Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
File: s-3xF3T0QHrdvfPPukweeqAkIiM.mft (raw, json)
Hash identifier: AvAYJdoFH6/Ap9soK0/Kh3rkanFUMcN7VUHcTsjfEME=
Subject key identifier: 64:62:22:D1:C1:3D:17:2D:A7:B7:BE:61:53:1C:A5:A2:4D:53:38:1E
Authority key identifier: B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
Certificate issuer: /CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Certificate serial: 0195127E23AA1BCA1142345C94C651EEE8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
Manifest number: 01E5
Signing time: Mon 17 Feb 2025 06:00:11 +0000
Manifest this update: Mon 17 Feb 2025 06:00:11 +0000
Manifest next update: Tue 18 Feb 2025 06:00:11 +0000
Files and hashes: 1: s-3xF3T0QHrdvfPPukweeqAkIiM.crl (hash: 93uVW2SfINm/0uRa5yh9XJL0Tau5nSWgQviovS4Z1RM=)
2: uqWPOGEjKAK6cva-7ggQuyGZx84.roa (hash: LmiTjnCPg8ISEkh3ESWU5kwDHzMqe3y8V1474zgHE24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:23:aa:1b:ca:11:42:34:5c:94:c6:51:ee:e8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Validity
Not Before: Feb 17 06:00:11 2025 GMT
Not After : Feb 18 06:00:11 2025 GMT
Subject: CN=646222d1c13d172da7b7be61531ca5a24d53381e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a5:a2:5f:a7:15:47:2c:06:1e:25:65:98:a3:
65:7e:07:a6:c4:6a:16:74:28:94:09:ec:3d:54:77:
c4:cf:3a:ec:d2:a1:1f:92:b2:e0:93:3a:01:f7:53:
ea:96:46:d3:48:2d:0e:98:72:bd:28:90:f0:0d:23:
39:3f:1f:42:3d:f3:b4:75:65:a8:bf:84:61:c6:0f:
ce:10:d3:33:ff:4b:ab:7d:a9:e3:69:1e:91:86:25:
8d:6d:6b:af:4a:31:5d:90:a1:f4:5a:ba:ba:c9:71:
c2:1d:f3:34:db:40:c2:74:22:86:df:ef:d3:9c:b7:
af:c4:46:15:ee:33:5c:7d:a0:04:6f:59:cb:be:1b:
80:0b:66:24:20:a0:a7:57:08:24:33:54:05:63:36:
44:b4:58:e6:e8:bd:8a:c8:3a:65:03:61:37:f2:f4:
0e:e0:54:72:0a:94:a2:d0:26:fc:7d:83:14:b7:c1:
cf:ac:ab:dd:c5:82:65:f1:53:db:e3:61:32:38:b1:
c0:a5:05:f5:23:d3:ca:c6:ab:fa:e4:1b:6b:6e:2e:
09:64:3a:81:68:90:bb:91:6b:6e:45:36:5d:1b:8d:
e3:85:cd:72:42:86:b3:db:a9:b5:a4:17:00:87:2e:
8e:b9:d5:d9:fb:d2:d5:14:18:1a:2c:f0:f8:21:34:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:62:22:D1:C1:3D:17:2D:A7:B7:BE:61:53:1C:A5:A2:4D:53:38:1E
X509v3 Authority Key Identifier:
keyid:B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1f:f1:04:cb:13:23:ac:bb:e6:2e:49:20:5c:dd:82:b7:e2:
f4:1d:45:d6:dd:4e:1b:6c:19:13:d8:c8:df:fd:ab:a7:0a:1c:
62:16:27:d5:60:87:fe:63:25:f2:fe:0a:9e:65:b4:86:b8:31:
01:c1:a6:a2:85:f3:55:b7:b9:b0:c9:be:62:c7:44:0b:0d:6d:
93:87:7a:51:6d:59:03:49:a4:23:8e:43:da:4c:70:3d:85:49:
38:d8:e5:8c:6d:f7:bc:0b:3d:92:22:76:8a:28:c1:cd:ff:76:
06:bd:dd:82:24:f3:18:6b:f5:43:b2:9f:fe:cf:4e:b5:04:45:
38:d9:41:67:7c:63:c5:04:5c:53:24:7f:98:3d:ea:a9:97:fc:
0f:7c:54:8a:ea:9d:c7:7f:23:74:cf:3c:bf:ec:f1:79:30:14:
6e:88:ae:9a:8a:58:0a:8b:1d:c9:2c:b9:0c:3f:af:e9:51:93:
10:81:2b:ba:bd:d8:70:b9:36:2d:ec:e8:7a:89:6c:7a:d1:35:
c9:8a:c7:ed:56:43:ef:1f:46:22:85:0b:f9:1c:90:84:03:5f:
58:d6:78:f5:02:ef:24:e4:09:cd:30:ed:39:19:e0:ab:04:d6:
29:22:b0:c2:cd:fc:ef:8e:3f:65:66:8f:48:f5:ff:c9:57:92:
30:77:7f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:19 2025 by rpki-client