Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
File: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft (raw, json)
Hash identifier: BnA1RKvi7OtVPvLuKZL1SQtRW1gVOjkP/C2WwJ80eoQ=
Subject key identifier: 68:D0:2D:33:61:C4:A1:75:80:5F:36:07:80:AE:0A:7E:80:B9:57:51
Authority key identifier: 33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
Certificate issuer: /CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Certificate serial: 0194C4D159E9E4D4D81CBEE8CA23F0280C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
Manifest number: 1431
Signing time: Sun 02 Feb 2025 04:00:41 +0000
Manifest this update: Sun 02 Feb 2025 04:00:41 +0000
Manifest next update: Mon 03 Feb 2025 04:00:41 +0000
Files and hashes: 1: F3E0kox0yNLNp6GPi3ZmqfgQKTs.roa (hash: UneyfmP6aoU2v1WkHtcA23llsK6rkwb/p+IXrda/FUg=)
2: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl (hash: E7ytZS1dFhcDwHRBNoapDdqzxZGnBjrIGVdHYlDaZd8=)
3: jukzQpP3Hs9hT3M_u2swPOcw5vQ.roa (hash: /+E7Xpgo8ugKY85NqX64gyU8Uakmwa+zSPYJruYsfmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:59:e9:e4:d4:d8:1c:be:e8:ca:23:f0:28:0c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339cbb1e439a3a71eb8796692f622bf838f8488c
Validity
Not Before: Feb 2 04:00:41 2025 GMT
Not After : Feb 3 04:00:41 2025 GMT
Subject: CN=68d02d3361c4a175805f360780ae0a7e80b95751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:4a:95:16:60:35:df:00:55:40:56:7c:33:72:
56:d5:4d:4c:6f:38:a6:26:47:71:39:5b:25:19:68:
d1:4c:e0:49:3e:b6:a2:87:86:b4:ef:50:2a:88:bd:
e0:af:91:9c:40:cb:e6:b1:5e:5e:47:e7:b4:08:eb:
4d:81:9d:d3:13:09:a6:9e:cd:00:1e:89:db:83:be:
2d:6f:54:c8:0a:67:9e:ea:7f:0a:18:55:2d:98:8c:
51:d8:e0:33:38:23:27:bf:a0:02:5d:2f:61:db:4d:
4b:77:96:fd:84:82:0a:ce:a9:40:f2:f2:e0:81:58:
e4:8b:cd:fc:6c:10:65:ed:86:39:94:09:ef:37:98:
5f:b9:f5:ee:50:88:7d:63:07:90:45:13:57:14:07:
19:3e:b3:da:b0:50:0e:3a:7d:cf:da:5f:d2:33:85:
6e:27:98:c2:e0:41:b8:4b:30:f4:06:14:9e:88:93:
03:a0:83:49:6c:84:ae:76:4d:63:d3:3a:a3:e0:3c:
bd:7c:48:ba:f9:5f:a9:2c:1f:2a:64:bc:8b:ca:0b:
45:56:f9:73:54:bd:be:26:22:91:e1:be:f9:d0:ce:
d5:22:18:49:09:e5:47:29:9e:d8:da:aa:4a:50:4f:
a9:9e:c8:bb:fa:b6:9d:c1:57:48:74:0c:77:0c:ad:
a9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D0:2D:33:61:C4:A1:75:80:5F:36:07:80:AE:0A:7E:80:B9:57:51
X509v3 Authority Key Identifier:
keyid:33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bd:26:7d:45:40:4b:86:73:54:31:ca:ef:6c:3d:c7:2b:59:
8f:0f:ea:50:2f:bd:64:aa:e9:40:d6:23:14:de:1b:73:40:99:
8b:8e:13:25:1d:2b:57:2e:1d:7d:e0:f2:bc:b1:76:49:02:ab:
b9:e5:6a:00:42:e5:ee:9e:bf:aa:e9:17:4e:77:80:a4:21:e9:
35:98:e1:67:40:5c:50:ec:fc:f0:6b:d6:0b:c5:48:4b:e8:5f:
f9:af:42:34:41:27:36:cb:b8:19:dd:4d:cf:99:a5:cf:93:fc:
d4:cc:6b:d7:bd:3b:fa:2a:eb:47:85:1c:c0:48:43:ae:78:d1:
f1:59:82:b6:f8:02:ed:dc:51:10:7c:cc:99:85:cc:52:4c:75:
98:91:12:8c:5e:33:15:e8:db:e1:2b:f5:66:20:dd:ee:29:a4:
7f:79:22:58:29:75:5d:bc:3f:74:e5:15:09:1e:11:b4:61:c9:
38:5a:54:93:ec:0d:a7:50:19:c0:ad:53:71:89:1b:3d:df:62:
84:d0:8b:c4:52:32:8c:3c:36:91:44:3e:86:6a:39:4e:73:cf:
35:43:bd:83:dd:08:64:ef:2f:d4:48:89:23:ac:85:21:e0:6e:
98:58:1e:a8:3d:10:68:23:aa:53:6d:79:c6:25:55:f7:d2:04:
ff:74:ac:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:42 2025 by rpki-client