Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File: EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier: GS7lVpoOKgIAYooFbjY8AcWe/IEYV2UbSs7faOxxCW4=
Subject key identifier: 29:BD:05:41:D4:0E:D8:6A:82:36:D1:F8:7D:FB:0C:C6:CE:4C:9B:3E
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer: /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial: 01951134859B6DB424726D58E9A5B66DFCAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number: 0A03
Signing time: Mon 17 Feb 2025 00:00:09 +0000
Manifest this update: Mon 17 Feb 2025 00:00:09 +0000
Manifest next update: Tue 18 Feb 2025 00:00:09 +0000
Files and hashes: 1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: G2yuWzokH0DssDTYw8VG9xyhwEsdJ7KFbgtPRTvrxRk=)
2: O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa (hash: pD6HPrgkTDleJEArLeGUbepYdRaE9Tfe7gJ5DsWObZU=)
3: m6x_oZHQXTbxnXXD90xWd49XI3c.roa (hash: wFHZIx8/sCXtzuW0x3sQjtMT3vRSUHOHKUyDlzMjU1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:85:9b:6d:b4:24:72:6d:58:e9:a5:b6:6d:fc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
Validity
Not Before: Feb 17 00:00:09 2025 GMT
Not After : Feb 18 00:00:09 2025 GMT
Subject: CN=29bd0541d40ed86a8236d1f87dfb0cc6ce4c9b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:78:0e:89:50:ce:55:0e:20:c4:97:b6:c7:
28:87:c5:df:9f:07:b3:f4:a0:f9:37:ab:c9:16:18:
73:51:26:0f:22:a5:07:f3:cd:d5:08:68:5f:81:c3:
21:19:9d:6c:55:0c:d7:e2:a2:39:1a:29:c9:3c:6d:
d6:c5:cf:19:42:44:21:58:97:13:ea:04:d9:23:ff:
82:4e:2a:90:6f:d9:a4:cd:d9:d4:4f:e1:c4:90:d6:
da:ca:8f:c7:8a:e5:b0:cd:d1:48:27:87:7b:9d:1b:
0d:1c:5e:42:ca:8d:30:23:28:1e:56:ce:13:6c:d3:
66:86:44:d5:ea:f0:90:56:48:c9:a5:65:fb:db:0d:
27:dc:13:57:24:05:69:87:6e:5c:d9:88:74:7d:9d:
d7:29:bc:ae:d8:f3:ac:5f:3d:4f:f2:92:82:88:d7:
1b:94:09:d5:a0:4d:28:51:df:f7:b3:d2:65:92:1b:
36:a9:19:c3:e7:60:ac:e6:09:d2:94:d4:12:bf:e7:
2f:36:e7:3e:75:de:1c:c2:48:d5:f3:51:5d:e3:8b:
04:60:48:cf:0e:65:ba:15:6c:36:98:f6:63:bf:c6:
cb:42:68:38:25:38:cf:da:08:9c:3a:94:59:9b:dc:
fc:bf:11:e6:cd:9f:3e:27:72:8b:39:3a:83:36:b5:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BD:05:41:D4:0E:D8:6A:82:36:D1:F8:7D:FB:0C:C6:CE:4C:9B:3E
X509v3 Authority Key Identifier:
keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2f:54:88:2e:fd:64:94:5c:4d:19:a3:f2:60:b5:af:bf:7f:
bb:ca:9e:10:07:fc:c0:55:13:c7:24:bb:a1:ae:2c:f6:77:37:
0f:71:c1:79:2b:6c:7c:e3:76:da:66:99:9b:36:90:8c:4f:0e:
79:0e:3d:27:34:f8:11:44:3a:5b:33:50:0d:22:79:6e:50:7b:
22:8e:24:17:f5:30:b2:8a:80:1d:d1:1a:ac:c8:67:3e:c7:2c:
76:de:1b:c3:64:81:16:12:f1:72:66:44:e7:81:e8:7d:b3:25:
e0:6d:2c:86:1a:e7:4c:c5:da:f6:d2:7a:e0:b9:3b:f7:8d:b8:
8b:5e:8b:58:6c:ee:ff:9e:b6:f3:d9:e7:1a:98:70:54:08:d5:
e7:7e:98:8a:be:bf:ad:2c:ab:dc:ec:b4:a3:cb:4e:2c:73:6f:
1a:2c:46:87:3b:03:cd:1e:fe:fe:f9:a9:48:6d:de:4a:5e:e1:
c5:3d:52:8a:41:20:68:6d:90:88:99:ee:da:3f:e2:65:3b:ce:
75:14:3a:85:63:d6:88:d9:da:56:8f:a9:cc:3a:46:88:f2:1e:
d8:b9:0c:d7:79:8e:77:58:4f:7a:73:5c:61:38:71:cb:6c:20:
de:b6:2a:73:e6:73:1d:e3:bb:b5:ba:02:52:3f:81:3a:02:51:
ea:f0:4a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:45 2025 by rpki-client