Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json)
Hash identifier: k5/6/CkKw+mmuUIvK7TTNofJVkX93kHIayxw1756lM0=
Subject key identifier: 5A:BE:C3:97:BF:B2:89:FA:80:59:41:34:85:56:F7:44:6B:2D:A1:C5
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 0194C350BA26EF26BEB9FF9B5C6DDBCF362E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
Manifest number: 82
Signing time: Sat 01 Feb 2025 21:00:35 +0000
Manifest this update: Sat 01 Feb 2025 21:00:35 +0000
Manifest next update: Sun 02 Feb 2025 21:00:35 +0000
Files and hashes: 1: oo8iJLtCvQj5tOxPs0jWtfp64Qc.roa (hash: XKlJdTZMxFrgX9Jc6CyAN7uX/wDP3zOgo6gX8cl2wYU=)
2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: uEg2V/9O2Y4WAv/aif7h/JFBUAEDirvx0d8wh62Ll/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:ba:26:ef:26:be:b9:ff:9b:5c:6d:db:cf:36:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Feb 1 21:00:35 2025 GMT
Not After : Feb 2 21:00:35 2025 GMT
Subject: CN=5abec397bfb289fa805941348556f7446b2da1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d5:69:e8:f5:fa:c5:b2:92:82:fc:08:91:a6:
f3:f7:c8:91:c5:bc:5d:67:69:15:22:4b:38:73:c7:
b6:37:66:3f:3c:60:5c:27:b3:3c:8b:8e:f9:15:f1:
1d:39:74:6e:b8:ee:6d:11:fa:9d:29:15:72:11:85:
11:73:c9:c8:05:94:e6:44:27:c9:75:0d:74:1f:a0:
c7:85:fb:9f:eb:ee:1c:10:ae:35:d4:9a:2e:34:39:
5d:5c:78:ab:9a:88:96:67:3f:3c:7a:4b:37:5b:4e:
5b:82:12:e0:78:da:92:56:cd:89:0d:c6:a8:3f:38:
21:42:79:02:03:ff:30:b7:97:32:0f:f7:02:27:4c:
07:5f:63:8b:fe:a3:eb:2f:fe:d2:0c:89:4a:e3:2c:
dc:06:01:70:a0:c7:96:be:c5:ed:67:2a:58:b6:41:
c0:e2:e7:65:60:77:31:bc:b1:99:73:b8:03:cf:68:
8d:43:68:5b:d9:e8:b5:d1:28:a2:c1:3d:1d:5f:ab:
fc:e0:dd:4d:0d:2e:fd:4c:48:5d:d8:ca:35:b7:88:
b3:95:bd:18:9f:6a:e1:e3:98:9a:ac:16:23:09:d9:
02:a5:f0:96:1f:7d:71:69:69:9d:9e:13:bc:19:e8:
59:12:d3:bb:4d:17:03:a8:4a:ba:a0:5b:d8:78:ea:
cf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BE:C3:97:BF:B2:89:FA:80:59:41:34:85:56:F7:44:6B:2D:A1:C5
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7d:4e:02:a0:29:32:2b:00:9c:70:b1:30:8c:2f:ff:fc:a3:
83:f3:61:94:e3:40:90:99:c7:3e:14:06:90:e7:b2:3c:52:fc:
04:00:da:6a:1f:1b:6e:47:f6:f3:ac:b3:66:68:5d:07:28:59:
bd:4d:b8:9d:81:72:ce:b5:9e:c8:dd:b3:ca:1d:ea:27:a9:d7:
f4:05:7f:28:3c:64:c5:44:7b:00:c1:55:a8:eb:e9:f9:fd:08:
72:a6:07:05:78:3a:3f:1b:b2:95:cf:1e:a4:19:71:8c:73:ab:
ec:ce:a2:e6:cf:a6:d7:a9:d6:10:29:28:5f:2b:2e:4b:26:50:
82:a5:e3:f9:10:c3:30:32:da:1a:27:62:c7:d5:ce:48:1a:6b:
d2:30:5f:d1:31:b4:b6:74:0b:a9:c9:74:4c:af:bc:f6:31:9e:
eb:73:32:e5:09:2a:1a:be:d4:80:42:66:38:74:f7:a8:0f:5c:
bf:d0:8e:02:d3:76:f8:81:06:54:9c:44:7e:a6:8d:99:42:94:
3d:c6:94:eb:4e:00:48:96:42:5f:e9:16:59:30:a1:a9:b2:65:
a9:e9:e7:fc:4c:2e:25:33:4d:93:02:3c:70:7e:8e:da:3d:11:
56:7b:5c:95:2b:6d:fb:cd:8e:c9:12:93:4d:22:04:66:c3:2b:
70:8c:78:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:06 2025 by rpki-client