Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier: FI65YrSTFPFQF9TLR3au5xcPUsSq+/Vhazcb1ngn9Hc=
Subject key identifier: FB:05:14:8B:DC:73:DF:3C:12:1F:6C:A6:13:06:13:AB:A5:BB:AC:2F
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 019511A2E0BBBF4A29F9767225AFCE5EF4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number: 0D5B
Signing time: Mon 17 Feb 2025 02:00:41 +0000
Manifest this update: Mon 17 Feb 2025 02:00:41 +0000
Manifest next update: Tue 18 Feb 2025 02:00:41 +0000
Files and hashes: 1: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: y7bJvMu0bIyjKAV8LdgLz3ZgM3TwqUHvZymQLhpuA5I=)
2: C6Si8_4OvkA_L0SzhzDXIdZD70Q.roa (hash: MXDhlA4OqmmtXJ3YGQ8YOTAMBcB/6855qXcMYCrv39s=)
3: VehV-DaGpdPd27h7BeCPuf7XgGU.roa (hash: sAalVTrnmg6yf8SFv/nnSyHMnXSPLWE6BdkaiXIz7ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:e0:bb:bf:4a:29:f9:76:72:25:af:ce:5e:f4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: Feb 17 02:00:41 2025 GMT
Not After : Feb 18 02:00:41 2025 GMT
Subject: CN=fb05148bdc73df3c121f6ca6130613aba5bbac2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:1f:33:c9:c5:b7:f5:4c:04:ff:1f:41:8c:
ac:b8:57:3d:b0:87:1b:26:5b:5c:9c:bb:32:ca:b4:
53:9f:ad:8f:bc:22:ed:1c:65:26:e1:97:cd:83:83:
c6:5c:6d:0f:86:62:7a:65:61:25:f3:c8:cd:39:6b:
67:f9:de:9e:af:8e:0b:78:02:b4:48:e6:e4:64:14:
98:66:6e:ae:43:6a:4f:91:80:df:27:4f:21:b9:23:
be:da:82:a3:3e:2b:0d:98:ce:c0:a9:40:21:a4:ed:
8d:30:a7:1a:ab:17:5f:7f:c0:fc:7c:72:4b:6c:6a:
9d:4e:f7:82:45:59:17:a7:4f:d1:0a:f0:19:39:87:
fa:30:4f:4a:61:75:8b:da:da:74:57:73:bd:49:07:
af:6d:bc:5e:cd:5a:8a:b9:b6:b8:8a:63:44:51:b4:
79:93:e2:db:ec:40:15:85:22:71:c6:13:cc:ca:04:
c9:1f:34:3f:a0:ec:cf:9d:4a:a3:e9:80:63:a9:93:
d1:12:82:50:22:6f:d9:c2:2a:ff:f8:2a:a9:92:a7:
11:34:de:1f:5e:d7:b8:b4:2e:ee:e0:71:3f:04:e3:
1e:b9:fe:9e:8b:5c:1a:76:76:25:0b:91:6f:83:1c:
46:cc:5a:b3:b0:05:d6:b5:b5:79:88:9b:39:b7:36:
c0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:05:14:8B:DC:73:DF:3C:12:1F:6C:A6:13:06:13:AB:A5:BB:AC:2F
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:35:9b:c2:b9:b5:76:d4:e3:89:56:a4:10:de:1e:45:a8:57:
de:27:f7:66:c9:4e:3b:15:11:b1:67:89:ec:31:bc:c0:bf:19:
e3:6b:07:f4:69:96:b9:56:e3:ff:17:ee:4b:e7:9b:19:ba:9d:
d4:04:2a:e3:61:4c:a6:a7:04:f8:93:ce:e7:24:06:72:da:47:
de:38:cf:80:16:df:7c:0b:95:f8:54:f3:98:a7:2c:d9:06:27:
2f:26:03:96:93:a4:e9:eb:29:b4:6f:61:75:1b:ce:09:87:f6:
07:b7:b8:8d:98:ed:85:f3:fb:5a:28:65:7e:94:3b:a5:a1:ac:
65:63:91:9c:ab:31:ae:29:12:e0:99:53:70:6b:2c:47:8e:05:
2a:3e:9d:13:f8:a4:b6:c8:bb:13:41:39:67:33:d2:d2:31:41:
9f:ac:4d:19:ac:ef:0b:ed:48:9d:b4:b9:e1:d9:e4:e6:59:1d:
35:36:c4:4e:65:87:ae:7e:9d:4c:19:3c:1f:8d:aa:ac:45:d4:
ae:39:8e:e1:29:8c:8e:49:61:91:5b:60:7f:e1:ed:15:ab:84:
0c:9e:fd:8a:55:ea:6e:77:c0:4c:d3:23:fd:36:4a:64:2a:a2:
5e:03:4f:f4:18:90:df:14:33:13:6f:5d:6b:c9:2d:e0:dc:f2:
6d:26:06:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:31 2025 by rpki-client