Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
File: eknuryQ0LDssYyyeSEYxON4twAs.mft (raw, json)
Hash identifier: moaawA5AcrMxMv8VHlXplhyHRZrqHogWUeion5ugWTc=
Subject key identifier: 66:56:A4:6C:4E:0F:29:8D:6E:82:5E:FE:FB:74:6D:31:DD:CF:9D:EB
Authority key identifier: 7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
Certificate issuer: /CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Certificate serial: 019511A269A7DC406CD2D719B977BAE2F213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 02:00:11 +0000
Manifest this update: Mon 17 Feb 2025 02:00:11 +0000
Manifest next update: Tue 18 Feb 2025 02:00:11 +0000
Files and hashes: 1: eknuryQ0LDssYyyeSEYxON4twAs.crl (hash: r3nQj+c2Pqo9GRb8YUDUoVdoronT2zdCQvk+xJPm5Fg=)
2: kO8QB2zrXRxl2N43GaWd_Repq5M.roa (hash: IUmtRjKzI10q9uvO/9zEmrcKLU0qcJf4Uhid1F3g4yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:69:a7:dc:40:6c:d2:d7:19:b9:77:ba:e2:f2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Validity
Not Before: Feb 17 02:00:11 2025 GMT
Not After : Feb 18 02:00:11 2025 GMT
Subject: CN=6656a46c4e0f298d6e825efefb746d31ddcf9deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4b:88:00:51:4a:86:a9:e0:d6:87:8e:d2:9f:
73:f1:ba:90:0b:57:a3:9c:cf:2f:6e:06:cb:91:66:
56:a5:c1:d6:0d:02:42:6d:9c:b7:0c:04:a5:8a:5a:
a4:0a:23:02:ad:8b:a6:c3:26:b8:ba:ac:cc:5a:e0:
54:aa:3d:4b:32:27:1e:50:ad:2b:88:9d:ae:de:b6:
72:fc:bb:2e:3b:4e:8a:61:76:ad:ff:eb:6f:68:0b:
a8:cf:98:a3:03:85:b0:70:5c:93:6f:be:17:ba:3b:
e9:d9:2d:78:34:36:e8:70:26:14:c9:b7:76:d8:e5:
07:86:61:6a:9c:51:29:3b:6c:13:c8:f0:cf:69:fd:
1c:33:16:a8:60:b9:2e:a1:cb:d5:8a:06:bf:ef:4f:
a0:a6:96:03:b2:99:7b:22:80:b6:5a:d6:48:17:7d:
96:7c:5e:f9:01:29:f5:22:fb:dc:e7:f8:f6:7d:60:
a3:10:aa:b0:60:df:fa:94:fd:22:be:eb:f7:f8:24:
1f:20:e2:04:96:2b:a6:52:0d:77:91:78:d1:45:bb:
14:e4:9f:66:f3:67:37:30:e0:82:11:84:cd:65:90:
d0:c4:fc:e1:f3:bb:48:85:2a:1d:59:d4:45:6b:64:
fd:2e:c3:ab:d8:6a:7d:da:27:50:a3:eb:a5:3f:0c:
5b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:56:A4:6C:4E:0F:29:8D:6E:82:5E:FE:FB:74:6D:31:DD:CF:9D:EB
X509v3 Authority Key Identifier:
keyid:7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:90:42:1f:f1:0d:5f:04:ac:37:95:3b:8b:3b:a6:00:69:04:
6f:11:05:fd:99:e8:4b:b7:5b:a2:cf:87:a0:d1:60:dd:45:2c:
bf:c3:de:0c:c1:8a:ed:a9:b4:1a:76:a0:71:3d:0d:f1:f4:8b:
60:36:a2:54:39:a8:be:c8:b4:99:5f:88:d8:9b:a7:02:7a:a4:
de:33:d8:7d:1c:4e:35:cd:6b:0e:64:7c:39:1f:57:88:e4:00:
be:f2:25:3f:79:2f:63:e2:8b:4d:bd:e3:81:27:42:b3:0c:fc:
e4:9e:e7:88:78:a3:de:42:a6:4e:25:16:84:68:2a:57:07:69:
2b:a0:b2:21:25:5e:60:2c:13:5a:85:a4:0b:4c:67:17:27:57:
c9:1d:7b:ab:49:8f:02:5c:38:48:3e:68:17:55:5d:34:4f:2a:
81:53:e6:c6:80:69:52:ad:fd:d4:a4:03:e0:7f:70:c1:2b:9e:
d3:b0:c6:8d:af:6d:e9:5b:0b:79:1a:6f:86:a2:6f:c4:0e:29:
6b:7c:28:af:69:62:36:75:c9:a9:a5:8a:3e:df:e0:6f:ed:2f:
ac:37:26:f4:a6:b6:9c:37:43:30:a2:5e:95:0d:4d:61:4c:d8:
e1:00:fd:4b:ae:6f:a1:62:0c:8e:ab:af:2d:67:53:60:3e:8a:
5d:b9:14:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:20 2025 by rpki-client