Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
File: ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft (raw, json)
Hash identifier: E0vlMiUsY4LnqzeVDimcOBxCFoYQQlK+3zw+87eMjRs=
Subject key identifier: 9F:53:2B:5F:6B:63:DF:66:29:57:23:2D:27:27:A1:B7:1E:CD:78:DB
Authority key identifier: 11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
Certificate issuer: /CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Certificate serial: 019510C7DC2C30BFAB9726146BFEC27A13FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
Manifest number: 0C4B
Signing time: Sun 16 Feb 2025 22:01:28 +0000
Manifest this update: Sun 16 Feb 2025 22:01:28 +0000
Manifest next update: Mon 17 Feb 2025 22:01:28 +0000
Files and hashes: 1: ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl (hash: 0zbouQJ/NaqSnK1/Myd5gFQaDfHNmmRGFLuWhmHDdbM=)
2: TrL7vyhk-vrmOcVyXUhkgoFF8IM.roa (hash: Hfs6eqQDDmF2iRkKQ4LyqXry5vY1cydb2ruM4NvmGtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:dc:2c:30:bf:ab:97:26:14:6b:fe:c2:7a:13:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Validity
Not Before: Feb 16 22:01:28 2025 GMT
Not After : Feb 17 22:01:28 2025 GMT
Subject: CN=9f532b5f6b63df662957232d2727a1b71ecd78db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:84:07:ef:16:81:96:c3:00:60:7b:d6:4a:
5b:79:e3:3d:7b:46:18:6b:76:76:49:2d:53:d3:77:
94:9c:f6:68:99:1b:69:65:7f:ce:7c:01:7f:94:e0:
2f:a1:c6:15:3a:a1:af:2e:e6:d6:3a:b9:f9:48:a6:
74:8f:a8:0a:5f:a7:52:bc:fb:b0:9f:98:02:65:39:
ac:84:2a:26:95:90:17:df:47:db:bd:67:6c:67:f9:
7c:44:cf:2e:e1:3a:c4:52:ad:7b:90:ad:49:32:c7:
ed:5b:3b:4c:7b:a2:34:61:fc:e9:f1:8b:36:13:17:
1e:7c:78:bf:7c:28:2b:15:70:a4:8d:dc:ba:d7:fa:
04:cb:cc:3a:5e:d7:3b:2c:f0:02:36:2b:7a:33:b1:
68:7a:67:48:8f:6b:bb:e1:7e:a6:0c:83:45:d5:91:
34:7a:2a:35:6f:5c:28:9b:ae:89:18:b7:05:1e:9d:
e9:68:dd:23:6c:43:1c:f6:74:a7:a2:c3:7c:81:4c:
27:e0:34:35:2d:df:7b:47:eb:9b:5c:2b:f2:36:d1:
1f:d2:5a:66:66:37:fa:af:72:28:7e:21:70:3e:b7:
e8:bf:34:cb:54:f7:78:8a:30:c1:13:77:93:e7:f9:
14:2e:8f:b4:99:94:a3:25:82:cf:da:cf:9e:78:32:
87:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:53:2B:5F:6B:63:DF:66:29:57:23:2D:27:27:A1:B7:1E:CD:78:DB
X509v3 Authority Key Identifier:
keyid:11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ac:71:ab:1c:00:74:dd:24:4d:55:1e:59:18:43:d4:42:02:
97:59:ec:c5:ab:7f:77:00:11:c1:9e:b1:7e:9c:f3:9a:05:21:
eb:eb:ac:6f:ad:e5:d3:d1:0b:3d:45:cd:c1:f6:01:4d:19:66:
8b:58:75:9f:73:b0:a9:7b:ca:ba:db:f6:39:de:e6:1b:93:2e:
9b:34:27:29:d6:9d:2c:f5:42:ad:94:ea:34:2e:48:05:7e:77:
7b:f3:e8:d9:71:10:1c:83:81:f7:06:96:0a:8b:48:e4:52:55:
5c:82:b8:62:ca:30:e6:6f:c9:d4:30:c9:44:27:24:de:f0:fc:
40:78:18:72:61:21:4a:89:af:92:ff:e0:f2:94:9f:cd:dc:7e:
3c:43:3e:ad:74:55:1c:a9:f0:bb:e8:93:ff:6f:c9:a6:52:87:
d9:bc:99:4d:38:08:98:3d:a5:69:2c:89:11:1b:81:58:1d:c2:
67:6d:b6:00:00:ca:f8:93:88:6d:ed:37:8f:7c:63:ac:96:41:
9b:89:ff:35:d7:1d:bf:af:51:d0:5e:7b:55:29:42:4d:ba:36:
e4:28:0d:75:5f:9b:14:cd:7e:c5:27:9a:aa:97:6b:78:ae:c7:
ff:a6:bc:3f:42:ab:ee:85:21:ef:0b:6d:35:1a:a2:84:2f:1e:
d5:f2:b6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:54 2025 by rpki-client