Feb 2025 06:00:23 +0000
Files and hashes: 1: 7mSFLMU3pbLGF1eJYN7bCpXwo10.roa (hash: Gi9mXnC7oL2MgZs534EZSdtoL7fLCIIFaJEq+xFNvfg=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: pXdmWubmOgerlXyVMyJn1gI0zMlDeeX//YHGbIz4hcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:53:1b:e8:98:ba:ae:78:81:5a:90:b3:cd:f0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Feb 17 06:00:23 2025 GMT
Not After : Feb 18 06:00:23 2025 GMT
Subject: CN=1e1bd0de3fec53526a2e43f8444b9640389dc928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:42:58:0b:c0:43:8b:b6:f6:af:08:87:1f:cb:
6e:8a:cc:bc:9b:47:74:c8:64:12:d3:13:82:dc:77:
44:52:2f:4e:b9:63:79:44:dc:01:0a:4d:15:ee:b9:
5f:46:35:de:99:80:77:cf:29:9d:6b:6f:65:6e:89:
8e:c7:70:d8:d3:8f:7b:7a:2f:9b:ce:d9:25:a2:cf:
95:79:c7:a0:7e:c5:fd:66:4a:6e:c3:db:b2:17:ff:
c2:a1:26:c9:f0:5a:e1:f7:9a:eb:04:60:ac:12:0c:
ac:a2:19:49:0d:1d:24:6b:05:a9:de:8a:93:56:75:
bc:29:c8:e5:78:30:60:80:ab:1b:cd:69:ba:16:ce:
c5:83:99:7b:7f:1a:87:2e:ef:24:cc:01:86:b5:b7:
db:49:7a:36:1f:fd:e8:87:81:0e:40:82:44:b6:ae:
dc:70:33:f8:ba:83:83:ca:53:f8:34:9d:0a:fb:e5:
1a:1c:42:83:4e:1e:11:9b:87:9a:19:a5:b8:d3:6e:
db:c5:67:e0:0a:04:b5:68:0a:f9:1d:15:c2:81:7a:
f4:04:6b:51:cd:e4:b7:89:d4:b4:45:e0:33:ba:69:
ff:2a:95:88:a8:b0:40:5e:40:88:ec:77:30:c1:b4:
8c:0a:73:51:24:57:41:4d:c8:57:69:5e:ba:eb:e1:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1B:D0:DE:3F:EC:53:52:6A:2E:43:F8:44:4B:96:40:38:9D:C9:28
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:63:a2:ce:dc:ef:57:7b:fc:86:3b:32:ba:db:d3:ec:1e:50:
97:6d:9b:f0:cd:32:68:98:a9:f9:02:f5:47:a1:08:2b:7e:57:
95:c5:00:2e:02:df:6a:55:6d:7a:13:bb:bb:bd:97:06:a9:6c:
bf:ad:93:58:ab:e5:ca:94:4c:4e:1d:49:13:a4:ad:42:f9:6f:
a5:1d:99:f4:25:ae:da:87:31:c3:ef:b2:fe:ca:39:11:99:19:
1e:a9:7b:c1:ca:59:75:ab:c0:1c:52:a2:39:05:66:4f:9d:f4:
63:6a:f0:db:95:6d:13:48:b5:4c:c7:2a:e3:fd:cb:50:29:fe:
2a:bc:2c:b4:ee:9c:24:50:49:34:c6:ae:b8:1e:19:0a:0f:70:
74:b2:f4:49:90:4b:15:92:71:dd:44:91:0d:e0:e1:ef:da:6d:
c2:ca:cd:54:53:d5:e4:6d:84:b0:ff:3d:5d:ca:4b:aa:7f:ca:
29:8c:38:42:23:cc:4a:37:72:ed:2b:d8:6e:f8:23:cc:5b:7b:
c2:6e:19:18:3b:d7:4d:f9:ff:9d:24:92:e5:3f:c2:1d:c6:d6:
26:11:ce:73:e3:af:2d:d5:89:8e:d8:08:af:46:c3:46:ae:3d:
ae:eb:fe:73:9b:67:3f:dd:74:05:3b:17:cf:79:49:35:86:7d:
9c:fd:77:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:34 2025 by rpki-client