Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
File: _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json)
Hash identifier: iJvxkCQlwwgVWqcYWhPN/rmRzgQWA+b7zlMn7DeDtTk=
Subject key identifier: 46:FC:2E:8B:F3:B1:61:9B:E8:73:CD:88:A0:EE:D7:03:4E:ED:6F:F2
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial: 0194BB292653376100422C2AB162CB6F140F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
Manifest number: 0DCC
Signing time: Fri 31 Jan 2025 07:00:23 +0000
Manifest this update: Fri 31 Jan 2025 07:00:23 +0000
Manifest next update: Sat 01 Feb 2025 07:00:23 +0000
Files and hashes: 1: EpQcDDhQK8-WOhYfBO3A-z572b8.roa (hash: tX6xd7XfEe5I+QgttvkH+DOkKR0i0R1ahT4BEMwpPug=)
2: KV_nG_kmH633ZUe-9L97LnA29yw.roa (hash: sb05Z/GuWAjUIqo0R3Yca51uKGMc6MwqIkHeJF92vO8=)
3: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: E45teqnd2fTCxMaNhfFZgLh1rwrN9Ge9SjGFWW7iHO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:26:53:37:61:00:42:2c:2a:b1:62:cb:6f:14:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Validity
Not Before: Jan 31 07:00:23 2025 GMT
Not After : Feb 1 07:00:23 2025 GMT
Subject: CN=46fc2e8bf3b1619be873cd88a0eed7034eed6ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:c4:76:0b:56:bf:62:15:76:54:58:5e:3a:
fe:5c:48:2b:66:fe:8e:a3:2b:e2:78:d5:55:f2:d9:
60:e5:77:ff:24:1f:41:32:12:b7:bb:89:d0:90:1b:
16:15:ea:af:e3:d9:61:17:8b:ff:c2:27:48:7d:a1:
32:74:cf:93:59:1a:fb:7c:2c:b0:fd:f8:36:7a:19:
1d:76:e9:87:c4:ae:df:60:1e:fd:90:43:8c:1b:e3:
d4:b2:e9:36:92:54:38:12:f1:52:ce:62:3d:b6:72:
48:b8:a7:d4:4d:6e:d0:91:0d:1f:52:b7:45:5e:a7:
8e:1b:6f:cb:be:53:52:9a:bf:39:87:d2:67:9e:02:
ce:50:3e:32:79:ae:3c:0e:63:34:d0:3d:ca:ed:89:
f9:d3:76:f9:9f:47:d1:8f:5f:6e:f5:55:e0:ff:e4:
41:91:c8:32:fd:a8:30:81:c3:c9:a3:b4:48:b1:d9:
24:0e:56:b3:7c:ec:d1:d1:96:af:23:9c:31:f4:5b:
6f:7f:55:62:e0:83:54:e0:90:a0:8e:d6:3d:0b:b8:
af:53:bf:c0:7b:1a:dc:d5:a8:9d:5a:a1:dc:f9:b6:
51:16:bd:d5:c8:c9:ea:7a:6a:a8:3f:30:4d:a7:bb:
13:1a:af:12:c3:87:74:a0:07:58:d6:83:c7:4b:1e:
64:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FC:2E:8B:F3:B1:61:9B:E8:73:CD:88:A0:EE:D7:03:4E:ED:6F:F2
X509v3 Authority Key Identifier:
keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:28:f1:cd:74:b5:76:1b:b8:b1:fc:1d:97:46:32:a0:09:fd:
d2:33:55:aa:4f:c2:06:42:4a:30:14:3d:13:38:6c:61:48:04:
92:da:43:ec:dc:3b:c3:f5:bf:4a:5a:ca:24:ed:0f:cf:4f:19:
97:8a:10:34:69:a6:ff:d2:f3:7e:69:e1:40:d8:51:f4:a9:f7:
17:f1:48:b3:2b:e5:eb:e6:9c:6b:5e:4f:f4:38:a7:92:01:85:
7c:b7:76:53:ac:ac:8b:73:c1:ef:f1:bd:65:cf:3d:95:88:d3:
07:8b:0a:60:28:18:ec:5a:51:4d:3c:81:0c:d2:82:27:c8:ef:
cc:8d:2c:9e:d4:9d:28:60:0a:b1:9f:9a:51:89:e4:09:39:f4:
f2:bd:4b:ee:99:fe:f0:0f:94:72:7c:01:56:c1:a3:24:36:1e:
be:b5:b1:21:49:5f:d0:a7:a5:bd:e2:3c:d6:b5:8d:2b:98:b8:
5c:ef:a8:d9:f3:c8:42:61:d3:68:7c:a1:03:15:dd:1a:30:50:
7c:a6:73:b8:f0:8a:08:92:2f:88:dc:72:32:c7:ca:65:5c:5f:
bf:e9:43:e5:85:ee:4c:63:e6:ad:bd:41:92:ff:56:6d:3a:c6:
3e:26:b7:9b:c5:27:3e:d8:9a:15:cb:a7:70:da:c1:53:dc:94:
8f:c3:3d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:13 2025 by rpki-client on console-fra.rpki-client.org