Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
File: 8WaLESRDpJbpZlHVgrbMZBP7XHY.mft (raw, json)
Hash identifier: NzS96+0XGJ3+dRganVcEbXaQpjPjRQWMnxFNhKlbj6c=
Subject key identifier: 7C:05:C7:F9:16:66:AA:AD:7A:CD:B5:AD:66:EF:D5:35:85:E4:BD:1D
Authority key identifier: F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
Certificate issuer: /CN=f1668b112443a496e96651d582b6cc6413fb5c76
Certificate serial: 0194BA84C140141CE460FBF6C202E0FF123E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
Manifest number: 040C
Signing time: Fri 31 Jan 2025 04:00:49 +0000
Manifest this update: Fri 31 Jan 2025 04:00:49 +0000
Manifest next update: Sat 01 Feb 2025 04:00:49 +0000
Files and hashes: 1: 8WaLESRDpJbpZlHVgrbMZBP7XHY.crl (hash: DU6go8hI2lGosT6kuHsMKYZRWAmYvCdycAtO6eg+BN0=)
2: zTop8kv04M-CPRutWJMmw5M7s5M.roa (hash: h5ZlzzODOy4Yt5G5OttRKd2ppDnce+EkREvBpaIbOxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:c1:40:14:1c:e4:60:fb:f6:c2:02:e0:ff:12:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1668b112443a496e96651d582b6cc6413fb5c76
Validity
Not Before: Jan 31 04:00:49 2025 GMT
Not After : Feb 1 04:00:49 2025 GMT
Subject: CN=7c05c7f91666aaad7acdb5ad66efd53585e4bd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:18:98:d4:ab:24:0c:8d:40:b6:60:b1:c8:
9c:91:58:21:bd:3e:23:16:88:bc:e9:95:8a:05:df:
d4:3b:2e:83:98:ab:86:6c:cf:46:54:dd:f8:52:c0:
ae:fa:7e:ff:30:15:18:0c:69:f6:3a:dc:47:c8:a6:
3c:5a:d9:91:71:bd:35:6d:d8:99:9d:8f:c0:55:c8:
79:57:fd:60:40:01:34:f2:fa:d0:6c:78:13:f0:8e:
2a:d9:b5:a3:58:10:15:32:0b:e4:b2:92:d5:0f:98:
50:23:e4:2a:45:55:36:58:72:8c:ef:bc:73:0f:c9:
1f:2f:bd:48:22:c5:d6:94:22:28:ee:fd:bb:22:e5:
2d:7a:1e:72:a7:d2:ec:2f:a4:7a:55:1f:d5:9d:09:
fe:69:88:6d:55:7c:ea:5b:96:9d:13:a9:8f:7b:4a:
99:45:4f:64:83:1f:09:d2:6e:5e:71:0d:c4:1a:6e:
4b:0c:21:fc:cd:97:fe:e2:6b:48:86:05:83:d8:ee:
2d:e6:8e:8d:97:59:7a:03:5d:43:8e:e6:b8:fd:aa:
26:71:1c:8e:77:d1:bc:91:1c:02:fd:4a:0d:68:71:
b1:83:6e:a4:df:12:b5:be:ec:cb:cc:a1:60:e9:4c:
bc:81:e4:7c:2e:66:a6:1f:60:22:cb:44:65:7f:bf:
f0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:05:C7:F9:16:66:AA:AD:7A:CD:B5:AD:66:EF:D5:35:85:E4:BD:1D
X509v3 Authority Key Identifier:
keyid:F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d5:96:7e:c2:17:f0:59:eb:6c:1e:14:55:b0:24:f5:1c:18:
95:2d:69:cf:68:76:2f:a7:cc:ee:32:bf:bc:13:ed:49:5e:a7:
3b:00:7e:b9:b0:d9:29:d1:d9:57:a6:20:2f:10:83:04:b9:69:
56:7a:6c:ba:3e:ec:53:4f:95:14:b2:ba:00:e7:15:85:9c:db:
22:e3:4f:3c:fa:99:e1:8a:1f:05:60:96:47:99:27:b3:3f:54:
f9:89:e0:cb:a6:34:95:4a:8b:d3:79:ae:29:c0:92:29:da:35:
61:52:1e:01:cc:eb:cd:b1:58:45:a8:6c:58:31:cb:22:73:c5:
f2:b6:1b:8b:6a:ac:f8:4a:35:ca:4b:8f:58:b1:26:d2:7f:30:
6e:05:a6:9a:b4:d5:22:c9:19:73:c4:a3:a7:ca:10:64:12:35:
35:17:21:10:ec:75:ef:63:02:79:f1:5d:28:44:1f:6b:cc:92:
93:75:45:85:02:40:13:8a:5b:e4:2c:e7:0f:57:52:0a:d3:54:
4f:d8:ef:7d:f1:eb:42:72:e4:cb:b2:ba:df:df:64:f5:72:b3:
01:6c:a5:48:39:62:78:69:7a:61:f6:08:13:d3:8c:b6:64:ae:
46:8c:4f:af:e6:e8:80:6f:93:4c:b6:bc:22:f9:cf:0b:a6:09:
23:9d:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:19 2025 by rpki-client on console-fra.rpki-client.org