Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier: cv0U7safcVWtQ0XsLv0r7gsDKYAsR9NOpHSTmem4WpI=
Subject key identifier: 60:79:40:A4:8B:54:D8:D3:14:8F:3C:14:3D:48:17:53:D9:5B:3A:95
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial: 0195116BCC3BDC5836B745EC64B0FCE4BB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number: 1198
Signing time: Mon 17 Feb 2025 01:00:31 +0000
Manifest this update: Mon 17 Feb 2025 01:00:31 +0000
Manifest next update: Tue 18 Feb 2025 01:00:31 +0000
Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: OVwQY3iFwXlj8pCtKJm3Gn8jUJtT8P8STWdouA43Kco=)
2: dW_FLnsv0zWikILQzBidDijXgG4.roa (hash: ma0ra8OYlImfY3CwT3NNDf0BfbTV59KzDn/miuP7r78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:cc:3b:dc:58:36:b7:45:ec:64:b0:fc:e4:bb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Validity
Not Before: Feb 17 01:00:31 2025 GMT
Not After : Feb 18 01:00:31 2025 GMT
Subject: CN=607940a48b54d8d3148f3c143d481753d95b3a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:4f:82:52:24:7b:a3:e1:96:c2:ae:20:f6:
fe:c6:b1:a2:81:1d:d6:26:2f:b6:7c:54:4e:c0:3a:
55:f8:be:21:97:1b:91:78:53:2d:75:0d:be:31:c0:
6e:1b:b0:43:82:98:24:e0:c2:3e:f6:fd:85:9e:5f:
37:b1:4b:a5:7a:2d:6e:3b:ca:31:73:82:01:f1:8e:
f6:57:bd:e1:91:09:2d:21:23:f1:ed:6b:a0:fd:f2:
b9:93:19:33:0c:15:87:0b:89:84:a9:aa:d3:d6:b3:
23:8d:51:bf:27:2f:71:68:be:e0:db:ea:cc:94:82:
24:c1:d5:8a:fb:ae:cd:4f:c6:5a:56:28:b1:58:5c:
b4:09:30:4d:ba:ef:c8:42:9b:46:d5:35:0a:f7:9d:
f7:3a:25:39:e2:df:bf:b8:b2:56:db:f5:58:2a:d4:
88:50:5e:1d:4d:09:51:48:e3:ab:f9:6e:43:0e:dc:
bc:48:7a:29:b1:3a:53:3c:bb:30:b6:c1:31:7c:af:
25:95:ef:9d:ac:ab:a4:25:85:e4:1a:3a:d0:88:53:
53:c0:17:c9:19:e6:5e:a5:ea:fb:20:49:9d:e1:bd:
8e:d8:68:c7:66:70:e6:76:3d:60:77:a4:62:28:c9:
62:41:de:1d:37:49:14:14:3d:4c:ed:57:ee:79:9c:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:79:40:A4:8B:54:D8:D3:14:8F:3C:14:3D:48:17:53:D9:5B:3A:95
X509v3 Authority Key Identifier:
keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:64:e9:c1:35:6d:6d:6f:3e:2c:00:e0:34:69:22:bc:e2:c1:
04:2c:11:1e:cd:95:4f:54:fc:4f:d5:72:9b:fd:ff:eb:64:02:
60:a2:2c:bd:5d:16:24:85:a5:a7:4e:8b:fa:5c:a0:2f:50:92:
3f:70:40:b1:ac:8c:1d:fd:4b:00:5b:73:94:9b:6a:65:d9:79:
2a:81:c7:b6:bb:90:7b:9b:33:57:92:79:07:16:82:2e:48:8f:
4c:f4:43:80:15:64:f1:86:ab:3e:2d:3d:59:a3:3b:65:b1:ca:
22:eb:7c:cb:51:a4:ad:6c:67:80:ff:f5:c4:c3:0c:99:ec:35:
b1:74:30:47:ca:db:ea:6c:62:cf:95:98:6b:e1:c4:f0:32:1b:
05:97:ee:bb:01:7e:24:82:26:e0:55:73:a4:86:bb:fd:b8:45:
95:4d:b1:00:cd:e1:b5:51:cf:fc:95:ab:ea:eb:5a:55:5e:e5:
37:cb:d5:11:8c:4f:f7:72:50:ae:87:65:df:72:7d:65:09:c7:
ce:34:f1:3c:b7:8c:20:55:99:37:3d:5d:a9:0f:17:14:95:49:
73:5a:b2:26:e0:78:0f:d8:37:40:4c:32:ad:bc:60:0b:6f:f4:
19:23:67:7b:ee:30:e0:90:ce:3c:09:5c:e3:13:24:53:9e:a4:
2e:83:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:06 2025 by rpki-client