Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier: PCAquZutm/PFgjIJf/mLbds1bykHRXqtnIEFoFL4IEk=
Subject key identifier: 3D:27:65:B1:33:32:2A:5A:50:0F:9B:AF:1B:FD:74:5B:74:6C:77:36
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial: 019510FDFDB5548E6A07CAFBACA6A4841BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number: 0FBC
Signing time: Sun 16 Feb 2025 23:00:35 +0000
Manifest this update: Sun 16 Feb 2025 23:00:35 +0000
Manifest next update: Mon 17 Feb 2025 23:00:35 +0000
Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: 6onBqWNX1wdxgS5wpLLQMn9jygckqBXy8xV9Dxhq0mY=)
2: oKyfOldZLGuN5BcDb6Q-5dX2Wxw.roa (hash: k6gLX9MPlPqi07ed6OW+GaDRLIAiAFCmAJRimOBrPk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:fd:b5:54:8e:6a:07:ca:fb:ac:a6:a4:84:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Validity
Not Before: Feb 16 23:00:35 2025 GMT
Not After : Feb 17 23:00:35 2025 GMT
Subject: CN=3d2765b133322a5a500f9baf1bfd745b746c7736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:2f:a3:2b:6d:63:73:00:7f:3c:c8:5d:01:
58:fc:78:4c:81:13:9e:03:dd:b1:35:1c:61:c9:5c:
cd:1c:f8:3c:b3:44:09:19:60:30:b3:ab:05:fb:de:
57:64:a8:8d:f0:50:c1:c4:8b:8f:91:b3:27:3b:1c:
a7:df:7f:40:f8:81:8e:33:e7:bb:72:fa:76:a4:9f:
fa:70:96:5f:79:21:d4:ad:ec:ac:69:f4:48:78:e3:
06:08:ea:77:59:a5:40:cc:7e:8e:85:10:87:19:f7:
22:3e:00:e2:ed:69:65:4c:ff:9d:28:b3:39:a4:29:
f7:d4:4b:62:0a:69:ef:2e:09:67:31:46:83:37:3d:
de:d1:aa:51:ae:fe:b5:27:c6:7b:8d:59:59:57:36:
c8:d4:9e:6e:58:c5:29:fa:96:57:e1:4c:ae:ea:f0:
94:64:be:bd:8d:58:2f:a3:2b:71:e3:23:d7:37:5f:
77:25:07:06:98:9f:01:67:4b:b6:64:c0:d1:69:5c:
4e:a7:92:16:7e:17:bc:8b:48:10:7a:f5:f0:06:53:
76:8f:72:f7:83:91:dd:78:c6:0c:88:54:91:eb:74:
84:ba:ac:83:02:2b:d1:2c:83:90:65:e3:ef:b9:21:
b0:86:ec:50:a8:03:ce:6e:74:a4:3e:e8:6e:4b:8a:
fa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:27:65:B1:33:32:2A:5A:50:0F:9B:AF:1B:FD:74:5B:74:6C:77:36
X509v3 Authority Key Identifier:
keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d1:3b:a1:ab:c7:d1:bb:de:af:b8:f7:39:e8:f9:ee:0d:e3:
24:19:e6:57:97:8d:6d:2e:39:72:79:2d:d5:68:66:54:1c:0c:
fe:5d:2b:be:dd:3a:c9:a0:92:78:7d:7e:ca:2b:06:8d:b2:81:
3c:c9:3d:b6:f2:75:a1:3f:85:4c:c8:fe:f4:5c:9e:0b:25:1f:
9c:5a:d6:36:a1:d8:58:a9:19:10:59:42:a0:a1:18:eb:8d:dd:
0e:1b:e7:a4:23:63:c1:b7:d4:4b:1f:f5:6e:45:93:c0:ad:d7:
e5:7e:a0:f5:fa:38:05:e9:dd:14:8d:b2:14:56:00:00:c9:09:
66:06:19:9a:99:a6:44:2d:7b:f4:29:43:d1:5f:9e:f5:c5:be:
7c:a6:e2:23:3f:61:53:1f:b3:55:18:51:4f:62:b4:0a:84:cd:
e6:58:11:d1:bd:1d:12:11:2e:d3:39:65:de:9f:d1:37:74:54:
92:5b:e9:01:ec:e4:0a:e5:b8:88:ad:aa:92:ed:f0:02:fb:3d:
50:25:20:57:18:14:ef:03:99:b8:b8:88:f3:6b:72:cc:2f:a2:
74:c8:bf:5b:a7:62:00:4b:f6:fb:7d:a7:67:60:2a:7d:e3:85:
89:d2:fb:75:9c:68:f2:1b:81:11:b8:9d:1c:81:66:a0:da:cb:
fb:ef:52:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:06 2025 by rpki-client