Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: zWZqfcdtfryxGzvq8l6rb5bKrN71+6qPP3piv2GZJwE=
Subject key identifier: B2:54:CE:92:FA:F0:5F:F5:4A:A4:F8:D2:8D:7C:18:66:07:29:B1:80
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 0195127E1291D69F8851DCA867D2B476C0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 06:00:06 +0000
Manifest this update: Mon 17 Feb 2025 06:00:06 +0000
Manifest next update: Tue 18 Feb 2025 06:00:06 +0000
Files and hashes: 1: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: zTgkrQAIUIM6wbQ1He5YNsUzUq7fDzAtM/Z5o03YDxw=)
2: VbNrPWQYTWo9s0J6s8AxjamlwvI.roa (hash: /mWvYY88JMhRPBUym5HOiq9hJe5sysSC0ACyBbQ58No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:12:91:d6:9f:88:51:dc:a8:67:d2:b4:76:c0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Feb 17 06:00:06 2025 GMT
Not After : Feb 18 06:00:06 2025 GMT
Subject: CN=b254ce92faf05ff54aa4f8d28d7c18660729b180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:14:17:f8:4e:f1:ab:d7:07:90:b2:a4:39:
af:ad:fe:9c:9b:0a:0c:ab:3c:18:d7:88:73:0e:11:
02:1d:32:41:de:6f:75:db:7f:88:78:03:ea:bb:17:
08:0c:9a:54:45:d2:4e:90:b7:91:d5:4b:41:fd:14:
63:17:07:48:be:d2:62:85:f7:1d:c5:3f:4a:6c:7e:
f5:31:3d:6b:2c:79:88:ee:3a:77:d7:76:53:34:7c:
07:4b:36:51:a5:9b:e3:cb:9a:4c:91:c0:28:99:19:
97:c9:cb:85:c5:94:80:ba:4a:bd:ad:dc:a0:21:0e:
23:a8:c6:5f:55:64:a6:f4:5a:48:2a:07:c8:2d:71:
8e:a7:84:7b:dd:af:f1:62:32:78:8d:a8:b8:35:b8:
e7:37:cc:93:1d:1e:1a:f0:10:4c:26:5d:65:0d:0e:
b0:24:72:ed:bd:46:d3:10:db:8f:cf:83:66:93:21:
0d:17:82:9e:05:50:b7:9a:31:9d:1e:90:93:58:ba:
8e:0f:9b:9b:7d:6a:c1:27:b1:0b:9a:2c:ee:ee:fb:
06:c4:17:34:2c:ef:bc:d5:5f:5c:f1:c2:53:aa:e4:
80:8a:cb:cc:89:85:b6:40:78:c9:c7:a1:ab:a9:ce:
dd:66:26:25:bf:2a:df:de:ef:ac:8b:eb:ff:32:b1:
e9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:54:CE:92:FA:F0:5F:F5:4A:A4:F8:D2:8D:7C:18:66:07:29:B1:80
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:21:24:03:94:f7:d1:ac:a8:68:91:4c:27:87:29:8d:5e:e6:
01:2a:b5:a4:cf:1b:35:cf:94:b5:cd:26:4f:1b:3e:18:c0:cb:
7d:77:67:29:78:58:08:bf:22:38:dd:8a:51:19:bc:e9:fb:17:
8c:e5:fb:5a:6c:db:8a:cc:78:bd:4c:00:d7:5d:d2:23:a4:2f:
0d:78:9e:ab:24:4f:a0:e1:49:93:1b:a3:0b:84:cb:1d:58:6a:
64:83:fa:88:01:c2:cc:62:ad:2b:d4:7b:aa:6e:64:48:06:d4:
3a:bd:6d:ec:58:f0:49:ea:3e:a1:1c:19:c9:44:3b:bc:65:1a:
d5:3f:60:43:8c:22:d9:a4:96:5d:fa:de:7e:41:56:37:7c:d4:
71:94:69:0c:a9:39:c0:84:97:0f:ef:16:dc:42:13:24:4d:11:
9b:fa:0e:49:0c:09:89:97:71:74:dd:80:4e:bc:af:26:f9:77:
f9:d8:18:c1:6b:68:a2:31:e8:46:27:ec:4a:ca:9c:64:89:c6:
41:c8:d6:8e:bd:28:47:59:63:8f:87:fa:41:24:4d:d3:84:10:
42:cb:c6:04:38:af:78:e9:96:b1:80:47:e0:a1:8c:64:85:c4:
85:41:46:a6:5c:dd:23:ff:1f:0c:b8:f5:60:41:99:a1:4c:c6:
f9:73:bc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:25 2025 by rpki-client