Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
File: lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft (raw, json)
Hash identifier: y/Kr94825fzMZC9ikZxNq9AqPDCWLWd9hO4Za495IAY=
Subject key identifier: C2:52:A6:DD:6E:68:6E:39:2D:96:99:2C:0D:DE:E1:39:67:62:F2:78
Authority key identifier: 95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0
Certificate issuer: /CN=9514df9fdc3a0b128c20ee8c06628c43c958bbf0
Certificate serial: 0194BB5FF380431CC595E91BCE3A7431A8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
Manifest number: 0513
Signing time: Fri 31 Jan 2025 08:00:15 +0000
Manifest this update: Fri 31 Jan 2025 08:00:15 +0000
Manifest next update: Sat 01 Feb 2025 08:00:15 +0000
Files and hashes: 1: cCGgeXQG7w7JJ0VVtoCaqK0Nuk0.roa (hash: OWS86sPN3Xs5u+J3GeHiIwJ0UACEogG9zbUxH/qhnWU=)
2: lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl (hash: dmiIfuoSsHj9I6MwxPKHeJhWKNLWm3wULJmjZHRVXzE=)
3: x4XI86xuT3wsfzGO7m_2JB-s4p4.roa (hash: Dt7gE1TI/UXgmAj9V+d2Jv58edUR433oJyH6DVwQHcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:f3:80:43:1c:c5:95:e9:1b:ce:3a:74:31:a8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9514df9fdc3a0b128c20ee8c06628c43c958bbf0
Validity
Not Before: Jan 31 08:00:15 2025 GMT
Not After : Feb 1 08:00:15 2025 GMT
Subject: CN=c252a6dd6e686e392d96992c0ddee1396762f278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:0c:9c:96:ba:8e:54:f0:b8:e6:ef:53:16:
c4:9b:20:ba:20:9a:c7:bb:e8:01:23:8e:19:5b:3e:
08:c4:3e:b8:1f:a0:dd:05:60:ce:f5:c7:e4:22:d8:
59:2b:1d:d6:ec:ad:d9:51:f4:3f:7e:e4:e5:97:f8:
8c:3c:a0:d1:d6:a1:ed:28:4f:4f:0c:57:97:96:12:
5d:75:4e:07:1c:47:8c:78:09:92:57:37:3f:63:b3:
e0:07:d2:7b:ea:db:ab:b4:9f:37:8e:b3:c4:12:6d:
e9:9e:42:bb:58:c9:5b:4b:f5:25:53:07:91:4d:e5:
5b:48:a7:dd:85:61:c0:69:e2:d3:2a:d7:dc:d8:81:
a6:c7:e4:fe:e2:65:fe:6d:21:71:4e:c6:43:5a:27:
ca:b5:92:f1:f8:03:02:82:96:b6:76:33:9e:5a:94:
1a:07:56:7a:66:a7:de:bf:36:3b:44:e3:b0:ff:4b:
cb:66:fe:5b:36:81:e1:89:fe:d8:b4:04:59:41:4a:
73:e8:34:e9:2d:41:c9:4a:fa:c1:1d:69:3f:93:6b:
58:2d:9c:d3:74:df:72:7f:27:aa:1a:46:56:50:a5:
3c:45:7e:3c:e3:79:a6:48:a6:39:de:32:98:f4:61:
74:43:25:a9:72:de:e3:bd:62:80:03:f3:9a:6d:ea:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:52:A6:DD:6E:68:6E:39:2D:96:99:2C:0D:DE:E1:39:67:62:F2:78
X509v3 Authority Key Identifier:
keyid:95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:33:99:fc:35:d4:4d:3e:85:f8:25:8d:7d:84:d8:89:08:5a:
0b:6b:b5:ca:7c:71:94:98:5e:de:f2:3c:c1:a7:47:bf:b2:07:
ab:f4:09:c0:10:55:44:da:9f:3d:cb:8c:ad:90:59:6d:9c:96:
bc:03:07:4a:15:fa:d0:f5:4c:cd:9a:62:90:19:3b:63:d7:b8:
38:4c:40:4d:c8:85:25:85:65:00:34:05:ce:3a:f9:c4:90:fb:
80:81:d1:fd:0b:f8:72:0b:15:7e:22:8a:b6:64:5b:80:a3:f5:
c0:e1:1b:8e:8f:a8:c9:e4:e3:6b:ad:3f:58:5c:7b:bc:19:69:
2e:a8:b9:32:83:98:9c:22:62:ec:85:37:3f:af:5e:e0:87:a8:
62:d6:78:24:55:79:00:d7:6c:73:93:02:fe:d0:a8:c1:b5:86:
94:b1:5c:66:f4:77:09:4b:21:44:82:fe:93:f6:44:11:78:04:
d3:b8:ec:9d:15:d5:70:49:49:9d:f8:38:97:87:78:2a:6a:1b:
01:8b:d5:bc:29:1d:80:e4:b4:53:90:72:cd:2f:1f:cc:f4:e7:
49:ad:94:95:ee:87:b8:48:27:03:c1:d1:2d:fc:0c:fc:7f:06:
6d:03:02:81:d5:85:2b:9e:4f:49:40:e6:b4:db:62:09:ec:00:
08:ab:10:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:28 2025 by rpki-client on console-fra.rpki-client.org