Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
File: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft (raw, json)
Hash identifier: b/OEGAYRARU0yidWKYXe07LGZmePSOE6eFcMXEuF9MU=
Subject key identifier: E4:2D:B5:C7:B2:CD:36:A0:07:93:01:CB:43:16:6A:3C:5C:D2:56:1C
Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Certificate serial: 019511A2791CA49A006B1E151D35A77673E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
Manifest number: 1348
Signing time: Mon 17 Feb 2025 02:00:15 +0000
Manifest this update: Mon 17 Feb 2025 02:00:15 +0000
Manifest next update: Tue 18 Feb 2025 02:00:15 +0000
Files and hashes: 1: NasWHXHMUrneYOPi_YEJHup68SM.roa (hash: vL3Q2Q0+7pnxdL6gd2R9r+dXrTLQulaJB+4Rjiarvgs=)
2: mQMuKDoHnr1LeGkTlxHsfTZ3PWQ.roa (hash: zwJx6M98s8at6u4x9fLfaXSOW6xFzqNRxDzug5GEBAw=)
3: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl (hash: I/uGD7QvkpJbB3AZ6Fbn+I7i/A79rWSHhuxorRUaGGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:79:1c:a4:9a:00:6b:1e:15:1d:35:a7:76:73:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Validity
Not Before: Feb 17 02:00:15 2025 GMT
Not After : Feb 18 02:00:15 2025 GMT
Subject: CN=e42db5c7b2cd36a0079301cb43166a3c5cd2561c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:b0:1a:00:3a:60:6d:48:83:24:0d:4c:14:
6e:13:ca:41:b5:c8:2e:7f:90:b2:e6:70:f0:af:c2:
e9:46:bd:4b:05:86:98:f0:b0:02:e0:dc:3d:23:8f:
e9:ce:c0:f2:0e:db:f8:50:ad:cb:b7:0f:a6:56:d5:
3a:e1:9f:24:fe:8e:fb:30:f3:e9:ec:8e:3e:0d:1f:
b8:44:75:9a:b8:46:f0:4f:0b:7b:79:3d:53:7a:2e:
cf:e9:96:6e:62:c2:88:6f:b2:08:61:ab:8c:f4:0d:
93:e9:aa:36:0e:f4:b0:bd:43:90:19:54:94:e4:56:
80:89:f3:53:2c:fb:94:ab:81:70:60:d4:20:80:79:
e3:33:bb:1a:3f:6f:2c:c7:5b:73:75:b5:ea:6e:04:
51:43:cd:49:06:49:4b:33:3d:25:53:b6:6b:ec:af:
8f:e1:37:88:a5:23:91:aa:89:3a:ce:9f:23:31:b0:
61:84:34:b7:c3:50:26:94:dc:a8:5e:b2:a8:5f:5f:
b2:52:23:f8:ff:75:f4:a4:dd:29:e3:fe:a1:a7:3b:
88:d0:26:72:f7:bb:c4:15:5e:ca:b9:8a:83:9c:73:
96:06:6c:08:a4:c2:29:77:52:50:d0:9b:bb:e3:69:
6b:08:53:6a:8f:80:6c:e4:9e:16:0c:c7:73:c0:d2:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2D:B5:C7:B2:CD:36:A0:07:93:01:CB:43:16:6A:3C:5C:D2:56:1C
X509v3 Authority Key Identifier:
keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d3:1c:83:f3:e9:18:e4:09:3a:75:b1:33:f2:9b:4e:54:21:
3f:f7:4b:3a:ea:20:db:7f:76:03:68:59:b0:f7:d9:38:91:7c:
a0:dc:d1:e4:b8:be:bb:d2:db:ca:a5:df:60:89:99:85:a8:ed:
6a:8f:f0:b9:de:a4:06:91:9e:53:41:04:36:77:0f:e6:b6:79:
d5:59:57:f4:aa:e8:10:e7:cf:39:d2:52:65:ac:09:5b:a5:0a:
46:6b:2d:dc:ee:23:77:cd:76:6f:1e:f5:40:29:da:27:44:96:
ad:52:f6:21:78:86:64:1b:23:24:f5:66:70:d0:13:00:7c:dc:
63:02:a2:aa:eb:ad:f5:c5:44:c9:0b:16:72:42:f2:92:b7:82:
f3:7c:00:86:6c:7c:cd:f9:3c:66:2f:e7:e2:62:2b:29:f4:ce:
fa:2f:9d:c9:37:27:a4:dd:1b:f9:4f:a7:f8:96:dd:f2:d1:e3:
77:94:d9:19:79:9c:0c:87:a7:38:3c:c4:07:ae:7e:e8:4b:58:
21:23:bf:e0:89:f4:98:d8:ca:34:d6:6b:ef:06:e7:fa:36:49:
d5:b2:16:dd:0b:2a:85:ac:f0:df:41:01:59:8c:f1:41:fd:07:
db:91:7e:bf:49:aa:e5:9f:ba:6d:1c:2a:7a:fe:67:fb:b8:a1:
af:24:1c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:00 2025 by rpki-client