Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
File: u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json)
Hash identifier: xlw73n/7KLaBr93xod1NuhNnUzZarmIcFNDG4acQgOw=
Subject key identifier: 11:18:9E:C5:FE:0E:8C:1C:AD:E9:88:0F:F5:70:DB:CC:63:02:0B:24
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Certificate issuer: /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial: 0194C49A52F68967D0F8F9559FF706EE0337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
Manifest number: 0E28
Signing time: Sun 02 Feb 2025 03:00:35 +0000
Manifest this update: Sun 02 Feb 2025 03:00:35 +0000
Manifest next update: Mon 03 Feb 2025 03:00:35 +0000
Files and hashes: 1: sZvwZMkTNt-iUTiQmQ2RW61JCrY.roa (hash: ILtUTNlj+OmXDu1giFXN+JTJafdCM0FAh4hCT6vGfZc=)
2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: mFj2c2SkojkA6FT6VmGOp506tvDXyoh3iiQFzgeYbPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:52:f6:89:67:d0:f8:f9:55:9f:f7:06:ee:03:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Validity
Not Before: Feb 2 03:00:35 2025 GMT
Not After : Feb 3 03:00:35 2025 GMT
Subject: CN=11189ec5fe0e8c1cade9880ff570dbcc63020b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:b8:6a:87:6c:14:25:ab:6d:ab:c3:f4:01:
06:a7:c1:bc:ad:dd:6b:4f:f3:a5:21:d0:c2:fa:20:
cb:a2:44:53:2b:2d:86:05:32:ef:7e:06:9e:8c:3e:
de:ce:24:78:c7:ee:ba:ae:1c:f0:0e:d0:67:a4:a8:
dd:7b:01:29:c4:87:d4:1c:40:b3:09:9c:a3:11:7e:
2e:d1:09:e4:13:97:8a:eb:80:68:b9:59:3e:f8:85:
05:da:2c:1f:bd:61:8f:44:b4:94:5a:52:48:a2:41:
bc:20:95:55:51:b1:69:ad:51:d4:9d:c3:05:cc:4e:
84:3c:3a:cc:e9:e9:43:34:1d:19:cc:e0:64:8d:e7:
f7:e3:1f:0f:ab:a3:8a:b7:3f:db:87:06:e4:a3:52:
e9:c6:5b:7c:3e:2a:b3:0f:11:77:ce:87:56:1e:78:
b0:82:31:e2:11:51:e6:7b:4b:38:2e:72:82:90:33:
11:16:5a:1b:28:e0:ba:ad:5e:5b:34:da:80:a9:d8:
5f:e4:b5:d5:92:8c:98:49:06:fb:48:8c:cb:f4:48:
e6:e2:8b:c2:a7:c9:55:c9:4b:8f:a1:25:13:5d:49:
9c:f9:4e:e3:bd:70:fa:06:29:16:5a:94:6c:0d:bf:
df:52:4a:43:89:6c:81:c2:95:a2:7d:89:24:44:b7:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:18:9E:C5:FE:0E:8C:1C:AD:E9:88:0F:F5:70:DB:CC:63:02:0B:24
X509v3 Authority Key Identifier:
keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0f:31:69:c7:b4:ea:8d:15:e4:db:9b:9a:fb:be:99:5c:e4:
86:5a:52:c0:c9:36:9e:28:51:2a:a9:35:de:5e:c1:dc:e5:29:
7e:c5:9f:1b:94:4c:6e:c4:6d:a0:22:5b:de:13:83:66:23:3b:
4e:de:d3:23:a8:9c:da:e7:6c:2f:9c:4f:45:a9:ce:f9:67:60:
46:3b:12:52:53:e6:15:10:c5:93:12:26:45:0c:02:87:41:f4:
81:35:28:ae:a7:6b:f4:f2:77:94:75:e8:54:b1:39:04:aa:54:
dc:19:af:25:53:3d:ea:28:ad:48:5d:e3:13:14:4a:bc:c8:0d:
39:02:df:f1:02:ca:d9:da:99:e6:a3:3a:75:a6:4c:25:c9:92:
8a:80:11:69:03:3e:1b:9e:9e:50:fb:95:de:95:43:07:2f:7c:
5b:07:e1:24:b9:19:8e:84:7e:75:13:f6:e8:f2:6d:1e:ac:e4:
67:d1:6a:a6:09:78:46:2a:61:b4:41:69:4a:8e:9d:ac:8e:02:
b5:39:45:f4:4a:99:49:16:05:7d:38:f1:55:2a:8b:a5:35:ca:
b2:58:4f:36:97:bb:e3:a1:69:cc:89:24:e7:dc:4b:e7:4c:0b:
fe:bd:0b:0a:bb:73:d9:ca:c0:79:27:9e:ef:5f:dd:b7:b7:39:
d3:ab:e1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:43:15 2025 by rpki-client