Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
File: 01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json)
Hash identifier: j10Ux+/KTPwDN/SqN+nNhiL+zv/2TbYkJJNVYi8nJl4=
Subject key identifier: E3:8A:32:66:F5:ED:F9:86:C9:81:C3:3D:FC:FE:1C:80:81:9A:A6:D3
Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9
Certificate serial: 0194C38878743D7C933AE48B15163C71DD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
Manifest number: 4D
Signing time: Sat 01 Feb 2025 22:01:28 +0000
Manifest this update: Sat 01 Feb 2025 22:01:28 +0000
Manifest next update: Sun 02 Feb 2025 22:01:28 +0000
Files and hashes: 1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: HMhYxUXtHXVjzwRHVSBD9LUKooVj7GR/l5ZLQosl91Q=)
2: M7R2UHHJlETHSR8o10ZhPmjnSrQ.roa (hash: 48LCEV6BiMysqNLuoMNmOC2etuBDhXK4TMcdmnpSDVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:78:74:3d:7c:93:3a:e4:8b:15:16:3c:71:dd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9
Validity
Not Before: Feb 1 22:01:28 2025 GMT
Not After : Feb 2 22:01:28 2025 GMT
Subject: CN=e38a3266f5edf986c981c33dfcfe1c80819aa6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:0c:48:68:73:df:f0:ee:89:33:1c:f0:34:
2d:55:12:7c:92:68:a9:bf:9c:c2:cb:82:ed:0e:16:
7b:57:f6:ef:ee:16:05:01:94:03:81:dc:a3:7e:d7:
ee:95:7a:2c:4e:af:5b:d8:ad:24:2d:db:b4:b9:f7:
2d:38:68:9f:ab:dc:f8:89:f7:27:04:50:1d:18:aa:
f4:52:e3:7b:1e:97:39:85:33:db:39:91:ac:41:07:
18:2a:a0:bc:0a:19:72:21:98:3b:56:3c:c8:3a:78:
23:2e:6e:30:13:89:2f:f8:5d:b5:7f:c4:0e:de:94:
a5:49:bc:f3:d9:66:0e:2c:6c:f5:65:2d:54:0d:ec:
c6:94:6f:3d:25:66:30:a2:f5:c2:8e:99:cc:0d:ab:
9d:e5:a8:7e:11:38:9a:d7:18:c1:4c:a9:d3:cd:df:
15:cb:81:53:f3:7f:2c:99:63:65:bf:5a:20:2b:bc:
28:4b:f4:b2:f4:71:b6:0b:87:5e:8b:98:1e:4c:5f:
97:35:0f:2e:cf:33:c1:6e:f7:bd:5f:9d:62:69:98:
e9:e8:06:32:88:bd:06:eb:47:d4:35:7d:d5:de:21:
a1:7b:ce:7b:0a:04:8d:89:87:b8:08:10:84:aa:69:
2c:06:3a:6f:03:c4:78:21:e6:20:7f:ff:2b:10:35:
06:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8A:32:66:F5:ED:F9:86:C9:81:C3:3D:FC:FE:1C:80:81:9A:A6:D3
X509v3 Authority Key Identifier:
keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f7:5a:16:b0:21:7c:e9:0c:64:d8:de:cc:1b:51:34:b4:9c:
ef:a1:48:f1:06:30:ff:78:cc:6d:f8:f9:17:53:58:30:0f:32:
00:a3:6b:ce:a0:ee:22:05:2d:97:d3:b5:55:d2:f9:7e:73:a0:
62:e0:4f:84:64:67:88:98:fc:a5:09:52:21:1c:f0:85:cf:19:
5c:50:6e:97:fe:7b:31:24:d3:46:c6:b3:c5:3a:4e:e3:e6:29:
8d:8d:ba:88:d7:8e:7a:e4:b0:89:a0:92:ce:b6:1b:dd:c9:64:
23:7f:3d:eb:e9:4c:0f:d8:11:32:d7:b8:87:cd:32:cd:4b:5a:
08:b2:0d:16:36:79:04:72:45:4c:2a:db:75:57:90:fc:a1:3e:
12:8e:af:ea:f8:60:ae:81:24:3f:04:5a:2c:a4:54:a1:dd:ca:
32:3a:02:60:50:d9:bc:6f:12:15:fc:d9:4d:aa:5f:41:6e:3b:
83:48:08:87:13:63:10:6c:ec:b6:18:33:76:11:56:ce:00:84:
e3:99:f5:16:2d:1f:e0:79:ec:01:2b:fb:95:2d:1d:06:00:80:
f5:e1:1e:ab:44:02:e8:68:3b:57:1e:ed:93:30:70:ac:2e:df:
7d:1c:1b:09:d1:b9:82:cc:f9:72:94:06:9f:90:0e:f4:0c:c3:
fe:51:62:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:12 2025 by rpki-client