Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
File: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft (raw, json)
Hash identifier: Or9bZQ94oW9z8af1CcjdYwCAKvzJfBUd3d6prTCXrO0=
Subject key identifier: 92:5B:5B:D3:A7:12:3A:A8:7F:07:27:8A:89:47:4E:D8:98:B1:F8:02
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 0194BABB428936E776977E87A03544103CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
Manifest number: 1438
Signing time: Fri 31 Jan 2025 05:00:21 +0000
Manifest this update: Fri 31 Jan 2025 05:00:21 +0000
Manifest next update: Sat 01 Feb 2025 05:00:21 +0000
Files and hashes: 1: J6Kzm9-BHVrTMueLm85flmGpBuc.roa (hash: 9/2ACokdd6WeH0EpVJ7k0Vq4xCNM0q7ZPA1hEeNbMHI=)
2: bijRliPCnbFotmMqItnp-5jqXj4.roa (hash: uM/kaOsx/CgALc1h4UDZdPe4HF4oyeAzB65mv4DJvkA=)
3: jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl (hash: mB51sY5DIWvU5bew2vTfcAII7U3OgBLVMBWGFZiYE0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:42:89:36:e7:76:97:7e:87:a0:35:44:10:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Jan 31 05:00:21 2025 GMT
Not After : Feb 1 05:00:21 2025 GMT
Subject: CN=925b5bd3a7123aa87f07278a89474ed898b1f802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:34:0d:0c:d6:4e:7b:a3:ce:5e:f0:55:92:
82:c7:c2:62:3f:99:70:ef:7b:7d:af:af:39:32:d6:
14:50:a4:d7:40:92:4c:29:c9:33:8d:a2:35:ac:bb:
43:42:24:c2:b1:76:92:9e:ed:9d:cd:ef:6f:c4:f5:
6f:49:0e:0b:f9:b2:fd:33:69:ca:b7:37:b6:ea:c0:
23:59:4a:d5:18:1f:8b:2a:53:ff:09:5e:18:ad:2d:
f8:c7:e4:05:75:d7:d4:e5:a2:90:d8:1e:de:c5:86:
2e:22:95:95:46:a1:f3:b7:da:83:36:7b:9e:66:0b:
5a:95:4f:d2:fb:3f:67:3f:6a:8b:ed:1b:cb:8b:17:
9e:60:17:31:81:18:0f:39:7d:c1:82:cc:98:8c:0f:
f4:8a:51:c7:22:41:37:a5:90:3c:82:20:70:45:8e:
f5:7e:33:1b:c3:d4:36:66:03:82:b7:8b:a0:12:ae:
ca:0f:5f:ac:01:61:91:c9:22:8f:ff:94:c5:b5:7d:
5a:b7:a8:39:46:8f:4c:73:39:01:0f:b4:cf:91:ea:
4d:43:1e:ff:6d:9f:a2:56:3c:e9:e7:04:5b:b9:b6:
42:59:26:f4:9f:bf:28:46:30:f1:b9:25:7b:9e:1a:
fa:07:37:28:de:39:4f:71:9e:63:54:aa:ec:82:e7:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5B:5B:D3:A7:12:3A:A8:7F:07:27:8A:89:47:4E:D8:98:B1:F8:02
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e2:09:d7:6a:76:79:11:ca:10:7f:db:c9:2e:bb:0b:ff:30:
20:8c:09:ef:ee:77:26:7e:aa:0e:2d:c6:9e:43:ef:94:d9:aa:
81:51:3d:4b:d1:e9:20:ef:6c:e0:b6:31:ce:4e:3e:16:ad:05:
71:78:1d:9f:eb:62:c9:25:df:94:98:75:86:5f:89:e4:87:f7:
95:e3:f9:02:d5:96:b3:20:ad:5f:42:bc:e1:9e:92:c5:d0:63:
44:85:54:a4:81:39:d3:18:41:b4:6f:55:e7:a1:6e:ef:c8:6a:
b0:89:d2:ce:57:d0:e3:64:84:29:b4:05:92:09:25:db:4e:d7:
17:2b:b7:38:c8:24:8e:f5:53:4b:21:9a:d4:3a:04:b7:f1:4c:
f6:07:7f:9a:3e:4e:2b:f2:a1:aa:3b:41:07:46:c3:93:1e:38:
72:e2:79:4e:55:ea:03:18:00:ed:63:00:01:85:6a:d4:5d:97:
62:68:66:14:1e:a7:2e:b8:61:9e:25:e7:9f:fa:d7:0d:9c:51:
86:ed:77:61:c4:44:0f:9c:b5:bf:d6:ab:41:3c:87:22:2e:f2:
4e:e2:11:a5:24:1d:a9:91:05:c3:93:76:3c:b5:df:c9:1e:fa:
81:7b:50:bb:d5:a3:cb:d1:e8:e4:28:98:4c:9b:16:4b:b5:c7:
64:61:d4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:38 2025 by rpki-client on console-fra.rpki-client.org