Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
File: i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json)
Hash identifier: akKydRmFkpvt7KGCxbUMFZdj6+qqcabjF2j1F2cLetk=
Subject key identifier: 0A:02:E0:A7:2F:E3:42:E4:B8:90:54:90:CD:C1:37:1A:6B:A4:7B:1B
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Certificate issuer: /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial: 01951090134099FD31F27A69AF1AB6208D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
Manifest number: 067B
Signing time: Sun 16 Feb 2025 21:00:32 +0000
Manifest this update: Sun 16 Feb 2025 21:00:32 +0000
Manifest next update: Mon 17 Feb 2025 21:00:32 +0000
Files and hashes: 1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: b7FEEqUTlgHokX0W5rlhk4s1nxWxZrMuNpXqeSkuA0M=)
2: kpL1mBA7PiBUtfdmw6AVzfdGe84.roa (hash: X1ZTIcXTz0jbHRbURZ6ZK36qgjM4K05EqBeOsJvnW6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:13:40:99:fd:31:f2:7a:69:af:1a:b6:20:8d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Validity
Not Before: Feb 16 21:00:32 2025 GMT
Not After : Feb 17 21:00:32 2025 GMT
Subject: CN=0a02e0a72fe342e4b8905490cdc1371a6ba47b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:3f:13:50:8b:7a:47:67:5f:b6:0d:9a:95:
f5:b6:a3:14:10:77:a0:18:d8:a5:56:00:96:7e:34:
1d:fd:d3:a5:ec:ce:96:da:7e:2a:f3:c1:65:4e:0f:
c1:c2:04:42:95:a9:bc:0a:d9:1f:d8:1d:91:2e:b5:
fd:f0:f9:48:33:40:7b:25:9f:8c:99:f2:c0:63:77:
d0:0e:77:56:47:5d:58:4e:af:7e:ea:25:05:56:a3:
4a:ee:d7:ef:ff:af:02:80:c7:b1:d5:2c:a1:f7:95:
f7:4c:4e:f1:06:db:33:60:cf:ff:df:db:a1:18:4a:
09:0c:63:a5:d6:21:73:7b:6b:43:00:b9:62:91:ca:
93:21:05:09:89:5f:8d:37:cd:c0:1b:4a:4a:f0:fe:
54:0e:e8:e4:60:da:45:95:35:31:3c:25:ab:89:4a:
3f:bd:8c:48:6d:39:24:b3:e1:e5:06:83:e3:5c:85:
58:f7:1b:63:d5:9a:1e:5f:bb:1e:d8:8c:87:0d:a0:
63:2a:ce:d2:1f:61:24:6a:41:8b:b0:cb:62:2b:d9:
ca:51:73:88:50:11:73:c6:c0:04:07:e2:74:a3:41:
7b:d0:5a:85:ae:16:a9:db:71:92:95:b7:08:07:61:
30:a0:4f:d8:44:6f:2e:c4:86:9a:b2:02:96:32:b5:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:02:E0:A7:2F:E3:42:E4:B8:90:54:90:CD:C1:37:1A:6B:A4:7B:1B
X509v3 Authority Key Identifier:
keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:83:cd:85:97:d6:f2:fa:91:5e:2c:62:f2:cf:f7:69:d9:ca:
97:97:f8:9d:8b:a3:ae:0c:a9:8b:c4:a4:20:14:6f:dc:42:aa:
59:7a:8f:cd:89:38:86:08:39:44:35:dd:f4:b6:d2:0d:2b:4e:
93:05:d0:d7:2b:ec:2b:b0:0b:04:8d:75:50:0d:b5:df:d3:eb:
dd:3c:36:2e:a7:07:d4:92:ff:7c:e3:3e:34:94:39:46:1f:47:
bc:cb:86:21:de:d0:d9:5e:d3:a2:05:fc:9f:cc:8b:70:b6:60:
8b:9d:b8:fc:04:4f:88:52:8d:0d:1e:bf:d5:76:b7:27:90:d0:
0b:d6:84:4b:79:9c:af:42:1b:5d:df:49:92:5c:a2:54:07:70:
f1:80:4f:ad:77:79:2f:40:15:7d:c6:0f:fd:83:13:c7:e9:d9:
db:53:b5:34:08:39:c0:9a:9e:99:5f:75:48:b6:46:ea:fa:8e:
1a:87:b4:e4:85:bd:bb:10:17:40:d0:46:c1:4d:7e:b9:5e:18:
3c:cf:82:a1:ea:9e:b3:66:c3:82:95:e8:5c:b2:53:55:c5:83:
21:d6:56:9c:cd:c3:05:33:b7:07:15:07:3d:2b:48:b7:91:0d:
f9:e8:fa:89:61:19:07:9d:62:8c:98:40:82:7b:41:d0:e1:3b:
20:3a:15:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:49 2025 by rpki-client