Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: 3IrgRcN67jT/ityXFZ2COPizK3s1dq+zq4VmT3pOo28=
Subject key identifier: 79:A3:2F:0A:68:32:7D:12:69:07:DF:B8:FE:9E:60:20:87:67:CE:1C
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 019510C746C13A69FC6991DE5F03234EA394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 1192
Signing time: Sun 16 Feb 2025 22:00:49 +0000
Manifest this update: Sun 16 Feb 2025 22:00:49 +0000
Manifest next update: Mon 17 Feb 2025 22:00:49 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: ABxn8rfLxfXzmUFaXvfuZMlHSUgKLTJIr71NWn/miLI=)
2: iUMe2JOAJNlxZXEaHwJwVAIN3WA.roa (hash: ZvIlGSaMCDAbt70045McSuBEc2GtkECp8D75xEWNHU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:46:c1:3a:69:fc:69:91:de:5f:03:23:4e:a3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Feb 16 22:00:49 2025 GMT
Not After : Feb 17 22:00:49 2025 GMT
Subject: CN=79a32f0a68327d126907dfb8fe9e60208767ce1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:1c:30:03:39:ee:b3:ea:10:19:36:4c:24:
2f:0e:82:8e:f1:fc:eb:dc:03:c1:89:ec:aa:31:9a:
ec:af:72:31:2c:b9:54:4a:31:c6:6f:77:bb:83:d1:
54:96:35:57:c2:fb:2e:74:58:42:2d:91:f2:e0:82:
a1:fc:6d:cf:00:6e:7b:fe:3f:ac:3e:b5:54:33:ea:
71:59:22:7b:38:fd:f2:69:21:ba:7b:ec:af:59:98:
68:00:09:8b:59:8f:7b:0f:fe:52:3b:5c:4d:51:ca:
8e:2d:e1:77:1b:5e:e6:d0:37:ee:f6:54:5a:27:c9:
9d:3a:fe:4b:67:c9:b2:11:b5:21:c4:0c:bc:59:1b:
56:11:df:e7:19:cb:35:54:03:eb:20:c0:7f:90:b0:
f1:35:b9:2e:30:26:ec:53:b9:bf:67:58:46:33:f1:
1a:79:2c:8d:9d:51:a6:ea:39:48:1f:ad:ff:f9:1e:
c8:68:ef:81:5f:c4:92:ad:af:bc:3b:32:19:a1:1d:
af:63:be:7f:e6:01:f5:ac:09:1e:9c:f5:03:bf:17:
93:19:2e:d8:54:70:63:68:1e:db:72:f8:45:b0:25:
eb:e8:11:c7:10:71:8b:37:6f:82:a4:fe:a8:f1:a8:
c6:85:1a:38:40:bf:c3:8d:b2:09:4a:24:5f:52:f1:
4c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A3:2F:0A:68:32:7D:12:69:07:DF:B8:FE:9E:60:20:87:67:CE:1C
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4f:0a:25:e6:70:b1:e6:6b:e8:34:c4:97:c7:38:43:84:08:
38:b8:5f:38:07:b9:20:d7:f9:68:20:e8:8d:04:21:fe:a3:fb:
78:fb:c2:d0:77:d6:66:62:a9:43:a8:f8:d0:2c:5c:50:df:b7:
6a:eb:bb:b3:5f:48:e5:91:9a:be:6a:02:10:9a:9d:70:0c:c7:
ee:73:9d:42:1b:98:70:00:f2:de:4a:3e:63:42:33:53:72:e5:
88:b6:cb:44:a0:1e:e7:00:36:e7:19:d7:c1:d5:cc:14:b0:c6:
fb:ca:25:4b:de:df:67:0d:c3:13:4b:35:12:a6:8b:a6:4e:fe:
c1:07:ed:3f:57:81:90:dc:fe:8d:fb:dd:00:53:64:39:be:34:
bf:43:b0:1b:2a:02:71:05:3b:dd:4d:84:0e:f6:71:ac:df:b7:
2a:57:cc:08:1f:2e:7d:d5:d7:e2:67:af:da:5d:66:06:5d:d0:
77:1a:95:43:48:94:2b:bf:59:00:c8:9f:3b:30:1f:c1:ec:a6:
35:14:a3:1c:83:29:60:b5:38:6d:d3:c1:8b:f9:30:1b:05:ad:
ad:b5:0a:c1:87:f5:22:ae:65:b3:e1:52:8d:f1:db:1a:89:6e:
ea:4d:7b:e1:58:a7:c3:3d:bc:28:25:16:90:c9:d2:9d:fe:e2:
61:9b:3b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:38 2025 by rpki-client