Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
File: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json)
Hash identifier: 0JQqnzVl+JX5g+DZSZ39mG6dUkANyZZw8n6Sii8PmUY=
Subject key identifier: 2B:77:3F:39:52:CA:05:F0:CE:FC:CD:68:A5:0C:73:48:04:58:21:13
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Certificate issuer: /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial: 0194C42C207F29EB42F669E041D87DDF38F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
Manifest number: 82
Signing time: Sun 02 Feb 2025 01:00:13 +0000
Manifest this update: Sun 02 Feb 2025 01:00:13 +0000
Manifest next update: Mon 03 Feb 2025 01:00:13 +0000
Files and hashes: 1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: eRtDr3ymS6znVhQzofcU8peHXfqvRfUO/1ipw2rSNbA=)
2: 7MLQXQoB7nGQ9BAPNdo9KSMuY8Q.roa (hash: qybqPEfeMgg3CNavO5wY4/V9s/QfeIPfINjmuYmoUy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:20:7f:29:eb:42:f6:69:e0:41:d8:7d:df:38:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Validity
Not Before: Feb 2 01:00:13 2025 GMT
Not After : Feb 3 01:00:13 2025 GMT
Subject: CN=2b773f3952ca05f0cefccd68a50c734804582113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:0b:88:dd:44:05:57:9d:6b:2f:be:75:ec:
68:0e:30:46:13:36:96:6a:e9:ec:bd:eb:40:33:71:
80:f9:14:79:45:c3:02:1a:f6:e7:3a:7c:fe:1e:e1:
d9:f5:e5:fd:82:c2:e6:86:64:5a:59:71:f3:d1:13:
57:cb:b3:fc:dc:51:30:3c:a9:7e:db:76:98:54:69:
fe:09:aa:37:08:c4:d0:42:52:c9:a9:9b:d6:89:59:
f0:3d:89:53:02:49:31:ff:c7:da:5f:64:c8:9a:6c:
0b:29:54:b9:b8:07:02:86:f2:1e:1f:3c:b5:44:67:
b7:2e:e7:2e:ae:3f:34:79:fe:da:b5:31:17:b3:a8:
18:32:2a:50:93:c3:48:cb:b0:04:a9:1c:ac:97:44:
2b:5d:61:d5:b8:0b:22:54:c9:f6:2c:48:80:11:ea:
72:4f:5f:c2:7c:ad:21:4b:f0:17:0f:8e:51:1a:07:
e5:e9:0f:6a:de:44:fa:a7:17:1f:ed:c3:9b:39:d1:
f0:41:f5:2c:be:d2:d3:46:8b:70:ad:cd:32:c6:18:
35:d8:0e:fd:5c:2e:84:a6:eb:0d:3f:86:bc:13:6d:
83:4a:6f:c1:40:10:9a:63:11:09:a1:fa:9d:d8:2d:
6d:7f:b5:94:a9:22:b7:18:c3:60:ac:94:28:2d:fe:
72:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:77:3F:39:52:CA:05:F0:CE:FC:CD:68:A5:0C:73:48:04:58:21:13
X509v3 Authority Key Identifier:
keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:df:00:15:f0:6b:0a:63:b3:c2:97:fd:af:21:ae:54:5b:b2:
45:dc:70:e8:08:64:87:04:37:28:48:f1:da:66:f7:e9:8b:7c:
10:5a:4d:3b:7c:cc:dc:8a:a6:84:31:90:db:f4:3c:d2:50:b3:
4b:32:91:10:db:c5:97:cd:12:90:7a:92:30:20:36:89:a1:57:
b0:14:c8:ae:1e:b8:8c:d0:5c:54:6a:30:60:d8:cc:77:61:db:
1a:22:0e:a2:26:56:73:37:b0:85:62:bb:4d:c7:3a:68:ec:3e:
1f:68:7b:84:63:c5:63:5f:bb:c3:52:fb:4b:32:f4:d3:7d:b3:
49:a8:19:b9:d3:08:f3:88:d5:13:f9:c5:d8:73:cb:e5:27:55:
0a:0d:cd:73:f0:25:f5:86:26:17:ba:96:03:6d:98:ec:80:d9:
f5:31:3a:db:32:38:ef:8b:8a:95:a1:ab:70:9f:09:67:74:19:
86:88:5e:c8:58:35:15:6a:a7:57:f5:f2:de:9d:db:4d:08:2f:
4f:05:f3:b9:4e:d2:ca:a7:be:49:f5:60:ff:a0:94:e9:4c:30:
59:c1:ca:08:f9:00:19:de:2f:d6:3a:14:aa:a1:2f:87:2e:16:
42:d0:31:0e:90:9d:3b:f6:59:7a:08:38:fb:ba:c5:4e:d0:cc:
e1:86:db:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:04 2025 by rpki-client