Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
File: L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json)
Hash identifier: 4nQ7dCHWKjP2u5RjwRKWlPcVeq+FSpWILDHXCLgZmiI=
Subject key identifier: BA:7C:0D:F1:8A:5A:8F:B3:FD:34:B3:43:4C:59:E3:82:C4:D9:B1:64
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Certificate issuer: /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial: 0194C38772C51F457BB418546B0E230F7761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
Manifest number: 142F
Signing time: Sat 01 Feb 2025 22:00:21 +0000
Manifest this update: Sat 01 Feb 2025 22:00:21 +0000
Manifest next update: Sun 02 Feb 2025 22:00:21 +0000
Files and hashes: 1: Ii6Eihe3uHllmAF3w-e0EbIsuEY.roa (hash: AaLyOgaPOF0EjSeS5+fNuZIHrJ04ogADIw6xzspYUTk=)
2: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: pU5+LEydL86L1GvoaouxHIJfRQkIeRvm51y4zgRYIkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:72:c5:1f:45:7b:b4:18:54:6b:0e:23:0f:77:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Validity
Not Before: Feb 1 22:00:21 2025 GMT
Not After : Feb 2 22:00:21 2025 GMT
Subject: CN=ba7c0df18a5a8fb3fd34b3434c59e382c4d9b164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:c9:9b:ef:36:c6:6b:64:48:83:bc:64:68:
8e:34:90:8c:1d:d3:90:57:c7:20:b6:1c:88:0a:8b:
52:f1:6e:3a:44:6e:a2:18:d5:75:c0:97:b1:ca:6e:
f9:01:b7:03:8c:89:d5:0d:07:17:52:98:04:0c:a4:
60:79:c9:e9:2c:c8:d6:2f:d0:f1:49:d6:83:0c:50:
ef:60:99:f5:22:9a:0a:41:e9:26:6f:f2:00:b3:ff:
ea:3a:80:23:7a:6b:da:2e:6f:e0:84:c6:1f:b9:2a:
55:ea:44:87:c2:2d:51:12:77:58:97:f0:d3:a9:29:
ef:5d:c7:77:55:3b:c1:c0:55:f4:8d:5f:5a:5c:b1:
cc:6c:09:8a:25:d6:74:7d:07:f0:74:a9:c2:86:a8:
ef:5d:6f:39:7d:40:32:af:2d:4f:13:c2:26:27:fb:
54:f1:fe:83:08:0a:73:d9:94:71:dc:5c:31:11:7b:
e2:96:ca:a6:03:f4:49:80:ea:4a:d3:10:95:6e:bb:
67:cd:2d:81:cd:4f:14:16:45:b2:c2:04:ab:e9:3b:
8e:a0:4d:cb:e3:bc:f4:2a:da:c4:ad:e5:2a:cb:03:
45:1a:eb:5b:82:81:fc:82:22:91:ec:88:1d:0f:f8:
71:f4:86:16:07:29:90:29:29:b9:fb:4b:0a:28:3f:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:0D:F1:8A:5A:8F:B3:FD:34:B3:43:4C:59:E3:82:C4:D9:B1:64
X509v3 Authority Key Identifier:
keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b9:07:a0:00:f7:cf:14:e8:d5:c0:84:32:ff:0c:37:e9:6d:
95:8c:ab:7a:ba:f1:84:7b:8a:28:4e:e7:67:3c:7a:a6:80:f3:
98:af:b5:f5:b8:27:eb:94:d5:24:e7:ab:f8:95:2e:b0:88:44:
d0:b1:f5:91:e8:85:70:b9:1a:61:2d:a3:bc:dd:5e:e0:9d:7f:
52:de:dd:ef:30:60:2b:ab:61:9a:6d:5a:7d:4d:0e:38:ba:52:
d7:78:1a:10:f7:e1:21:4a:aa:5d:c1:f1:30:ce:ec:e0:a8:3f:
aa:21:be:81:58:33:90:74:83:99:02:88:cc:df:56:80:4a:58:
18:ed:41:22:07:67:fc:aa:d4:03:fc:63:6c:99:a6:b1:84:41:
46:71:9d:84:a2:ef:14:6b:06:9b:29:db:a1:1f:e2:d3:65:7c:
44:ae:14:b3:2e:4b:b9:df:18:98:59:43:9c:3b:40:a1:50:bc:
4f:91:be:80:f5:f2:91:87:30:cb:9c:7a:79:47:2d:8b:5b:28:
e4:be:45:7c:39:4c:0c:d2:44:7c:e6:7e:c4:60:e8:be:e2:e6:
b0:5e:6a:9a:32:97:09:cc:49:ed:39:52:9e:d1:b7:f4:78:a2:
8c:ab:36:9f:27:c3:9b:89:b2:26:aa:95:73:db:86:28:8f:59:
2f:0f:d3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:35 2025 by rpki-client