Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
File: ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json)
Hash identifier: 7wGK1UWACtrpppPiWjk8mpwhAfojwVx1rL1+xDqDjDk=
Subject key identifier: 89:02:25:3C:2E:D6:B8:9B:9B:67:FF:87:AF:40:5A:39:BD:94:62:9D
Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Certificate serial: 0194BABBC84C648EAC4E8FCC1A7D213FF832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
Manifest number: 02C8
Signing time: Fri 31 Jan 2025 05:00:56 +0000
Manifest this update: Fri 31 Jan 2025 05:00:56 +0000
Manifest next update: Sat 01 Feb 2025 05:00:56 +0000
Files and hashes: 1: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: H/sa3iN4fsYqCxsBBCya+R46zcDbpp7zV4jnt7PVqiA=)
2: eY3YrLangF39TsrfFYAYI-Ypyew.roa (hash: QBh3Fp11lONob0T3yDh1yiwajHFqWNsh3PoRB1MCVgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:c8:4c:64:8e:ac:4e:8f:cc:1a:7d:21:3f:f8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Validity
Not Before: Jan 31 05:00:56 2025 GMT
Not After : Feb 1 05:00:56 2025 GMT
Subject: CN=8902253c2ed6b89b9b67ff87af405a39bd94629d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:89:e0:ab:c7:a8:ca:6d:d0:0a:41:a2:c6:
3d:dd:0d:78:f6:ad:de:6e:73:78:e2:93:f2:f4:1e:
56:61:8b:77:a1:58:e4:95:35:93:cb:7c:66:1d:3c:
b1:5d:48:65:3d:dd:1a:02:40:20:9c:8c:f5:9e:21:
cb:72:51:42:cf:e6:8d:02:e1:24:3c:03:b6:2f:19:
75:83:2e:0c:4c:56:6e:95:f9:22:4f:5d:4d:96:c6:
6f:c4:a3:59:70:bd:30:8a:e0:f4:76:02:92:3a:7a:
94:aa:52:27:0d:8c:f8:c2:8b:f6:34:76:e8:cd:61:
ae:25:0d:11:f2:17:ef:58:00:ed:25:69:71:f5:b5:
c8:e1:27:33:20:49:40:6a:a9:21:88:f0:e2:28:f3:
15:66:5b:b8:3e:4a:d0:70:40:2d:24:f8:2b:3c:d8:
da:70:21:95:2b:00:df:c2:fa:01:9a:0e:18:fe:ea:
90:b3:72:3f:da:de:33:8d:0f:be:0f:8a:68:db:83:
ad:10:b3:35:14:4b:58:54:b6:70:5e:d5:88:5f:64:
e4:e4:05:0a:f3:c3:6e:4d:00:34:5a:a5:b4:67:0d:
a0:51:fd:64:af:8d:82:82:1e:8f:54:bc:69:9b:ad:
21:92:2a:d9:72:ad:95:e1:e8:18:4d:15:fc:4f:09:
e5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:02:25:3C:2E:D6:B8:9B:9B:67:FF:87:AF:40:5A:39:BD:94:62:9D
X509v3 Authority Key Identifier:
keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9c:5a:ec:e0:1b:13:6f:fb:d4:62:26:5a:15:a5:2b:57:86:
9a:10:4d:60:57:d0:be:40:25:f3:c7:19:e4:19:ae:6b:18:58:
20:77:10:fd:5f:bc:45:fd:50:58:a1:7d:1e:25:c4:c8:30:86:
85:ff:db:21:20:cc:ba:c2:bc:18:3d:30:cd:e4:c1:96:b4:5d:
a7:72:f7:35:bd:2e:d3:ef:5d:e4:00:d5:23:6f:93:fd:b3:b4:
3a:43:9d:36:be:e8:7c:95:e3:04:12:98:55:42:7b:51:17:90:
05:49:b9:25:ae:6d:c6:c8:f6:f6:43:88:f8:34:9a:de:5d:a1:
3f:1a:3c:0b:d1:69:97:93:92:67:b3:89:9c:9e:af:86:c9:4b:
4c:91:5f:2b:a5:e3:c3:0d:0f:66:e8:6c:ee:33:5e:52:57:d0:
c2:b4:4f:3b:7f:f0:39:a3:ce:83:8a:fe:ae:76:7f:d0:29:8b:
54:80:ca:ee:0e:2a:ae:75:c9:19:13:83:5e:50:fd:3d:40:21:
df:27:aa:28:1e:97:c4:f6:ab:f8:b7:ec:26:4b:10:fb:85:b1:
c0:53:ee:07:56:60:c8:fd:91:a2:a9:af:6d:cb:bd:f0:29:a7:
a4:8f:7f:10:cd:3c:0b:68:7a:df:38:e5:87:e3:3e:00:9a:76:
65:c4:82:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:25 2025 by rpki-client on console-fra.rpki-client.org