Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
File: E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json)
Hash identifier: ASndjISMLzKhbGQrKAPCo8HfMMasvqDiFGysIBKmBDU=
Subject key identifier: CE:96:48:88:2E:FA:B9:56:DB:AF:D3:15:64:FB:BC:60:1D:39:E7:EA
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Certificate issuer: /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial: 019511D9AA67478C4C73B61548457E14E32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 03:00:32 +0000
Manifest this update: Mon 17 Feb 2025 03:00:32 +0000
Manifest next update: Tue 18 Feb 2025 03:00:32 +0000
Files and hashes: 1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: /CglP2I0o5czbZ7RwdEESrcV3KS1xO91LYdG4hPb8Tk=)
2: H9WDvc0OfXB44k8OyrV2kgiLuzs.roa (hash: ECy836T53R0CEG1VyCTCAvl+zi+aWOuz45OEcMa+89w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:aa:67:47:8c:4c:73:b6:15:48:45:7e:14:e3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Validity
Not Before: Feb 17 03:00:32 2025 GMT
Not After : Feb 18 03:00:32 2025 GMT
Subject: CN=ce9648882efab956dbafd31564fbbc601d39e7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9c:bb:95:24:8a:e0:6b:bb:fb:d7:92:4d:50:
20:f4:bb:71:3b:90:dc:4e:5f:15:96:b2:35:c6:37:
dd:5f:24:54:7c:45:b5:e6:99:fa:44:dc:7e:e5:9c:
f0:c8:d1:32:a8:dc:82:3f:bc:74:da:ae:48:38:04:
16:2b:8c:5e:de:aa:e5:f7:bf:35:3d:fe:fc:03:39:
63:ea:e5:92:ea:1c:e8:2c:2e:a6:21:0e:14:6c:e2:
15:48:33:70:cf:02:40:a6:ad:b7:c9:1a:7b:71:72:
2b:83:e4:c8:3c:48:fc:82:69:cf:3e:39:50:44:f3:
94:5a:c1:82:69:a3:a2:d2:ed:f4:b1:bb:81:35:f2:
b7:57:f0:ce:e1:5c:f5:c7:63:fe:81:1d:e7:f5:17:
ec:e0:51:27:d6:c1:1c:ca:a8:c2:99:be:74:2f:a1:
a4:aa:7e:ca:b2:31:a7:19:5e:5c:a0:14:06:98:5b:
9f:69:c2:45:53:b5:5b:c7:9c:2c:35:c6:b6:41:95:
22:97:08:52:fd:72:ab:78:69:da:b3:08:99:06:a4:
93:43:94:a2:c9:9e:e4:24:c4:cc:4a:67:0c:1a:de:
e5:c5:e8:70:13:22:76:97:33:cf:7e:97:e8:18:27:
79:6e:cb:fb:21:34:8f:6c:49:32:d6:5b:68:11:01:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:96:48:88:2E:FA:B9:56:DB:AF:D3:15:64:FB:BC:60:1D:39:E7:EA
X509v3 Authority Key Identifier:
keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:88:4d:6b:df:10:62:a7:4b:7d:e2:8f:07:15:b9:26:b6:30:
0a:46:1e:38:66:a5:9e:44:80:6a:0c:5e:64:0a:c8:cf:06:98:
4b:0b:34:47:91:f4:14:e1:ee:9d:ab:c7:1e:7c:e6:35:1d:44:
64:33:75:ef:15:06:61:75:c9:a5:cc:81:ab:d2:e4:43:54:60:
03:fc:c7:28:80:79:2d:8a:f1:5e:da:17:4a:af:a3:71:f2:09:
d8:48:e0:65:ad:df:2d:70:a6:23:a3:be:4a:b8:96:a7:99:31:
87:99:e7:7f:10:69:c6:72:78:39:8b:81:82:f4:a7:f8:db:5a:
55:f7:9d:c1:cb:f1:ba:d0:7f:06:57:7e:73:77:b4:87:47:84:
6b:7c:31:91:64:0d:05:2f:e1:58:4a:47:e8:ac:95:92:d0:a6:
45:6f:d4:43:4f:33:43:a6:7a:78:c9:e6:94:c7:21:e5:64:da:
27:ae:cf:62:98:b8:19:99:67:a3:a9:af:96:f1:8f:31:30:ef:
b2:4d:55:5e:96:81:1c:f0:1d:20:55:94:29:81:04:04:ed:32:
ba:16:55:23:c8:a5:9f:c5:d4:e2:d4:03:b7:8a:37:1f:d7:90:
38:2c:f6:ea:6a:48:0a:b1:fd:37:bd:f8:4a:70:7f:1e:ee:ef:
41:ca:39:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:24 2025 by rpki-client