Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
File: cLteVPJ0jstdhpjTeTOcwV8yuJM.mft (raw, json)
Hash identifier: S6zPIXJW5hbxO0XrTC/NrMBjV/JqMhgY2eMRUiqOXto=
Subject key identifier: A4:28:D2:96:BA:D6:FC:B4:2C:25:87:89:17:0B:6A:DD:12:01:20:D6
Authority key identifier: 70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
Certificate issuer: /CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Certificate serial: 0194C350A06E5180B114B50DC9356B99802B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
Manifest number: 1031
Signing time: Sat 01 Feb 2025 21:00:28 +0000
Manifest this update: Sat 01 Feb 2025 21:00:28 +0000
Manifest next update: Sun 02 Feb 2025 21:00:28 +0000
Files and hashes: 1: VABLE3iBHalb6Jl_c3u-oyHeiS8.roa (hash: s1CBILyJSh7gNgL+QAYvHKZM5KaEqmZAwVEcKOw0A0E=)
2: cLteVPJ0jstdhpjTeTOcwV8yuJM.crl (hash: PrSdBYZgNsFAzL2BSJ26b5y1N3T8f3Y8NYRhYaJMGjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:a0:6e:51:80:b1:14:b5:0d:c9:35:6b:99:80:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Validity
Not Before: Feb 1 21:00:28 2025 GMT
Not After : Feb 2 21:00:28 2025 GMT
Subject: CN=a428d296bad6fcb42c258789170b6add120120d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:66:5e:b2:9f:a9:d4:ff:1c:65:4b:2c:06:
c6:d9:e7:e5:7f:77:09:2d:95:dc:ab:ea:1a:55:f0:
b3:64:bc:e0:61:21:6d:76:4d:ad:78:d1:a1:65:61:
05:35:ca:e5:c3:1a:ef:97:af:af:01:69:65:d9:87:
6c:5a:40:f7:f3:e8:d2:7e:69:a7:26:69:4b:ec:44:
19:f1:26:4a:af:5a:25:1e:d2:45:ee:92:9b:71:bc:
d4:a9:87:e4:da:7e:1e:38:d6:65:ac:d1:70:5c:aa:
e9:ed:48:96:de:72:45:07:c9:76:a7:cd:51:fc:41:
fa:94:d3:3d:a0:0e:d1:49:79:34:a8:2d:69:04:60:
78:2d:1a:f3:ed:4c:16:c1:63:11:1a:c3:ca:b0:d3:
6f:0c:a0:b9:fe:5c:9e:09:36:bd:5d:1a:4b:b1:f6:
1c:53:a1:d3:49:95:2e:e3:fa:59:6e:3a:fc:5a:7d:
e0:5d:b4:d5:57:90:b8:d4:6b:b4:d6:aa:f1:dc:3f:
13:9e:db:d7:0e:52:f3:0b:cf:69:b0:ff:c3:bc:a9:
72:d6:4b:c5:45:96:0d:fb:c3:ff:8c:b8:51:f8:93:
4a:b4:26:ce:25:39:a3:f4:a2:06:e8:ba:90:83:d6:
e3:3a:a9:5f:f2:61:c6:be:37:1b:f5:cb:8a:bf:d1:
ed:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:28:D2:96:BA:D6:FC:B4:2C:25:87:89:17:0B:6A:DD:12:01:20:D6
X509v3 Authority Key Identifier:
keyid:70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:33:66:f9:dc:80:0a:c0:0b:80:2a:a5:b8:bc:06:18:0b:31:
00:f3:80:b1:a4:be:b8:66:23:49:44:c3:e4:0a:57:d9:14:a7:
a2:20:1e:4a:62:d6:32:cb:c7:4d:18:80:fc:4b:c3:c2:54:66:
c7:95:c3:ef:51:fd:2c:31:36:78:1e:81:58:9a:4f:cd:d2:35:
02:1c:2c:20:af:84:28:61:c4:da:a8:06:1a:a7:43:0b:01:94:
53:f5:6c:18:50:5d:0e:17:74:e2:18:6c:01:5d:bd:23:fe:99:
42:40:a2:b1:74:01:b4:34:6d:f4:a8:b0:70:25:31:b0:aa:fa:
bb:07:dc:b5:cc:35:8a:de:df:6a:22:55:5f:05:03:41:87:8c:
57:99:bb:6d:63:60:46:67:0e:d8:11:ad:af:50:bb:ea:42:7b:
1d:c9:3b:ea:94:57:ae:36:18:82:5a:fd:7d:b5:7b:e2:f2:bd:
f2:88:b1:ba:5d:13:42:d5:26:aa:2b:1d:40:a5:34:27:05:96:
6f:5a:65:81:b9:e5:aa:03:38:f2:61:62:f0:54:c9:a8:f5:db:
92:e2:f3:33:2e:e4:5d:77:56:b0:88:f8:04:e4:e4:71:50:30:
89:1f:5c:22:6f:cf:47:31:9e:7a:70:9f:57:32:2d:3a:1f:08:
32:e6:54:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:30 2025 by rpki-client