Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
File: e0fNwhx8siRnTA6v3sY6ID7uMQg.mft (raw, json)
Hash identifier: vRsyHeuKKNkjai0aL0MvnJD+X2yOxOlbcuMMomANTbo=
Subject key identifier: A7:3A:E7:66:42:48:4C:36:8A:5F:49:39:14:86:01:70:A3:65:06:21
Authority key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
Certificate issuer: /CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Certificate serial: 019511D96102E8B29A9711C9F147B2A42149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 03:00:13 +0000
Manifest this update: Mon 17 Feb 2025 03:00:13 +0000
Manifest next update: Tue 18 Feb 2025 03:00:13 +0000
Files and hashes: 1: _d9TqHUt6Akn4mIp9hun4eZSvDY.roa (hash: E+7eG5ZCI82NV5+vYe7SeDuuzqJipfHrlwV+FyH2KQM=)
2: e0fNwhx8siRnTA6v3sY6ID7uMQg.crl (hash: OJDGXzlAu1JWZMJVJL0xi+ERXv88Wnm4mtZfyG649HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:61:02:e8:b2:9a:97:11:c9:f1:47:b2:a4:21:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108
Validity
Not Before: Feb 17 03:00:13 2025 GMT
Not After : Feb 18 03:00:13 2025 GMT
Subject: CN=a73ae76642484c368a5f493914860170a3650621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:b3:dc:80:5e:e3:fc:97:42:8a:51:1e:7e:
73:da:04:00:18:a2:9b:32:85:26:89:1e:64:f3:02:
6c:55:2b:77:cd:7e:e5:08:64:95:4b:98:69:1e:51:
74:2e:9f:2f:5d:52:d6:d2:2b:4b:44:b2:3b:14:34:
e0:2d:d1:a0:3a:4d:b9:c8:fd:79:76:77:9f:7e:e0:
d9:0b:eb:b2:23:51:23:b7:68:0c:03:00:2b:3b:49:
16:25:e8:78:58:ae:93:d2:8f:25:74:21:ba:8e:9a:
c5:24:ea:42:38:30:0f:8e:4f:8d:fa:ee:ef:2b:4e:
d2:d4:84:c6:77:bd:09:3f:f7:f6:52:fa:e7:ac:b9:
60:19:05:96:23:16:90:ec:46:02:dc:64:57:3f:81:
99:19:52:a5:88:69:88:6c:d7:9f:dc:7f:e5:dd:6c:
4a:e4:68:b2:9c:32:5f:00:06:1a:81:a8:d7:f1:90:
b0:81:54:8b:a6:44:34:07:57:f5:fc:11:28:49:6e:
82:be:1b:6f:88:ab:fd:87:b1:45:59:ed:91:f6:3b:
68:7c:5c:4d:bd:15:7f:0b:80:a8:60:29:da:33:25:
1f:6c:ce:95:81:15:2b:be:8d:2f:e4:93:cd:95:69:
3e:2d:8d:24:d7:14:4b:6d:ea:3c:b7:e2:dd:ff:0f:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3A:E7:66:42:48:4C:36:8A:5F:49:39:14:86:01:70:A3:65:06:21
X509v3 Authority Key Identifier:
keyid:7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:37:b4:0d:85:15:91:97:ff:4f:99:a9:b3:0a:89:26:74:56:
18:ae:47:3a:c1:15:6c:2f:b0:13:b4:1d:52:67:a2:97:05:4d:
b3:db:74:e8:89:f9:53:53:85:d2:96:fd:a3:41:09:52:5e:74:
c6:9b:7b:f8:4c:28:dd:e5:27:6e:3c:59:67:68:b5:82:d0:1f:
77:80:36:db:a4:63:40:c1:7d:71:af:41:19:5d:04:74:92:a8:
c1:f1:00:63:c4:82:53:1b:7b:3a:01:54:48:ec:2d:7e:26:7c:
02:0d:80:c2:3b:b9:f8:96:48:60:5f:ae:dd:b8:61:12:de:11:
50:4e:a9:aa:f6:aa:90:7e:a9:f0:0a:57:70:d9:50:d9:e8:98:
e5:e8:ef:96:23:1f:d0:0f:fd:8d:bb:46:e4:cc:ed:b9:4a:66:
7e:c1:75:0e:b1:a4:90:eb:75:64:e5:48:ea:0e:01:b4:45:12:
31:f3:15:66:59:ee:f8:38:d6:b4:1e:20:46:bb:ed:2d:3e:c8:
7d:a1:7e:9b:31:80:6d:91:c0:e6:73:cb:ae:1f:55:f6:f7:43:
93:9f:cb:c9:d3:4a:6c:ec:ab:4a:01:c8:69:3e:ea:24:bb:ff:
72:6a:29:c7:38:56:65:fc:fa:f5:2e:f2:e9:a8:ee:15:e0:a2:
82:89:1c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:28 2025 by rpki-client